Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: CBQGwPSE60FjFRCfPQPvbCC98I6Bsg0cYJ8hoV+zfnU=
Subject key identifier: EE:6B:83:67:52:E1:F0:A2:E1:00:B1:85:37:34:84:11:23:3D:6B:38
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 0194BC730D5E7246A984C3F43B3D37DE9F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: P3iw0f3DmQTYPJl5Wwry/KledftQTdb8boF+FeUX7FM=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:5e:72:46:a9:84:c3:f4:3b:3d:37:de:9f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=ee6b836752e1f0a2e100b18537348411233d6b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:46:b6:88:5f:30:b5:6a:1b:63:05:45:25:
a0:07:97:f0:e3:eb:e7:74:24:d5:09:50:8d:3b:47:
4c:7a:57:97:77:e2:bb:58:df:a7:26:6c:be:64:5f:
c9:95:89:aa:92:5b:bf:a5:96:97:9a:1d:07:df:64:
62:5e:7d:c3:7e:7d:41:5b:53:79:53:8b:9c:b8:6a:
c5:41:f5:9b:dc:71:37:d5:39:99:6c:c7:7d:69:61:
f1:2d:ef:01:b5:81:0e:0a:01:b5:4a:bc:21:42:07:
01:40:8f:55:39:c9:11:97:cf:39:18:78:83:c6:40:
dd:c0:c9:c8:df:17:8c:55:93:ac:43:9f:1d:44:f6:
ae:bf:aa:0a:c8:8f:c7:2b:18:08:a2:3d:bb:92:91:
b8:aa:98:43:86:1e:56:8f:1c:5a:64:35:91:29:c5:
40:30:b2:0d:08:22:bb:a1:11:90:f3:2c:cb:72:90:
5e:7c:39:89:a0:e9:f6:79:70:e9:3c:b1:4e:79:9c:
af:3e:41:c4:40:76:52:4f:a5:b2:84:32:56:6a:cd:
f6:b5:8e:90:1f:49:9a:d8:c7:89:fa:10:a9:90:ab:
5f:d9:21:82:c0:6f:95:c6:81:89:eb:e9:b0:84:46:
d4:83:26:4d:62:2f:0f:68:50:d1:97:d3:13:f5:e7:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6B:83:67:52:E1:F0:A2:E1:00:B1:85:37:34:84:11:23:3D:6B:38
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:db:96:61:29:4d:90:b5:a7:dd:01:87:af:77:12:1e:2b:7a:
c4:a7:2b:2b:d0:f9:ec:54:2f:83:84:3c:fe:d3:32:0c:b9:8e:
db:64:ba:1c:f1:9c:d8:09:25:1d:9c:aa:fd:e4:e3:1e:c0:69:
c0:15:e2:8f:b9:d0:c6:6a:57:dd:ae:a3:d4:6b:60:37:1c:88:
ec:2a:24:d0:c6:09:fd:48:fd:a0:bc:95:c7:9e:83:26:65:12:
b0:eb:e8:2d:fe:b5:be:0f:62:f6:11:5f:2b:53:5e:2b:78:07:
83:44:70:b7:30:b3:81:be:3f:f2:76:49:a0:95:3f:a1:5f:c9:
63:d7:04:cc:ac:63:93:9a:df:99:79:e8:97:ba:35:e3:bd:08:
99:8e:17:03:d0:b3:8f:9c:ab:54:05:18:3d:cb:60:b0:af:83:
70:75:5e:50:f5:0c:dd:3b:f6:20:f4:53:35:45:75:70:37:e5:
58:c6:69:4b:85:ba:b7:52:f0:c8:6e:07:c9:ea:8e:19:5c:54:
c3:12:8e:25:7e:b4:db:83:3c:e8:22:7f:71:92:c1:37:0d:83:
d6:9a:94:07:3a:02:50:0a:08:6a:d0:e2:db:8a:70:b7:e4:a6:
6d:43:72:09:19:03:d4:d4:54:5c:45:ef:ed:d4:4f:d7:47:71:
50:3d:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:47 2025 by rpki-client