Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: jg7hkSHtf+ttkDL+YoovA1JzDvFb23cj+9dmY9xGTa8=
Subject key identifier: A1:4E:0E:57:4D:8D:DC:5B:0D:53:12:45:75:5B:45:EB:2F:58:B8:80
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 0194BD85494CFCAE4F36D5F264093B919258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 12F3
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: OnKvL0q7JLxtwo4YTSgxnOJu2mZWaQey5iSCk7lOwTE=)
2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:49:4c:fc:ae:4f:36:d5:f2:64:09:3b:91:92:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=a14e0e574d8ddc5b0d531245755b45eb2f58b880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:a5:b2:43:58:39:67:29:1d:d1:c0:77:9a:
57:90:3a:42:7e:c2:35:72:1a:ca:2a:d9:08:82:d4:
58:e8:8f:8d:bb:d3:c9:36:75:54:e2:7a:56:b3:2c:
e6:c5:80:ba:e5:6b:4d:fa:f9:c5:75:35:f3:6a:1e:
f3:76:e1:2a:57:36:29:c2:b8:87:cf:78:41:8b:8a:
45:3d:95:0f:bc:ec:e3:0a:c2:72:a2:74:bc:43:92:
30:44:f9:d5:85:41:f2:01:0f:d3:55:95:22:dc:b5:
ab:df:66:25:7d:2d:4c:44:90:81:9e:a7:84:ba:3d:
17:a9:9f:a1:50:51:6f:cf:6a:5e:ca:c6:95:1f:7e:
d2:1e:68:52:57:62:21:96:6c:a8:41:6c:5d:0e:0d:
a9:a4:42:0a:5d:fe:43:f9:6b:c5:52:59:bf:74:c3:
a7:10:6e:52:55:28:34:33:d7:1c:f7:24:87:53:6e:
cc:e6:4f:7b:9b:83:98:4a:e7:af:69:c7:3a:02:de:
f9:1f:98:5c:ca:b2:99:da:67:93:bc:fc:55:54:6c:
de:d0:54:b9:c2:b3:b1:f2:58:3a:b9:5d:ea:0a:59:
ee:db:7a:e6:87:18:ce:f8:08:5b:9e:f9:f4:3e:eb:
6d:6b:51:d5:2e:bc:28:df:fc:80:4f:4f:cc:29:86:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:0E:57:4D:8D:DC:5B:0D:53:12:45:75:5B:45:EB:2F:58:B8:80
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:36:e7:00:c6:b0:84:62:69:bc:ed:d7:72:ca:70:fe:61:83:
78:75:f3:c9:09:05:5a:77:41:df:36:38:0d:13:63:65:db:eb:
f0:79:04:35:37:e9:55:87:13:58:4a:0f:c8:02:ed:42:ce:7c:
88:0b:28:74:3f:0f:79:7f:f7:17:3a:d0:c1:d6:ef:34:1c:a8:
6e:b7:e2:59:4a:9f:96:a3:bf:31:79:95:91:06:2e:c8:8c:96:
d5:64:eb:7a:a8:fa:04:6f:53:68:a1:30:74:d6:c4:36:93:bf:
1d:08:88:e7:8c:46:6a:5a:06:ae:ab:88:76:10:e2:73:e1:a1:
63:8e:9b:cc:3b:10:4b:e6:0a:72:8a:09:88:0b:80:36:d7:84:
9b:cb:71:92:c0:bf:a4:70:0b:f7:87:bf:04:13:ca:cd:a5:9b:
a8:a2:e8:76:fc:78:a8:ec:98:6c:a3:51:e1:07:8d:cb:b4:cc:
60:0d:77:3c:44:1a:0f:3f:d4:db:b0:63:c3:0f:27:a6:ee:b2:
4f:77:62:48:08:23:9d:c7:c1:f9:f7:c4:75:93:93:69:ce:52:
c3:4f:a3:f8:0b:24:7a:54:9b:35:c1:1b:92:39:96:68:0c:b2:
44:ec:30:d6:6c:c0:8e:d3:37:0e:75:a2:1b:90:ce:ff:8d:70:
7a:c1:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:55 2025 by rpki-client