Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
File: NJI6ntps8kDsh5WeHcONNh951ho.mft (raw, json)
Hash identifier: CSfYEdMq3xaPQRsNaNJinXEbAliJ5FsHPeZja+ePGkM=
Subject key identifier: 5A:DF:40:6F:07:8A:9E:F1:E1:53:64:55:CB:2E:89:E0:04:22:FA:93
Authority key identifier: 34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
Certificate issuer: /CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Certificate serial: 0194BD17926A3E16D44EF277FAD194047D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
Manifest number: 023A
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: NJI6ntps8kDsh5WeHcONNh951ho.crl (hash: BxVCPsQwj0Whe8M5DShRiyND2RHaEpDpvyjUawOcdTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:6a:3e:16:d4:4e:f2:77:fa:d1:94:04:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=5adf406f078a9ef1e1536455cb2e89e00422fa93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:aa:8f:0e:8f:2a:92:00:7f:27:1c:a6:77:
ac:2f:59:2b:7d:e5:ee:a4:8a:cc:f4:ee:bb:f0:d1:
ee:8a:67:b2:02:02:68:dc:eb:33:af:84:20:6a:88:
1a:69:3d:c8:d2:57:d0:70:49:01:d4:35:09:f7:24:
51:c5:4c:de:09:81:ca:3b:ba:b8:0d:c0:72:91:56:
da:76:5b:2a:92:15:62:77:b2:91:b8:89:fa:41:d6:
c4:a2:b6:fd:a4:d2:02:26:02:87:a2:93:1d:8b:74:
1d:81:26:d2:ad:da:d9:94:4b:32:3e:c6:0d:d5:7f:
e8:f9:8e:fd:d3:d6:9f:09:75:ea:89:75:5a:bb:a4:
22:24:c0:b8:b6:db:ce:2e:5d:18:82:87:59:44:c8:
bb:8e:ed:8a:22:4a:64:7b:f1:77:fd:42:3d:1a:b4:
8e:f0:e5:79:0e:22:d9:af:14:7b:4a:3d:46:5e:4b:
ad:c8:df:e2:6c:9f:79:89:24:7f:ad:57:1b:a4:6f:
db:be:c9:71:57:29:06:e1:aa:bb:a9:b0:65:93:f7:
e6:b0:67:58:03:ed:59:bd:1c:dc:60:57:72:4c:bb:
cd:ce:ef:ed:08:76:dc:9d:53:66:db:04:70:d2:63:
46:84:e7:3f:47:5b:e7:67:0d:f4:40:88:be:2e:ef:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:40:6F:07:8A:9E:F1:E1:53:64:55:CB:2E:89:E0:04:22:FA:93
X509v3 Authority Key Identifier:
keyid:34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fc:02:ad:04:7b:e7:16:85:48:88:d9:0d:cc:c4:2e:af:2c:
4a:0a:d7:7f:9c:09:db:06:82:f5:a6:48:83:8e:26:f5:44:56:
4d:f7:56:d3:64:26:0d:12:50:62:cb:3b:dc:e5:1b:9c:9b:5e:
07:9c:29:f4:20:d0:d3:aa:f1:ec:79:55:e6:ce:d5:df:6d:b3:
7a:5e:34:97:12:40:d1:32:e2:6c:e3:f3:38:60:23:4f:13:ec:
42:7a:3a:1e:82:cf:d2:62:fb:cd:79:8c:e7:9f:54:3d:cf:8a:
02:0c:06:20:b3:c2:ac:29:ad:66:32:37:cc:fd:91:eb:94:a6:
a4:6e:3e:a2:fc:04:d5:79:93:42:ed:10:6f:93:c3:fa:fd:bc:
6c:f2:08:15:b2:b3:c6:92:c5:2b:9f:9c:d6:ca:ab:a5:83:54:
62:44:c9:53:31:bf:24:81:af:03:bf:43:de:84:8c:5d:71:70:
98:d1:3a:bc:35:10:00:51:90:87:4d:13:17:61:d9:a6:65:d9:
5a:26:d0:01:65:ad:0c:e8:04:8b:0b:a4:77:23:2a:17:6f:6a:
36:d4:d3:26:61:c5:ba:27:4d:57:f1:0f:13:98:2d:67:31:d2:
9b:90:84:f4:fd:f8:f8:4f:a5:a5:9c:4b:86:cc:90:2b:d4:ca:
b8:26:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:34 2025 by rpki-client