Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: MQ5qJVSIdwQhxG+PQs5R4I7pykKz8IMdl8OyZR8MuBg=
Subject key identifier: 07:A9:46:E3:98:DF:87:01:78:55:5D:40:34:B3:79:FA:E2:EF:7E:BB
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 0194BC3BD63AF705FED7716871A4D0AD9B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: kUQ6UYgvDFTU2qVz69t0Jz/+gxQoi7RSNFYof8L2jwg=)
2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=)
3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=)
4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=)
5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d6:3a:f7:05:fe:d7:71:68:71:a4:d0:ad:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=07a946e398df870178555d4034b379fae2ef7ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ed:84:a0:ba:15:1f:99:96:68:e8:e3:8f:1a:
43:06:a3:d4:d3:53:2e:ee:e9:5d:d1:b8:31:2e:ea:
df:a6:db:bd:d5:a0:1d:f8:4f:60:4e:e5:f2:c4:d8:
f2:c4:92:54:f9:bd:44:57:6f:77:43:f3:91:e4:58:
50:d5:51:1f:33:18:25:46:98:84:fe:41:a2:39:a2:
50:3e:e2:64:b7:cb:47:41:6b:da:a0:34:ef:70:5f:
e5:c0:ec:c9:f7:8c:9b:7b:ca:93:89:0c:29:7a:d4:
11:e5:44:1b:85:f4:e0:a5:83:f7:a9:9c:29:2e:25:
8c:c7:97:eb:bc:e8:5c:9d:d9:d0:90:ca:5a:68:70:
a3:f5:7b:a2:d7:15:62:bb:db:9c:81:a4:78:cf:82:
57:c2:08:87:8e:d6:ea:41:96:ba:fc:95:4b:72:b4:
2c:06:84:41:f9:cc:7f:62:b1:52:62:a1:4c:d1:ff:
f0:d2:b2:a6:71:b9:e8:a5:00:03:a7:3d:09:08:31:
28:c1:6e:22:85:9d:a1:d7:be:64:43:f9:a3:3d:79:
2d:4d:86:2c:2f:71:ce:d2:66:04:02:61:37:ef:61:
e1:35:d6:90:88:ed:bf:bb:a7:34:fc:24:0c:ff:05:
e9:26:ac:1a:b5:f1:4c:82:c3:a4:e0:d0:22:ed:bf:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:46:E3:98:DF:87:01:78:55:5D:40:34:B3:79:FA:E2:EF:7E:BB
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:cd:e9:44:5d:b0:64:4a:ba:e3:89:62:62:50:51:37:d6:
68:8c:9e:f8:95:fc:18:f4:f5:58:5b:a0:92:55:5a:c2:47:15:
77:fd:32:1b:8b:a2:9b:2e:fa:49:d8:35:cd:cb:c8:cf:48:1e:
42:fc:bb:c0:41:50:24:4e:a4:a6:1e:db:2b:47:0f:8d:0b:7b:
12:ac:b9:86:09:5f:5f:b0:93:0f:fa:24:8a:e1:fc:8d:d0:55:
71:02:15:0c:e9:64:fd:38:9c:99:17:6b:70:d5:1b:a0:e4:7e:
b4:32:e9:99:a5:3b:b3:64:28:29:3c:6b:7e:cc:22:3d:56:ef:
04:6a:bf:cc:a1:59:60:b4:a3:11:fe:7d:36:a4:ba:18:06:3e:
40:11:d1:e5:a0:49:8c:24:47:a0:79:52:ca:f5:d8:d7:fc:11:
66:71:c5:78:ea:c7:b1:e9:b1:1f:36:29:04:38:73:9d:d0:eb:
f6:74:38:27:ab:7c:9c:c3:6d:dd:78:34:08:7b:dd:09:1c:32:
36:5c:71:f3:53:b0:9a:c2:e2:94:fa:6b:66:b5:40:dd:a9:4f:
0d:6c:dd:38:77:e2:99:af:0c:11:74:ad:49:a3:18:ae:a1:89:
4a:1f:ca:1f:b6:fc:a4:a5:8b:d1:a0:10:b7:30:db:42:fc:3f:
45:90:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:44 2025 by rpki-client