Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: vvnZ6xKfW5beZP0+RHjokr3B05FRsIxNOPH5ov9v/jQ=
Subject key identifier: 10:28:5A:16:BF:31:1E:EE:35:4B:06:EB:0F:91:3E:71:CA:0E:C7:86
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 0194BCAA0682F4445C79AB1BFFE58225C097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: gdURG00JOdZGAYbnoxknVcEYjaTx/o9aQ+H9jC+04pE=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:82:f4:44:5c:79:ab:1b:ff:e5:82:25:c0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=10285a16bf311eee354b06eb0f913e71ca0ec786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:14:9d:12:ac:80:d9:68:70:f1:f5:ca:78:
46:1d:3e:a3:2d:e1:54:08:da:8a:2a:75:4e:d5:8d:
52:3f:c4:a0:63:cd:5c:ea:03:9c:d2:a7:74:f4:d5:
95:f2:a2:62:89:cd:62:d4:14:15:26:02:bb:68:b1:
62:f3:d6:c0:9f:25:19:f5:a9:55:c7:d0:97:15:88:
23:90:7f:e9:01:74:08:bc:09:a6:48:04:82:f4:ce:
90:a1:75:e3:17:9c:2b:4b:58:ea:7e:4d:47:fb:5a:
42:c1:3d:1a:ad:b3:8e:37:90:dc:40:ed:5c:3e:41:
51:df:46:07:9a:23:d9:f9:6d:0a:54:66:8e:56:bf:
bf:a0:e3:03:55:34:ea:ed:d2:f7:5e:90:b9:b8:c9:
34:f3:e4:8d:b0:a4:4e:df:f1:31:c7:ed:30:29:cb:
eb:24:80:3c:ea:3b:3e:2c:72:96:1f:8b:7f:87:c9:
35:e4:e3:c8:5b:29:b2:1d:e3:cf:0c:f1:47:c6:dd:
04:5a:a8:78:45:8a:d9:00:0f:fc:c1:6d:6f:8a:f9:
d9:bf:39:6f:5c:ce:57:d2:f5:ef:70:dc:26:a0:c1:
fa:52:28:82:9c:75:7e:9d:6c:22:89:65:c4:91:36:
88:cd:24:37:2b:e2:ce:f6:5d:18:c2:ce:ea:34:bd:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:28:5A:16:BF:31:1E:EE:35:4B:06:EB:0F:91:3E:71:CA:0E:C7:86
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a0:81:b6:7a:1e:4f:1a:7e:a9:87:16:57:fe:de:4b:d1:13:
4e:aa:1f:61:04:b7:75:dc:2b:e1:e6:d7:26:a5:23:03:dc:52:
17:e4:4f:28:53:21:b8:52:be:75:3f:c6:04:eb:61:f2:27:39:
b6:6e:7d:70:be:ef:09:56:28:cd:bb:28:36:3b:7e:96:ba:47:
18:8e:0b:bc:93:95:16:2b:be:c1:ef:5c:86:7a:87:c2:74:27:
77:52:74:70:c2:bb:2f:d7:2e:52:ec:df:54:f0:a3:fc:39:d5:
63:fe:d0:80:d1:4b:71:db:53:5c:3c:4d:fe:06:ce:5d:81:f6:
d1:43:85:a8:84:38:ce:71:36:6f:e5:16:de:d2:18:64:54:d9:
a6:68:67:95:21:ae:58:45:7e:1e:6f:e1:cc:16:7a:12:8c:f1:
25:21:c7:b4:a5:9b:ed:36:ae:da:72:ed:d9:9a:d7:17:26:ae:
c7:98:29:b5:31:b3:c9:5c:5a:03:73:b0:4c:b5:65:89:79:dc:
a6:6c:0b:9d:c3:99:c8:30:3e:0a:d9:e6:15:35:dd:c5:01:c9:
ef:53:33:50:50:3d:17:da:5c:68:f7:74:25:ed:70:f6:c6:06:
e4:dc:47:63:c0:9b:0e:b3:20:56:1c:6c:0a:7c:63:85:39:15:
fd:2b:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:07 2025 by rpki-client