Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: OG2sRq6djQztyzdf0mxmH4DoEnFvv282lsxoq3lOIV0=
Subject key identifier: 6B:BA:59:B5:BA:50:BB:B8:EE:F6:A5:A6:12:A7:1D:46:33:E4:C5:6C
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 0194BC73206EFAC1DAE5FF34F5D6380B2CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1385
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: r35lJKlIyZQ+lOL2NdYkYUtDNCSU323H3BeF9ON9o5w=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:20:6e:fa:c1:da:e5:ff:34:f5:d6:38:0b:2c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=6bba59b5ba50bbb8eef6a5a612a71d4633e4c56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:40:b3:f8:7c:00:bf:1d:af:b6:eb:a4:db:
08:d0:d9:f7:71:84:0b:3d:c7:8d:6d:18:7c:5f:09:
8d:f2:ee:bf:45:0b:90:b2:be:32:c4:46:85:bf:3c:
0e:cb:37:9e:e8:c5:ed:3d:48:08:97:62:5e:91:d3:
56:74:21:8d:f5:39:eb:57:60:45:84:c8:53:a6:1c:
1c:ea:f8:d1:41:03:0a:8c:ef:da:7d:f8:ee:b3:c8:
e0:0e:ac:fb:48:85:8a:3b:84:aa:f2:40:8f:74:0f:
f2:5f:16:6b:19:04:37:1e:ac:03:bd:9f:42:b4:f4:
98:c9:51:43:f2:e3:0c:bf:79:0b:8c:e0:03:48:57:
f7:ff:59:9b:45:c9:f3:07:fa:53:8f:25:4f:e9:53:
45:ce:53:69:0a:f0:e3:30:86:06:42:58:f2:43:58:
d2:db:5b:46:61:f4:35:ae:68:6a:d5:c7:98:90:29:
c2:fd:7a:5d:f7:d2:13:9d:d5:49:20:89:bc:fc:e8:
85:57:45:71:22:f2:99:26:22:58:5d:fe:4e:2d:73:
53:5c:89:0a:95:14:fa:c9:cd:28:93:64:dd:e0:dd:
82:23:eb:07:44:fb:95:f7:5c:de:5a:34:9d:b6:5b:
b1:34:45:4c:78:0e:7a:9b:c9:77:bf:01:30:d6:79:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:59:B5:BA:50:BB:B8:EE:F6:A5:A6:12:A7:1D:46:33:E4:C5:6C
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e5:56:ad:0a:6d:21:34:cb:03:58:17:21:f3:11:2c:88:2e:
b7:de:c2:cd:55:dd:9c:a0:dc:e7:18:7f:56:67:dc:2e:9e:da:
60:ca:cc:6d:27:ff:0d:c2:ac:88:a6:f9:a6:e4:ab:82:47:3e:
de:ed:57:8f:62:82:09:6a:df:02:ff:60:bd:1c:02:c6:96:8c:
1b:f7:64:67:bb:ba:77:4c:1a:8c:09:31:c8:6a:41:25:af:12:
7d:f1:36:30:b7:bc:77:a7:27:19:2b:a8:26:17:ba:a5:33:b9:
23:05:9a:12:66:de:b8:de:6e:37:87:cb:cb:bb:99:1e:7b:dc:
34:ee:5d:4c:e9:c1:ff:c3:df:7f:c2:fa:21:08:08:43:7b:c0:
e7:4b:ac:ec:74:2e:80:50:c0:a0:20:bc:e2:9b:3e:38:e3:02:
6b:cd:7a:a5:32:7f:0d:ad:c2:97:1d:84:60:4f:c6:f1:7a:77:
e1:4d:e0:b3:87:44:8b:36:52:50:e2:8e:36:c2:a7:e2:90:74:
d9:2d:b2:fd:e6:ed:6f:00:b8:02:a4:d5:17:71:01:84:b7:a7:
8a:fc:20:f0:2d:d2:f3:6f:c1:5e:25:26:77:db:3f:6a:f9:64:
6e:d0:7c:13:a5:b3:8d:ec:88:7e:cb:8a:2d:a8:30:ac:b2:d2:
cc:14:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:21 2025 by rpki-client