Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: UIsP6/Dod3IfPNgMhBwgnQzn78vLJ8an4Vtg8AsFGio=
Subject key identifier: D9:32:E7:4A:04:83:50:D1:A9:52:AF:B3:62:4E:0A:93:2A:64:27:37
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 0194BC3C5120CDAC9C946BB22AB2A6733173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: BpEJ4p2EizDpYiIOyBLddNxMedId7D1cSvPVHp11bbA=)
3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:20:cd:ac:9c:94:6b:b2:2a:b2:a6:73:31:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=d932e74a048350d1a952afb3624e0a932a642737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:74:42:89:f8:88:d6:82:3b:f7:58:22:a0:
f6:15:9f:4c:9d:68:2c:86:a0:b3:00:49:a4:48:b6:
6d:f1:c0:ba:63:bb:eb:2e:d1:34:9c:7d:c9:37:48:
79:f3:12:7f:d9:b2:aa:94:af:dd:b2:99:7e:f8:b2:
63:0d:f8:79:33:a3:e7:05:c1:3d:b8:45:2e:51:3e:
c2:e1:32:dd:07:07:16:1e:6f:df:4c:a7:d4:2d:dd:
db:55:3d:e2:ef:f7:e8:a5:ef:8e:11:e7:27:bb:1c:
fc:9a:f0:03:a4:f5:85:6c:2b:40:c6:cd:e6:21:29:
a9:b1:b0:f7:c6:b9:42:95:e3:6d:65:80:cb:e1:37:
9c:22:8d:cb:5a:94:f5:a1:ab:93:40:62:62:d3:f2:
c4:ee:2f:b7:29:3c:45:e2:f8:66:02:52:db:a9:fb:
8f:32:01:8e:63:b2:c7:41:3a:35:ca:cd:47:44:2a:
e1:55:fd:f7:86:5d:63:c3:ea:60:bb:66:4e:af:2a:
12:6b:18:fe:41:f1:72:b8:f0:f9:64:8d:a3:42:1a:
60:82:e0:66:e3:46:ac:41:6e:94:26:11:74:d6:df:
5e:30:98:79:08:99:ed:84:4d:7c:cf:7e:71:24:63:
e6:31:a9:da:cb:7c:34:af:e7:45:42:d9:af:56:a1:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:E7:4A:04:83:50:D1:A9:52:AF:B3:62:4E:0A:93:2A:64:27:37
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c8:d3:0e:f6:8f:27:33:0b:80:c8:ca:61:09:44:1d:17:d6:
65:5e:3a:2c:21:29:03:e3:44:d4:32:cf:69:8e:6b:8b:72:69:
c8:5b:0d:34:9e:87:f1:41:9c:90:a2:8f:91:b3:42:8b:f2:2e:
95:14:3d:4d:ae:00:ff:6c:ef:df:e4:4e:bd:47:c6:7c:fe:3f:
fa:66:da:06:67:1a:6d:5d:0d:c8:39:a1:f2:c3:a6:73:2d:17:
1e:87:e1:bc:db:79:dc:0c:a5:bf:15:5d:56:cf:65:f5:87:7b:
3b:fe:4c:f7:a4:b9:a4:36:44:83:01:d2:78:af:af:f8:bc:49:
13:2d:58:28:f2:1b:2b:ad:60:d9:4a:93:bd:61:9f:3a:4c:6c:
1a:0e:0c:47:97:07:94:50:b5:84:db:67:8e:05:26:68:27:74:
08:6a:6b:d1:d2:12:75:d3:14:ee:40:ed:71:63:1f:8a:25:08:
58:08:8d:7e:9d:b2:75:ef:3a:21:a9:0a:0e:7f:c0:cb:8e:66:
68:e1:ba:d1:0d:e5:c9:06:25:c3:b6:cc:19:6d:4c:df:30:04:
6d:f5:c4:ab:3c:04:83:1b:f9:4f:5c:11:f0:dd:a1:03:2d:1d:
6c:bb:db:3c:24:c5:e5:a6:4c:52:ba:90:79:10:b6:5f:f0:7e:
2f:19:63:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:03 2025 by rpki-client