Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json)
Hash identifier: XgGWYlGrBu8PvHDblUerqVX0+KLILgJEi8rwvjoooRk=
Subject key identifier: 73:4E:B9:34:10:17:0B:73:54:7E:FE:E4:00:A8:D3:B4:3D:B6:CB:41
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial: 0194BC3C63A060101D5801949EDE56402412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: +2cAhlEYpvgCvz5iMr+KKoZPRGJZOOM+YJhxQ/nReKY=)
2: W3mDa3qMM3UMHKwdjXNmQQYwzCo.roa (hash: uhcnNrB9w8L6u9yOsZumoNimMZDsDc9Fp+1S6uVCDDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:63:a0:60:10:1d:58:01:94:9e:de:56:40:24:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=734eb93410170b73547efee400a8d3b43db6cb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:b6:e2:d1:4b:52:3d:f9:5b:8a:0f:5a:40:
03:4b:fe:40:7c:96:64:1d:12:29:f5:4f:d7:ba:b0:
98:4c:e3:ba:7a:dd:bc:71:40:1c:11:1e:1b:4c:3b:
7b:a7:be:9b:f5:02:8d:b3:f8:0e:92:c3:9b:91:f3:
ef:3a:40:99:5b:af:48:9e:e6:64:c5:e5:ca:16:a8:
d7:3e:2f:62:ec:24:f5:67:64:0c:4c:33:e6:dd:41:
59:b4:57:23:5e:2c:70:4a:6b:a7:b1:b7:53:ca:4d:
d0:f9:4d:4a:8c:b9:27:af:91:20:7b:d6:cf:31:03:
16:d6:a0:9a:9c:9e:d7:33:21:37:01:04:34:19:30:
7b:f8:52:41:2f:84:31:34:6d:af:ca:94:70:ae:ef:
96:3b:52:1c:45:49:81:e7:31:03:ca:8a:76:74:fa:
10:89:87:6a:be:5c:29:9f:ef:9e:b1:52:24:43:c2:
0d:0f:c8:e2:21:69:8b:07:13:3e:fe:bd:17:dd:65:
ca:9f:55:3b:83:89:2f:a4:34:01:41:13:e1:a7:c5:
b2:0b:8a:bc:ed:e7:fe:09:99:77:33:3d:09:8b:6e:
ce:d6:11:cc:94:6f:b1:61:9f:2f:25:1e:7d:58:c9:
1c:d5:bd:63:eb:5a:3e:f0:a9:b3:19:d5:05:f6:9d:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:B9:34:10:17:0B:73:54:7E:FE:E4:00:A8:D3:B4:3D:B6:CB:41
X509v3 Authority Key Identifier:
keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:72:08:e9:c8:43:7c:53:29:9d:7f:2e:a2:8e:2f:35:6b:1f:
96:76:f5:7f:44:c5:21:fa:1b:95:6f:2d:cd:c9:07:cb:55:69:
30:f2:19:d0:a5:d2:c2:af:4b:0f:74:d7:70:b6:30:27:90:dd:
25:3f:c7:30:6e:e1:21:bc:35:cd:b3:ff:20:7b:fc:30:b0:06:
e3:7c:d0:6d:42:96:2e:d7:7f:c2:8b:20:a4:05:45:d1:df:13:
f2:1d:aa:37:83:c2:fc:9d:a2:6a:a9:c0:82:5b:43:19:bb:4c:
19:d7:52:cd:8a:58:21:eb:f4:d7:1e:18:9a:8e:ba:f8:32:0a:
78:28:ae:f6:d0:f8:b5:1b:2b:f3:de:20:c7:05:75:03:a4:fc:
ab:11:b4:e9:33:d3:65:0f:74:19:b1:0e:49:ae:f3:10:4f:ba:
74:61:f5:77:97:44:3b:0e:8d:5e:97:a1:ea:14:6d:eb:22:fb:
95:c5:28:1b:99:f0:c2:d3:14:b6:06:1c:94:86:6a:89:a7:0a:
62:06:2d:5b:b0:82:90:35:7b:bb:1b:52:35:d6:d5:d4:ce:8e:
fd:ee:bc:5b:ec:ca:e4:b2:e4:72:69:a4:f8:b2:f0:d5:58:06:
f1:72:f9:9f:78:33:65:0a:c0:13:83:1d:c2:24:0f:3d:f3:ff:
ed:a2:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:19 2025 by rpki-client