Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: 6xeKGxVyvhRDqGsDo5snsu6F5Sw+p8YBf9+bsiTcvVQ=
Subject key identifier: 93:BF:1C:16:C6:D5:1F:C9:B4:06:96:EC:02:2D:C7:77:9A:19:B3:E6
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 0194BD4E6983B48BCFCAAF3BA0BADA9B7AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 03D1
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: ESLWG9ec4RQq+Qa2z3nNN6+GrP+HbiismA1ZA6IZiJg=)
2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:69:83:b4:8b:cf:ca:af:3b:a0:ba:da:9b:7a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=93bf1c16c6d51fc9b40696ec022dc7779a19b3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:72:2e:68:1c:87:39:8b:17:bd:34:b8:aa:
ff:48:0b:00:64:38:17:80:b5:7b:c3:48:01:60:62:
c3:c5:1f:14:37:09:94:3f:c4:c2:86:70:41:76:03:
c5:34:15:46:c9:48:58:c3:e9:89:f6:d7:3c:55:aa:
67:fd:19:e3:ba:f2:67:91:cb:96:82:4a:b0:f0:4e:
c9:03:b5:21:fb:39:c5:a3:02:a2:d4:3a:29:b2:09:
50:26:af:5d:ef:62:f8:f1:43:5d:58:45:a4:6a:12:
5a:78:f0:d6:43:db:59:c2:b0:be:cb:74:e7:a7:96:
44:11:96:70:c6:75:44:bb:c6:e7:5a:2d:3f:c4:e5:
2c:30:62:5b:5f:81:5d:d5:2c:3b:c3:e7:cb:32:b5:
7b:52:8b:c7:ca:ac:fe:41:75:20:38:8d:5a:ba:7c:
a2:5f:cf:1a:40:66:1b:f4:e2:76:6b:5e:a3:f5:53:
b6:52:2e:1e:2b:4b:2e:4d:a0:62:f6:a1:f8:d7:13:
48:b1:f4:8b:64:4a:dc:4d:ed:3c:89:5e:a1:9e:4f:
3c:0d:80:17:73:00:2b:c4:11:89:91:84:10:15:10:
48:0e:67:ae:3c:d2:f1:9d:1e:69:55:fb:75:63:07:
f7:ac:1d:b9:2a:af:cc:35:13:01:66:e3:3a:b8:01:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BF:1C:16:C6:D5:1F:C9:B4:06:96:EC:02:2D:C7:77:9A:19:B3:E6
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cc:b0:ff:61:ed:8f:b9:a2:b4:cd:96:1f:78:4d:cc:a1:d0:
88:96:f1:af:7f:6b:bf:df:88:a7:a3:94:a7:ce:3f:ef:9f:43:
81:d5:f3:4e:ca:4e:8a:56:9a:c7:38:8e:b5:33:08:15:31:82:
5c:61:a9:0c:90:15:d3:12:88:cb:1e:7c:10:89:8e:c8:7c:7f:
9d:9f:ee:37:41:e2:b3:5c:3d:6b:de:32:29:39:cb:bb:ca:63:
f3:af:8f:68:89:bd:bc:c9:61:8b:b1:e2:bb:2c:a1:24:da:ef:
9b:b6:cb:26:a1:c0:57:c7:90:45:a9:4e:84:bc:cd:4d:c0:92:
dc:7b:4d:7a:62:ab:d9:1f:2b:f1:19:b6:d7:12:58:41:80:a0:
c2:88:65:9b:3a:6a:32:e0:ca:d5:ed:4a:8b:e6:62:e3:2f:0f:
2c:42:86:21:4a:09:9e:22:65:50:7f:b6:b6:d5:c4:55:0c:63:
32:72:a8:6c:39:3d:43:dd:50:02:95:79:01:4c:8c:84:9e:2f:
ff:9e:9d:1b:93:a2:94:71:6b:cd:03:8c:12:3c:c0:cd:9e:8a:
d0:0b:f8:d2:3c:3d:42:ef:76:09:64:c4:a4:ce:d9:3a:59:67:
5f:87:98:b8:10:46:fc:53:08:55:d1:0d:f2:95:9a:94:f2:1d:
a9:19:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:33 2025 by rpki-client