Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json)
Hash identifier: NBbBJzwLyfxVTEb6GYeIpZmfFD7sCBcE73rOHSM3iKM=
Subject key identifier: 16:36:53:DA:C1:4F:A7:18:07:CE:44:2E:74:B8:03:E8:7F:E9:2F:70
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial: 0194BBCEF20F9F53A912A9A616CBEF1999E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
Manifest number: 02AF
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: cir9QjnpH25fiv1O0J3juZWgOHKgUTUCbaUchr2xcIo=)
2: W09Hs7YV_rlCMmFfP5OjxUCv0DQ.roa (hash: zUsXUKlv5KVQErO/W3pmAzbRpm0hLO9n4LhnJ2Df8ps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f2:0f:9f:53:a9:12:a9:a6:16:cb:ef:19:99:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=163653dac14fa71807ce442e74b803e87fe92f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:aa:01:86:89:c3:4b:72:17:34:39:7d:d5:
e7:8b:07:0c:7a:6e:1c:70:08:69:92:37:c1:a1:01:
fd:8a:6f:38:00:35:ec:1c:a0:23:e6:46:00:68:60:
ba:94:9c:52:58:da:4a:b4:0d:25:62:f8:b5:88:9d:
93:20:5f:c9:5b:d9:e5:6a:be:c8:a8:5e:e3:ed:af:
3a:b8:5b:42:25:07:92:d5:13:41:71:aa:bd:77:27:
01:0e:6c:0e:f8:23:f2:8d:e9:ad:28:b4:c6:48:3b:
44:a2:7f:2f:ce:f5:9f:46:db:a9:28:4e:7b:c7:61:
01:b4:05:6f:aa:37:49:21:59:77:45:cc:01:8f:fd:
e2:1f:bd:02:64:6e:74:c9:57:e2:71:6d:24:d0:18:
c9:00:fd:03:3e:d3:47:a5:2b:ff:a5:fb:f4:3d:ea:
ac:b2:27:6b:b8:70:61:13:af:50:f5:7e:74:78:60:
d1:b3:ed:9f:62:64:e0:76:9a:a4:62:da:41:9e:69:
e1:88:5f:ee:ce:59:c5:d3:3a:6b:1f:ee:74:36:01:
17:cf:80:81:22:cf:48:43:ed:d3:df:32:f5:16:99:
be:bd:51:e8:b4:fd:15:fd:f2:dc:7d:3c:1e:5b:71:
ce:02:af:3e:72:4c:d6:8b:d2:d1:9f:c8:e2:76:cb:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:53:DA:C1:4F:A7:18:07:CE:44:2E:74:B8:03:E8:7F:E9:2F:70
X509v3 Authority Key Identifier:
keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:71:5c:6e:c9:b6:a1:65:84:89:08:b5:c5:13:f1:bf:91:e0:
4f:fe:ce:a6:a0:a5:30:04:d8:d0:b4:01:31:1b:53:5c:aa:f8:
85:02:f4:ec:a0:06:f1:ad:e1:93:d1:da:fb:9d:84:e9:f9:5d:
3f:8b:e0:b2:9a:17:fd:d4:05:d7:df:74:aa:c3:d6:db:00:8e:
6b:d0:62:26:c4:be:8e:5a:02:e0:51:47:47:2b:59:e0:b9:5b:
d4:a5:36:53:d6:a6:19:d5:a4:17:2c:87:6a:0f:f8:0a:32:16:
66:e0:14:db:15:07:12:25:17:2e:e3:fc:ce:50:22:a0:d4:6c:
17:bc:1f:e5:f2:04:75:0e:99:9c:da:8f:2b:5e:2c:5d:c4:86:
0c:47:c7:81:c9:ed:4a:6f:e3:69:3f:2a:cf:ac:e4:f2:82:47:
93:f6:53:72:d9:ed:d9:dc:cd:b3:a8:0d:8d:d7:22:a0:56:f5:
94:de:6a:11:c6:09:63:ed:18:24:5a:db:52:b6:9b:73:6e:bf:
39:d2:ea:a2:c4:44:da:1c:14:2b:5d:c4:c4:af:d2:b0:9c:e4:
fe:03:d9:ee:56:78:41:35:e3:18:33:28:63:8e:7c:ae:07:d9:
17:ab:3d:22:52:df:8f:fa:5c:8b:10:a2:93:7a:22:a9:dc:d9:
3d:b9:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client