Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
File: NTPUOQNczcXww50bP7FhlbVV_KM.mft (raw, json)
Hash identifier: yUz+Pr8cnC2ItlZf7uIp/UASM5VECytshCB0Wq2vdeE=
Subject key identifier: B5:8D:65:F3:81:98:83:80:53:18:A0:0C:81:59:54:AB:AB:F7:8C:C4
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Certificate issuer: /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial: 0194BCAA0F1C07965A46A1D3450CF5FD5557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
Manifest number: 0920
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: NTPUOQNczcXww50bP7FhlbVV_KM.crl (hash: lLP3WyHLXJwOgUAEUw68ouncFEbaiQHdnJ+5IlMXtJQ=)
2: rAVoUvT6eIAoJ9DaPocwQDvvkoc.roa (hash: 1BFZOwvrkIRFql6imBqxsdk52Ly1yvo/6JadLNNcDZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0f:1c:07:96:5a:46:a1:d3:45:0c:f5:fd:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=b58d65f3819883805318a00c815954ababf78cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:6a:84:c9:00:4d:3f:32:ec:d3:22:8b:fd:
aa:dd:57:ef:12:60:14:bf:ca:85:47:50:86:7a:34:
5d:b9:57:fb:ac:b4:3b:69:4c:94:43:c8:ba:e3:bb:
d5:fd:36:18:00:eb:77:e5:d5:23:7a:39:e2:f9:dd:
b9:e3:d5:62:b9:1e:6e:64:9c:97:f9:58:25:45:7c:
35:50:89:21:36:51:99:21:fe:70:ab:87:4c:88:38:
90:20:5a:f1:94:5b:f1:d2:5e:43:15:c1:48:cf:15:
cf:3c:2c:6e:bd:b1:71:2c:a5:10:12:46:19:a9:3c:
40:4d:41:a2:f9:4a:7b:88:30:3e:9d:b7:39:d8:68:
2a:1b:76:97:b8:bb:67:2f:78:ff:27:5d:81:02:c2:
34:40:b8:b9:d7:d6:bb:30:61:91:f3:de:1f:d8:26:
6c:4f:9a:1f:57:85:86:17:62:18:ad:9c:df:62:45:
38:13:7d:5e:c5:a0:02:a8:3d:92:28:18:dc:34:70:
50:29:28:3a:2b:9e:31:a5:b8:23:de:ba:96:ac:4c:
f1:c6:04:c1:95:81:94:2e:7a:50:5e:0a:8b:f5:ce:
ec:3c:0d:9c:88:df:2e:a8:05:2a:9c:aa:ef:3b:10:
51:22:2e:c8:4f:3c:db:9f:a0:e1:06:18:fa:db:80:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:65:F3:81:98:83:80:53:18:A0:0C:81:59:54:AB:AB:F7:8C:C4
X509v3 Authority Key Identifier:
keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:41:e5:88:68:24:a6:82:cc:4f:d1:6a:81:5e:eb:4e:dd:50:
80:04:51:40:48:57:8e:14:fa:10:c7:b7:8d:29:01:e4:65:8b:
3a:23:b4:dd:9c:e9:76:45:95:28:5d:21:82:fc:91:76:6b:6d:
71:82:3f:e0:94:c7:c3:54:fd:91:7a:ea:71:70:0f:78:34:4d:
3e:81:0c:ff:d0:7f:df:b6:32:71:e9:50:01:e9:7a:5d:19:ae:
7a:ad:21:af:48:f1:54:27:3f:55:d7:01:60:c6:57:e4:b3:ae:
a8:5e:fd:84:6f:dc:53:d9:f3:d0:5c:ea:08:8a:f7:89:54:9f:
2c:09:84:79:8a:d4:64:cf:6f:22:4b:ee:85:39:a9:27:cd:f9:
fe:f9:a9:48:c2:07:46:7b:6b:e9:5a:4e:15:52:ac:76:3e:d8:
de:2b:d4:cf:55:46:eb:27:fc:83:d6:f8:36:db:3f:26:b1:67:
04:b9:26:c2:81:57:89:ee:89:80:9f:01:97:a3:34:ce:ed:40:
ea:8a:9a:21:3d:1c:9a:2a:2b:e6:a5:51:fe:69:71:82:31:2d:
34:ce:84:53:45:f2:88:9b:ce:4d:64:81:f8:dd:41:34:18:a3:
7a:46:8e:2d:67:02:f0:b7:1a:06:92:55:02:42:40:be:3a:c7:
c3:2f:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:54 2025 by rpki-client