Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
File: NB--B1HiEYiTdNFdYxLCJPaV-qI.mft (raw, json)
Hash identifier: GCg27+VwEWJKlIXLnpL0yVx1e6EVHVegDL7o4Q3NQ4I=
Subject key identifier: FA:A8:86:FD:F8:CE:64:08:5C:F9:4E:E3:AC:B1:58:BB:BB:99:43:FB
Authority key identifier: 34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
Certificate issuer: /CN=341fbe0751e211889374d15d6312c224f695faa2
Certificate serial: 0194BCA9F1EC3B54AC9CD3DEE6566EAD8DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
Manifest number: 0D51
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: Giw6c3ykUw3nYPNE5UpuuM_ybFY.roa (hash: 4QE8zLtdTCj1Z8B1PqQUFcIb6Is1jjshW97EzIqWBB0=)
2: NB--B1HiEYiTdNFdYxLCJPaV-qI.crl (hash: fQe4nLdLibP9aJ8cn6TY4pHCt+mBPw3hT56YYd0qD2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:ec:3b:54:ac:9c:d3:de:e6:56:6e:ad:8d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341fbe0751e211889374d15d6312c224f695faa2
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=faa886fdf8ce64085cf94ee3acb158bbbb9943fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:79:76:93:2d:5b:43:4e:de:fc:fe:67:c6:
a9:0c:24:1a:4a:1e:71:1c:85:e7:53:5f:fb:81:2e:
71:b9:c4:0c:1e:81:92:fc:d3:86:00:c0:8f:69:e7:
c1:82:f2:dc:fc:29:38:62:66:af:3b:3e:96:bb:cd:
8e:c3:63:8f:b9:a2:62:3d:7d:3e:63:0f:0f:cc:56:
e0:44:8e:20:ca:67:38:1a:e1:16:9d:a5:bb:bd:83:
9e:17:54:61:78:b4:0a:08:44:05:c3:7c:f3:e5:84:
a6:35:64:21:21:e9:e7:0c:6c:05:81:a3:30:29:62:
9d:83:f5:fd:d7:90:13:09:d9:53:17:5a:6d:3a:d4:
a4:31:3b:b0:8b:62:da:d2:34:4d:1d:41:71:b6:b3:
46:45:2d:09:79:ed:31:8a:f4:d1:db:6f:16:c1:1e:
c9:71:77:96:1c:74:0b:3c:be:f2:41:18:17:ae:f9:
fd:eb:f1:1a:5a:2b:95:7e:3f:eb:a5:7a:26:f1:3a:
f8:df:34:ef:70:35:c7:1f:48:af:1e:46:86:f0:d0:
cb:80:3a:70:d2:72:c8:06:0b:72:33:88:e1:4a:f4:
17:85:2d:7f:18:29:31:ca:20:79:27:ae:0e:ec:04:
33:c6:63:b7:10:18:cc:d8:3a:ee:97:98:88:17:08:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:86:FD:F8:CE:64:08:5C:F9:4E:E3:AC:B1:58:BB:BB:99:43:FB
X509v3 Authority Key Identifier:
keyid:34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d8:02:4a:11:f2:24:e6:cd:14:77:49:06:42:0c:83:88:1b:
6a:85:b6:aa:eb:27:0f:d5:51:9f:7b:02:92:8d:54:b4:e8:2f:
b8:40:a4:66:1f:95:52:48:1a:c8:72:21:33:95:64:f4:a8:e7:
e6:4f:3b:1d:3f:a0:62:f2:9c:d6:c5:cc:8b:b6:a4:4a:0d:2f:
b2:7b:7c:e1:90:bc:9c:0c:43:af:3c:5d:9d:dc:a6:14:51:33:
b8:ec:e8:f8:8a:a6:38:67:c5:51:15:39:b0:24:ed:41:dd:77:
72:d6:00:8e:33:45:84:95:b4:65:00:10:ea:77:61:17:dc:79:
9f:e2:d5:1b:f5:c9:ff:14:b5:8b:4c:5a:45:d6:6f:1c:d2:ee:
6f:77:8c:50:7a:6e:d5:22:17:98:4a:42:99:c3:f0:d9:94:a3:
2e:c0:05:20:77:f1:56:d5:c3:f4:4d:c0:a7:b3:e2:b6:c3:23:
42:8a:59:bf:24:4c:49:6e:d5:16:b0:61:c6:ed:53:31:4a:62:
b2:ad:92:ef:62:4b:80:b9:03:d4:d7:91:31:9f:3d:aa:a0:57:
f7:11:89:e2:62:a4:28:67:41:ca:e3:95:8a:f0:d8:84:b3:1c:
db:cd:7e:74:67:2d:d4:84:c7:76:d3:24:56:a3:00:16:ff:bf:
eb:cc:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:09 2025 by rpki-client