Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: 9gCnE1t2fVfnx3Z0FBKsIZXpEbkhteEt6oxnqwUyEKg=
Subject key identifier: 35:E2:EB:72:BE:38:93:C6:2D:C7:54:67:8E:A6:CA:CD:18:1B:F7:AB
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 0194BC3BEE36306CBF3E3DF97DDDA2A221D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 08E3
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: J8bET9ZAz76Kq1mihcXmSXQDwiJ9zWIEjdueUvFKQPk=)
2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:36:30:6c:bf:3e:3d:f9:7d:dd:a2:a2:21:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=35e2eb72be3893c62dc754678ea6cacd181bf7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:ff:42:e7:30:55:20:17:a3:45:83:52:71:
e0:58:9d:91:fd:67:ac:be:1d:f9:c8:f5:0b:83:4c:
79:38:00:e3:7e:b3:2a:7c:46:c7:9c:e5:90:12:bc:
14:c6:b6:c7:92:ff:9a:da:ca:d8:48:0f:84:47:2c:
3c:46:32:b6:de:4d:91:89:85:18:c3:c2:3c:1f:d5:
ce:2b:7f:ce:3b:6f:3e:c8:13:e5:d5:d1:be:04:db:
5e:de:72:f5:bc:00:3a:4b:79:8a:4a:7f:a2:30:d6:
19:56:1a:5b:9f:ab:34:88:56:ac:27:87:76:03:09:
de:fb:8a:6a:16:a0:c5:23:44:e9:aa:c9:ef:99:93:
65:e2:0f:9d:fe:c5:5d:3c:42:b6:3e:2a:bb:f2:c1:
2d:32:6b:98:25:8e:f4:2c:e8:79:7e:94:f6:cb:eb:
20:c7:b5:70:1f:9e:a9:47:96:65:31:a8:a4:00:4a:
9c:b9:9d:08:67:dd:6b:42:bf:50:67:9f:02:ca:cc:
ee:9e:45:9c:a6:55:bb:d1:c0:4f:79:b9:e7:bb:3b:
cd:2c:5b:38:69:a2:b4:47:8a:69:2e:cc:00:e9:19:
1c:1a:c2:9b:21:de:3d:58:d8:56:b0:b6:bd:2a:a4:
1f:bc:f6:5b:8a:9c:a4:6d:86:5b:5d:d1:11:d2:e0:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E2:EB:72:BE:38:93:C6:2D:C7:54:67:8E:A6:CA:CD:18:1B:F7:AB
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:37:a2:5b:3f:74:57:79:9b:35:8e:43:bf:d3:94:04:1d:57:
98:31:a9:61:6c:e3:46:10:b5:1a:c5:2a:2d:fb:52:41:73:07:
1a:1f:58:f3:d3:e5:14:1b:35:3e:84:13:64:12:c7:a4:20:d1:
3a:7e:70:6b:7f:4c:b2:d3:a4:05:f2:1c:93:d3:a5:2b:82:9b:
b1:ad:ae:4d:e9:13:77:83:d3:d7:30:6a:89:7e:98:0d:69:b5:
02:e5:37:c0:26:da:99:69:fa:b4:bb:8f:e1:af:29:62:69:f4:
ba:60:7e:ef:37:e7:51:f1:e9:44:0d:c9:31:9a:3b:9c:9d:b9:
16:e9:e9:a2:42:3c:88:7b:bf:29:70:0a:75:35:c0:dc:78:18:
05:62:06:7c:db:b9:4b:a3:6c:77:2a:c4:fd:49:86:1b:95:b5:
33:10:48:f3:69:84:4d:cc:21:fe:81:bc:a8:95:c1:e4:03:25:
58:46:74:ee:66:0a:89:a5:09:00:90:e8:f3:62:be:95:53:9b:
8d:86:69:f0:a9:1f:c4:a2:30:dd:45:87:9a:87:46:0f:fc:7e:
3d:c5:12:78:5a:ae:8a:6b:8e:22:d3:3c:70:bb:c2:0c:37:f7:
23:fb:c2:12:46:ed:5d:8e:e2:47:f7:30:9c:65:a2:6b:20:5b:
0c:c7:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:27 2025 by rpki-client