Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: RljM7eXnSPuQYfXfINbjpikFpsM3Z7WeXBHu8lz4oMQ=
Subject key identifier: 60:74:BF:7A:53:9C:44:7A:F4:74:FD:D6:7E:7E:E6:60:13:39:16:77
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 0194BCA96DE189DB25227C688CAE3C9B1657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1159
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: Eqe2ihRENUcTNocujHqwJ1uNl3trT4Aoun+vj+2DkpQ=)
3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:e1:89:db:25:22:7c:68:8c:ae:3c:9b:16:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=6074bf7a539c447af474fdd67e7ee66013391677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:7f:d2:9c:69:bf:78:51:2c:e1:56:04:57:
2e:99:8b:5c:6f:65:b7:f8:76:be:0d:26:88:c7:df:
46:e3:f7:4d:fa:5f:d3:b0:36:71:b3:39:94:c3:ca:
07:4f:f5:30:a0:2e:8d:f6:08:97:cc:3c:53:e3:91:
e8:d5:6a:4e:c7:cb:52:e4:48:f7:fc:ab:93:d2:05:
da:78:b6:79:a8:68:da:20:0a:15:c3:6a:95:da:9b:
44:ad:fb:4d:09:c7:32:a2:8f:7f:27:8d:94:3f:65:
c6:23:d4:52:dc:28:18:d7:83:80:93:b4:6f:57:fb:
53:90:54:d0:f3:4f:c2:44:d7:98:44:8d:5f:d5:58:
93:57:c5:9f:75:5d:c3:3c:a0:f0:d0:65:83:bf:db:
31:50:03:b3:e7:12:b3:16:5e:35:41:08:98:4c:71:
01:e5:2e:de:db:df:76:be:56:a9:72:fe:b1:7b:9b:
b5:e2:cc:cf:b3:88:87:d0:0b:05:50:e4:24:6c:57:
03:0b:ef:84:a5:44:55:eb:16:9e:55:5c:b0:35:c7:
0b:ff:ca:44:44:32:b8:67:32:00:e0:39:78:4a:31:
fb:57:7c:2c:3c:9e:de:0e:1e:8e:07:a1:2d:c9:48:
48:66:49:fa:a3:f8:71:05:ca:e7:48:57:85:82:6f:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:BF:7A:53:9C:44:7A:F4:74:FD:D6:7E:7E:E6:60:13:39:16:77
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:17:f2:03:a1:3f:f5:f4:b2:48:57:89:cd:9a:42:4d:aa:ab:
fd:68:34:1f:74:a3:dd:e6:88:46:34:50:c6:59:f4:c9:c3:08:
31:fc:1b:04:e9:9a:56:1d:26:ca:e2:6b:71:76:4c:44:8c:a1:
4b:da:13:79:95:02:a3:2b:70:c8:e3:c1:3d:01:83:bc:e7:74:
23:5a:fa:70:9a:56:14:92:83:45:bd:d3:db:44:6a:47:c7:ef:
3a:57:c3:0b:e1:4f:08:e8:87:89:f0:fa:48:33:c5:a5:cc:cd:
99:fc:91:ee:b5:25:c8:26:f5:c0:0f:6d:2a:34:62:9a:93:6a:
b8:97:dc:e0:1f:d6:e5:69:23:7e:c1:eb:ed:96:f0:dd:8f:8b:
42:b9:5a:78:3f:93:3d:c0:e8:88:6c:d9:e6:af:93:35:d5:f8:
fe:f0:aa:05:c5:71:e9:60:fd:e8:eb:ea:56:59:66:6c:a4:6d:
ee:7d:b5:66:95:8f:c1:39:cb:35:eb:03:0e:de:aa:b7:ae:cf:
48:24:d7:86:d6:65:9d:95:d6:17:d2:1e:d6:bf:69:c3:77:7f:
f6:51:38:3c:36:f6:34:bb:88:d6:d7:d0:8e:21:4c:e5:72:b4:
ef:22:4c:3c:13:b6:3f:e2:14:2e:b7:2f:e4:2a:da:0b:9a:9c:
39:48:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:03 2025 by rpki-client