Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier: ChxL2x+VYwMHHMFWAHOPRo3IShPBt65fmHob85XiukY=
Subject key identifier: 1D:B2:32:DE:E5:67:71:39:2C:77:5E:0B:0E:A0:3A:0D:E3:94:18:47
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 0194BCA9D5EDE9C068B782A23C33AEE7DD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number: 0FD7
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: apsYyciX2ZhThI4TBm4G8iNyDnGp6cr1nf0cAfg7Dgo=)
2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:ed:e9:c0:68:b7:82:a2:3c:33:ae:e7:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=1db232dee56771392c775e0b0ea03a0de3941847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:7b:ea:ff:32:8b:37:2e:0c:86:f5:3d:a6:
ce:48:f9:c4:44:c9:61:23:bf:8a:80:fa:31:3b:8d:
66:c3:af:95:44:cc:2a:47:3c:8e:75:e2:bd:47:42:
94:74:8f:62:73:55:4d:1a:c4:05:3d:95:95:49:af:
e2:30:f5:71:c2:fe:7d:57:d5:15:a6:99:4b:98:ac:
98:90:1b:e6:a6:2e:55:bd:18:00:f9:81:e2:a7:70:
ca:44:b7:b0:9c:4a:27:fa:5d:48:cf:a2:a9:d1:53:
68:01:f9:23:51:24:cc:2a:5a:f7:ee:09:01:e4:85:
c3:37:4f:8f:4a:04:b8:50:c8:91:84:2c:87:48:67:
7b:b9:70:84:ac:b2:aa:7e:8f:16:13:ae:a0:c2:ef:
ac:be:22:1d:91:68:9a:ef:d6:3b:6b:8a:d8:98:2d:
7b:32:e1:59:07:d6:ab:db:fa:3a:2c:16:ad:d0:59:
39:54:64:8d:62:bb:75:99:8f:6b:a4:82:52:b8:1f:
8a:71:1f:53:14:d9:f2:c9:fb:85:ee:44:4a:d9:c4:
e9:3d:8b:de:83:7a:33:f8:5f:12:4f:94:e3:b5:52:
00:bb:d5:cd:93:1d:8b:63:0e:b1:c5:98:3a:0e:e5:
27:eb:d1:7f:be:41:9b:8f:85:19:15:7c:3e:a8:f6:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B2:32:DE:E5:67:71:39:2C:77:5E:0B:0E:A0:3A:0D:E3:94:18:47
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:88:40:ea:18:96:1a:59:43:dd:79:3d:28:09:fc:1d:3c:e0:
a3:ca:ab:8f:07:54:3c:95:3f:96:d6:2c:f8:2b:5a:23:66:e1:
65:34:d0:d7:5e:99:62:e4:dc:7c:bf:c4:f2:47:e2:83:cf:9d:
71:9a:41:e0:1f:14:c0:15:41:ad:9c:a1:64:a3:01:bc:a8:6d:
07:0b:4c:c7:35:92:ba:72:e5:b2:8b:57:b4:9e:c4:d9:d2:0b:
0b:d2:bf:d4:7e:fe:a1:1e:2e:a7:13:d6:ee:b7:22:bc:c8:f9:
21:0e:d8:ae:c5:35:e8:e3:39:2c:c2:5a:a8:fd:fe:04:e5:8a:
99:37:8a:8d:f4:11:d8:2a:27:19:2d:5a:5d:87:c8:a9:42:c9:
73:14:56:23:c3:ed:05:81:e5:c4:50:6a:b3:c3:77:d3:2a:43:
df:6c:07:19:b5:7a:54:36:29:3b:45:92:ec:61:c4:c5:00:26:
78:f3:1b:4b:57:e4:d3:59:11:53:ad:84:56:7e:ed:cb:10:06:
c8:bc:90:a2:7a:10:2d:66:0e:96:b7:ad:24:da:b3:61:4c:f1:
d9:90:a5:8d:62:e5:39:2d:9d:22:59:37:da:80:6c:72:c2:ed:
c7:b4:c3:76:8b:28:50:9b:22:7b:a2:25:f1:0e:f1:f4:c5:ba:
0a:b8:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:16 2025 by rpki-client