Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File: NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier: 4xDbx4Zk6fHBTRuS6M2g6OBq4Vqu5vKC+iaDwKEjyUE=
Subject key identifier: 83:6C:82:0A:3C:2E:1C:DD:0D:4F:7D:18:07:2D:12:97:80:D3:82:94
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 0194BBCE9F405420F4B3CECB67595CD16423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number: 0CBC
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=)
2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=)
3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=)
4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: IXpgz9nCXLjJTyVDT1a+q4HCJzs7mq/VtuFrmQaUdqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:40:54:20:f4:b3:ce:cb:67:59:5c:d1:64:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=836c820a3c2e1cdd0d4f7d18072d129780d38294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:2e:44:5b:8d:9a:ed:28:cf:9d:0e:54:f9:
6f:f9:7d:de:ce:da:c0:c2:e1:85:b9:51:93:db:72:
63:3b:ac:0a:a5:91:de:ad:ee:54:72:d9:44:06:40:
b5:6f:96:77:de:2c:dc:18:fd:07:5c:1d:8f:fd:32:
63:21:6e:e2:e6:e1:02:b7:2a:78:06:6a:2c:03:a3:
44:06:a4:30:74:2f:87:71:b6:13:49:7d:bc:16:73:
5f:d1:20:e7:65:57:f7:ff:2c:2b:74:3c:ce:04:57:
ae:73:2b:c6:95:69:22:9a:65:3a:2c:cd:5a:2b:27:
1b:e0:db:72:63:ad:8a:0f:90:23:fa:7f:b3:76:c2:
56:2b:23:6d:64:08:32:b6:11:51:52:8f:bc:aa:01:
4c:3b:5b:e6:e5:58:b6:5e:83:45:2a:61:42:4f:d9:
5b:8f:1f:b2:f8:ad:41:6c:04:8f:34:34:aa:04:9d:
a0:d5:e4:c0:4b:dd:70:b5:56:e9:74:12:2b:62:17:
69:b0:2d:d7:07:e6:cb:74:b0:8a:1a:0c:0b:a5:d4:
7b:9c:e8:8a:6e:00:6a:c2:b4:6e:59:0a:df:04:77:
28:70:38:7e:72:ce:d9:b6:f0:eb:b2:8f:d5:2a:2c:
0d:77:46:4a:bc:c9:36:8a:35:af:f4:2f:7a:6e:e2:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6C:82:0A:3C:2E:1C:DD:0D:4F:7D:18:07:2D:12:97:80:D3:82:94
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8f:0b:24:8b:15:19:9e:3b:0f:6b:69:5b:77:f0:59:38:2e:
39:8d:44:3c:ad:7f:64:29:a7:28:77:fd:61:fb:c0:ac:77:0c:
42:b0:70:7b:b7:88:36:1f:d9:1f:43:b9:ea:46:2f:33:e3:96:
03:c1:01:21:fb:d4:48:95:0f:e6:c7:c9:76:24:25:4e:1a:df:
11:56:d2:4d:ef:0e:e5:c2:e4:a0:d3:df:d7:1a:6a:c1:4c:d4:
b8:f0:b1:3f:db:6b:2c:a1:95:b0:b3:13:29:a3:ed:82:ea:04:
ad:77:ad:64:84:5c:32:1e:4e:08:fe:e1:27:ca:d9:07:0e:e3:
76:3f:1b:d6:51:89:58:2c:ec:fd:ad:9b:ee:9a:e7:52:70:a9:
83:55:e3:cc:5e:b5:30:bb:87:d4:f2:31:55:cf:d3:4e:19:88:
a8:bf:56:ff:d7:2e:9f:ac:27:f9:2e:d4:6e:61:49:f6:91:85:
ef:a2:31:7a:46:b1:cb:3c:62:e2:f0:96:35:bb:23:89:b2:95:
67:ed:bf:d4:70:85:16:89:2a:e0:a7:7b:26:74:bb:ed:a0:96:
3d:f9:1d:d5:db:5f:f1:90:c6:02:12:b5:d8:b0:2a:cb:a1:fd:
23:a9:0e:da:f8:03:4c:ba:dd:d1:3f:35:02:73:8e:51:5d:df:
cd:cb:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:24 2025 by rpki-client