Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: FjdUx6GjE53L3KKq3aAPvmsG01jljMAoKYIyl3XntAo=
Subject key identifier: 9D:A8:C2:EA:16:57:48:BB:8C:7B:31:8C:BB:CD:D1:DD:A3:97:BA:ED
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 0194BC3BDFB01898C7968453BDBC5B13ABF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 0E1B
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: 0Xx1QONdMt1MOesDBgjygEQgdQdB6bo79YsFx1xCO/g=)
2: TQTaN9R3PROnWSlPAnOimZ3OkV0.roa (hash: 6MvOdY9qe95Xeb6bYl6JjgUIxMzjpmO+qyLURJWgUDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:b0:18:98:c7:96:84:53:bd:bc:5b:13:ab:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=9da8c2ea165748bb8c7b318cbbcdd1dda397baed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:04:f6:89:b9:f9:cd:2b:cf:c5:50:d3:bd:
65:70:d7:74:8c:44:98:4b:48:8b:b8:cc:46:f0:ee:
e5:bd:80:78:75:73:9b:d3:ab:5a:4f:3e:50:e8:21:
8f:6d:4c:40:72:27:8c:58:72:f0:cb:26:b2:30:5c:
07:15:22:f9:89:95:1a:aa:00:b6:5a:0e:1d:f4:1f:
c1:fc:28:f2:18:68:7d:93:a6:56:67:fe:4e:d6:28:
65:57:0b:99:5b:6e:90:d5:f1:1d:44:d6:1d:e8:95:
a7:0a:c4:bb:ea:50:73:3b:d5:36:fa:72:8f:05:16:
dd:ad:f2:3f:05:b6:68:2f:5e:f3:f5:1f:7e:a9:fc:
f2:5a:94:0e:94:9f:82:39:b7:22:84:c0:e5:41:0b:
43:10:31:2d:62:71:0d:7f:6f:65:e0:ab:55:49:f7:
fa:97:31:d5:43:44:a0:49:6b:54:84:76:95:c9:fe:
5c:1a:ca:41:85:f4:17:15:8c:ca:b8:15:c4:a7:e3:
ec:4e:38:95:40:0b:0e:28:72:46:fa:cd:e0:d9:df:
55:a6:52:7e:ff:e1:d0:36:35:ba:69:1f:bf:dc:0d:
b5:a6:27:fb:b9:e7:cb:14:06:61:7b:f1:2a:78:21:
26:ab:5b:14:f8:a7:03:ac:0e:5d:d2:a9:d3:c3:e9:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:C2:EA:16:57:48:BB:8C:7B:31:8C:BB:CD:D1:DD:A3:97:BA:ED
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6b:a3:29:6d:67:d0:30:55:ec:84:e0:5e:c7:d5:ef:28:14:
08:03:03:5d:2c:61:b6:0a:f1:ce:d0:14:de:ad:bb:5f:6b:1d:
5c:58:c7:b8:1f:47:c4:e9:bb:bb:4c:5b:2e:c6:9a:73:e8:e3:
7b:fa:de:30:d3:23:03:84:a8:4b:84:90:a8:2c:58:2c:9b:23:
ca:34:0d:05:21:19:61:89:e1:1e:25:aa:fa:79:66:25:99:52:
45:68:d2:48:4e:6f:4a:3d:78:f2:0d:c2:99:63:29:29:12:09:
30:59:44:e2:94:a6:3b:a1:09:75:db:c3:35:f9:fd:c0:fe:4b:
20:34:7b:ac:c0:89:b5:5f:63:14:da:76:27:c1:8b:17:69:78:
c9:65:51:10:83:28:31:4c:55:1e:13:6b:11:7d:b0:86:7b:10:
fc:20:e9:87:b2:4b:b6:a8:c6:2e:bd:7b:8a:0f:92:b0:ba:08:
29:97:7d:17:08:a4:03:6f:45:b1:34:3f:f9:65:03:c2:0a:52:
ac:a6:d6:e1:57:6f:3d:eb:22:2b:1c:e4:df:4d:89:9b:ac:43:
51:73:f6:8c:57:c4:41:61:e1:05:d6:b2:4c:c2:07:a9:57:59:
59:4a:46:45:f0:b7:d2:01:f0:f0:cf:e6:ce:36:0d:20:36:c8:
89:6f:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:06 2025 by rpki-client