Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: 93msbup90dqxw5RDTh4Notlr2BWng4In4Odj3wdD8oY=
Subject key identifier: 73:4D:D4:7A:55:DC:34:86:AA:FB:71:E3:AE:FD:95:BC:2B:90:8E:62
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 0194BD17D2C441F41C8FA9E9A09CFD24E7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: RHxXfpltMgKP25iFJqknYdwj+2gaYlTicKQ7CYfaODY=)
2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:c4:41:f4:1c:8f:a9:e9:a0:9c:fd:24:e7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=734dd47a55dc3486aafb71e3aefd95bc2b908e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:d3:f6:ec:c2:91:18:07:88:fc:1e:ed:16:
d9:9b:72:2d:41:b1:ce:a8:79:26:cc:3c:f6:a4:a2:
60:e8:fb:18:c8:a4:ff:e4:5a:c3:8a:8a:1e:a3:ef:
a2:54:19:33:b0:9a:b6:d0:ae:f1:3c:3e:6f:72:f0:
66:c1:5e:a0:02:84:c5:a4:bd:4d:69:d6:bb:aa:0f:
e2:57:e9:1d:e1:ff:24:ac:7c:23:61:9e:f6:9c:08:
29:11:a6:b2:e5:56:e3:16:71:dd:6b:b3:85:c4:bf:
72:1c:58:f6:7c:cf:19:0b:f7:80:eb:b9:95:47:52:
2f:a4:50:7e:8c:3c:4c:d7:9a:0f:13:73:25:db:bb:
26:ad:f8:d8:54:c3:6b:e1:d8:0c:40:48:af:64:62:
83:a1:46:d0:e1:98:82:ba:8b:5e:e9:11:cb:54:d9:
06:e2:4e:73:15:e0:a2:08:9d:83:57:6a:fd:1d:6f:
0c:d6:52:6e:25:c3:af:44:1d:30:ba:c1:1b:d3:67:
f6:9c:a3:17:75:76:98:35:c3:e3:21:be:7f:d1:4a:
5e:7b:ae:5a:b4:ea:cd:8b:55:ec:6c:7b:e1:84:4b:
e8:7a:0e:9b:9e:69:38:0d:f5:1e:bb:04:db:3b:ca:
62:e2:9e:4d:cf:1f:75:6c:b7:b3:2d:09:38:e0:2b:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4D:D4:7A:55:DC:34:86:AA:FB:71:E3:AE:FD:95:BC:2B:90:8E:62
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:da:64:ac:9d:ef:1c:22:3e:e2:ff:b0:22:f6:21:26:a4:ab:
5b:8f:47:a7:18:86:13:14:e3:86:5d:01:8b:1c:f8:7b:ab:19:
88:c2:6c:96:76:2e:31:0d:27:1d:71:15:4b:d9:4b:88:db:22:
1c:6e:7e:b1:a5:f2:46:49:84:9c:20:68:3a:89:8b:7f:a8:be:
09:4a:47:63:0a:a3:05:a7:de:a0:e8:55:31:b9:88:40:84:04:
b9:07:90:e9:2c:cf:1f:fb:a1:e7:44:38:7e:45:a0:cc:ee:c3:
35:88:bd:d5:a3:a3:b8:81:ac:dc:99:c8:62:fe:75:50:87:6d:
e1:59:78:96:4d:ca:d6:ee:90:bd:a7:04:1d:36:b2:46:1c:9a:
95:5b:09:ee:36:d4:d8:4c:66:f9:57:fd:b2:6d:6b:bd:b6:65:
f9:a8:1a:8f:9c:10:e7:7e:bc:b9:ce:bb:c9:f9:91:b5:3d:e0:
ee:e0:ac:02:07:12:7f:81:2c:85:07:50:87:d1:82:44:b3:5a:
0f:0f:6e:7c:61:52:3d:22:87:7c:7b:d1:0e:62:12:dc:29:ef:
79:d3:ab:f1:73:13:7c:c3:2b:4c:c1:1e:a6:cb:3d:1f:b7:13:
64:2a:cf:96:4d:3c:22:60:24:69:8c:f0:93:55:44:f9:46:b6:
87:06:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:39 2025 by rpki-client