Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: iyFP4rs4UbEB0S5QwgG+vp6wpJX4oBHA0mhjxJzhr0M=
Subject key identifier: E9:45:93:30:4F:B5:1A:E0:DA:77:57:83:8D:F6:2D:57:20:81:E1:D7
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 0194BBCE1D56D04D96BCAC7B62ECE7D4E51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: SccwaiTaajleAgrbOxCELqKBzBIk6EpegBdoJLEc3X0=)
3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1d:56:d0:4d:96:bc:ac:7b:62:ec:e7:d4:e5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=e94593304fb51ae0da7757838df62d572081e1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:55:92:f8:79:27:2a:46:05:45:aa:f9:e3:
32:ae:1d:26:95:75:86:3e:df:15:b8:14:7b:6e:de:
d2:02:d2:6e:46:38:0f:ae:84:ee:ca:d4:2c:8d:e8:
9c:71:ed:e9:4c:8e:6b:f4:d4:1a:8d:9d:f0:50:d0:
96:53:78:e7:23:ee:c7:6d:ff:9a:b0:d0:8c:11:98:
01:51:1b:d9:95:13:ef:16:62:5e:75:81:ea:cb:99:
f6:78:42:90:cf:86:ca:2e:4d:b8:3a:a8:db:3e:c5:
82:41:58:8f:96:da:11:b9:66:9f:08:a5:dd:c9:0c:
96:f0:ff:19:0a:c4:34:b9:fa:a2:70:f6:11:11:f7:
1c:7a:e8:48:5a:3b:72:7d:5e:13:65:a4:79:2f:01:
f7:1e:62:26:b0:de:f4:0e:f3:23:b9:97:cf:13:cc:
3f:6a:03:bc:9d:95:f6:4e:08:f6:75:8d:93:f9:cc:
a2:1b:cd:4d:a9:c4:0c:f5:10:a7:17:e5:14:54:d9:
b8:9d:66:39:c4:77:9d:20:c1:1c:b1:28:fc:9b:34:
45:2b:12:03:2d:70:84:48:d4:fd:0a:d1:0b:43:b8:
6e:5c:07:99:40:26:49:1d:11:d2:8b:0d:24:f5:38:
4a:c7:28:fb:d1:82:9f:b2:5c:22:fd:9f:bb:23:e1:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:45:93:30:4F:B5:1A:E0:DA:77:57:83:8D:F6:2D:57:20:81:E1:D7
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d0:1b:22:55:b3:fa:20:19:55:38:6d:a9:3e:42:3f:13:6f:
83:04:65:05:2c:2e:40:a0:39:64:f9:17:a9:a2:36:4c:b5:60:
37:eb:f2:c9:d7:5c:0b:8b:33:b1:d0:a3:73:1b:9c:62:d0:a4:
74:a9:74:23:45:67:75:9d:da:22:e9:2d:37:d9:c6:0d:33:ff:
24:eb:a9:2b:43:1d:46:92:24:37:8e:4c:15:4d:bd:14:c9:73:
1c:7f:c0:da:3d:c8:dd:0f:63:fa:d5:38:a9:d5:b4:62:01:0c:
a7:69:62:d4:8a:28:17:3e:2c:ee:c6:8d:be:3f:52:06:9a:25:
c6:63:d5:12:4d:9a:49:5e:39:21:34:d1:5f:14:bc:cc:1d:a8:
6d:59:d1:de:9f:ca:d1:49:e1:ce:6b:6a:a8:56:23:d1:b1:9a:
65:e2:35:2a:bc:7b:ff:b7:56:e8:b1:a1:83:39:68:e2:0e:0d:
4e:14:17:74:e6:50:84:0a:cf:20:2c:13:4e:f8:89:83:0b:1d:
df:9f:5e:be:bc:ee:2c:1f:03:bd:39:9a:e2:67:a9:78:c5:76:
bd:31:12:80:7f:89:97:c3:17:7b:e6:2c:39:05:89:04:b1:88:
68:84:e6:71:2b:92:ec:19:df:15:ae:80:65:fa:26:1c:9f:0a:
c1:82:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:51 2025 by rpki-client