Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: q1zbKFFOw6FzJXNKmS5Vm5GLxztGmE83ACjhwVDjiAk=
Subject key identifier: 2C:28:EA:17:28:E5:07:23:EA:C5:9A:A0:88:05:66:D7:B6:66:1C:4A
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 0194BD85B1BBABF4213B324D0BD6B7CC7339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: //zN9vQkpuZ4WoNsl/RyOrbwdleR4riZnfZEWMzJ9Kc=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b1:bb:ab:f4:21:3b:32:4d:0b:d6:b7:cc:73:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=2c28ea1728e50723eac59aa0880566d7b6661c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:fc:0e:ad:ab:71:5c:69:57:50:71:8b:b5:
be:6c:e9:b3:2e:15:d7:41:c5:ee:1f:1f:13:d0:40:
98:c4:9f:23:cd:a2:ef:e1:cd:3b:82:61:43:d6:12:
1e:95:8f:df:2f:93:03:12:43:4e:28:ff:97:21:ff:
85:29:fe:d6:a9:01:b7:53:ce:b5:f2:b9:8d:44:91:
55:2d:f4:26:a4:cf:80:b7:64:99:87:7d:a6:4b:08:
3b:33:6a:9a:25:a5:65:9f:4a:20:fa:cb:cf:1e:dd:
2c:ff:36:e2:8d:c2:b9:98:2f:01:bf:08:f1:ac:02:
48:44:1a:a0:42:cd:05:a5:fb:d7:68:30:08:88:fa:
d3:1f:ce:ae:94:70:50:c2:1c:51:f5:22:f5:32:67:
60:cf:61:75:46:33:03:1f:85:34:ea:31:c8:08:f9:
e9:19:9b:44:89:bc:fb:c4:e0:73:9f:ba:53:bd:cc:
be:b9:af:0b:18:3f:13:df:92:9f:dd:2b:06:f4:ca:
e8:86:38:4e:7a:0b:e4:c2:da:fe:2b:2b:6d:bc:b0:
aa:21:10:4e:71:54:e6:2b:5e:f2:5b:a8:f4:91:b5:
50:90:3d:d3:42:28:70:20:25:a9:5a:7b:5a:33:c4:
b4:aa:1f:16:5b:94:ef:74:79:57:c9:a1:67:cf:0a:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:28:EA:17:28:E5:07:23:EA:C5:9A:A0:88:05:66:D7:B6:66:1C:4A
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:64:a7:d8:1a:bd:8d:fb:76:54:13:64:3d:df:20:de:af:41:
87:dd:25:bd:78:0d:b4:1d:01:fd:08:86:1e:d8:5f:ec:ef:2e:
3c:c5:96:29:53:53:7f:4d:5f:0c:9c:2c:83:aa:d7:e3:af:26:
1f:16:ef:e5:33:3e:01:58:40:88:98:31:85:0a:00:29:e2:4f:
89:b5:39:8d:65:6c:34:73:31:64:12:32:1e:3e:72:75:9e:98:
6a:ef:e9:ca:73:6e:54:81:b0:24:f2:8b:3f:59:d3:89:f6:2e:
06:dc:79:75:d5:47:57:d7:4d:59:2f:ac:e3:5c:8e:c6:f0:99:
16:e3:a5:1c:66:64:17:e1:87:ab:bf:6d:38:7a:4f:1b:e3:d3:
26:04:27:97:af:73:8b:e0:9b:ca:b2:78:60:8f:02:6c:c8:22:
f7:b1:a2:dd:83:ae:2d:97:2a:2e:64:d4:30:27:63:85:09:fe:
bf:c3:01:84:c1:ba:98:72:99:9b:b5:91:c1:d3:48:6c:51:ba:
01:b4:ab:73:bc:12:9a:21:12:1f:7f:5e:f3:60:d3:aa:40:b6:
f5:f7:c8:e9:1e:16:d8:de:94:b6:4d:4b:a4:c1:54:1a:77:9b:
d5:9e:3e:c3:57:82:42:58:26:a4:70:a4:a8:78:d6:76:55:9b:
a1:72:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:03 2025 by rpki-client