Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: AbyiK5r2CHgNP+R2GcP585d71RIjGCA23vU0KRUC6Lw=
Subject key identifier: 28:C5:06:B5:86:D6:EA:CE:BE:4C:4D:76:D3:8D:38:C1:75:46:18:BF
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 0194BD179289E016E5D2A839760957A096FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: gJl0mGmOkHbWg0NyqvYEKFWLtt2MhUqzTbJQuk/eeQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:89:e0:16:e5:d2:a8:39:76:09:57:a0:96:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=28c506b586d6eacebe4c4d76d38d38c1754618bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:90:af:a7:f3:b8:44:c6:98:6b:ce:44:fa:
6e:e1:fd:12:c6:21:4b:c9:db:17:74:a3:51:09:cb:
9a:dc:fe:e0:c2:28:f4:0a:92:0a:a4:ad:78:41:35:
bc:0f:29:30:36:25:10:b3:57:fc:19:a8:03:da:62:
1d:52:a9:45:71:b9:00:62:da:af:15:86:d0:ed:74:
71:2c:d6:6e:db:e2:e7:0e:05:18:d8:22:5e:ba:9c:
d6:85:40:94:0c:3b:23:31:32:60:1d:26:96:20:38:
97:72:19:46:5e:9c:2d:4f:9c:f3:ff:8f:7a:c3:0b:
fc:7c:1b:73:34:13:8d:81:00:a4:a7:87:46:4d:16:
87:26:e2:d7:9e:ca:7f:34:93:a9:0a:62:f1:37:2c:
65:72:1e:41:b4:f8:73:3b:ac:d4:d3:08:26:c8:7b:
af:2d:09:b7:aa:15:12:37:f9:3d:ff:e8:26:08:0d:
f6:5f:37:5c:65:48:4f:f9:29:2f:82:fe:ef:ae:cb:
51:71:25:87:f3:8c:e9:89:99:82:ad:6d:d7:bc:9b:
0e:30:5c:cd:5a:b2:84:43:5a:c3:37:3d:4b:c5:ac:
eb:41:52:f3:45:6f:7b:46:91:2d:13:3d:ff:11:c1:
50:02:a5:a6:77:74:74:50:22:4d:7f:63:e7:be:f1:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:06:B5:86:D6:EA:CE:BE:4C:4D:76:D3:8D:38:C1:75:46:18:BF
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b8:08:38:2d:90:e9:11:ab:24:f8:7f:fc:ca:27:16:4a:03:
04:2f:cb:f2:b0:ae:e4:2f:aa:06:2f:b4:be:26:a0:59:21:4d:
55:16:6b:02:56:97:58:9a:b0:73:23:2f:2d:f6:05:8b:f6:f4:
de:e0:ee:be:2f:77:93:a6:80:db:ad:64:2a:75:36:d8:42:ea:
01:aa:9b:b5:c7:71:ce:3f:fd:a2:cc:7e:87:7a:02:48:bc:77:
d2:6d:01:be:41:2a:c3:d5:01:39:53:30:74:ed:24:5f:cc:12:
27:e0:e0:d6:ec:06:ee:46:7f:4e:39:6e:f2:c0:74:bf:08:a9:
a5:c9:8a:e5:bc:29:8f:43:55:f4:05:9a:f2:e8:98:81:f9:41:
c5:4d:d3:f6:c5:9b:ec:ac:26:7c:d2:82:d6:57:b3:9e:92:c1:
c4:54:02:73:da:54:b4:b8:c1:2b:16:fc:32:b7:fe:b2:4d:6d:
aa:5c:03:0d:8f:81:d7:6d:6e:bf:ea:83:f7:3e:67:5e:fd:69:
a6:59:da:44:b6:5c:a0:0e:21:c1:f3:f5:af:d1:f2:a7:a5:46:
af:8a:b3:d6:17:be:b8:ed:ad:50:a1:58:04:36:f4:5f:84:d4:
05:ad:98:79:7a:bb:7a:b6:c9:61:68:a2:1b:d1:41:8b:9d:1d:
46:0d:45:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:10 2025 by rpki-client