Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: pbptMYbKbR+q3rqTM1q3TthLFyit/EgUy8QV1a2WwMg=
Subject key identifier: B1:B9:C8:51:68:F7:E5:62:25:BA:86:4C:38:AF:04:21:5E:58:C1:5F
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 0194BC04C671E44440FCE37AA395E8360B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: Spe/85P3z4YxRQPmXXmeLG7Qa9pJmRosE7syS4Rzb2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:71:e4:44:40:fc:e3:7a:a3:95:e8:36:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=b1b9c85168f7e56225ba864c38af04215e58c15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:cf:16:5a:fc:f2:b7:b0:ed:5b:d5:21:6f:
7f:d8:27:f6:e5:42:2e:dc:b5:1d:6f:9f:ca:43:e0:
1f:48:17:9f:2f:de:91:f9:09:78:e7:0f:cd:35:30:
90:c9:80:1b:b3:90:47:fb:08:43:11:e6:05:5e:33:
f5:a0:4a:9b:7c:a4:e0:7f:62:9d:c6:db:e9:b7:ec:
6f:9a:de:8f:d5:a3:05:4a:df:e6:34:e8:3f:fb:34:
bc:01:fe:a9:fd:43:8e:50:9b:cc:d0:ac:32:15:80:
78:ab:e4:33:18:19:30:35:3b:35:86:3c:d9:29:1f:
0f:9b:3e:11:dd:49:f2:0a:0f:27:64:65:85:08:9e:
bd:cd:6a:97:d5:bd:18:a0:f1:20:39:3b:74:bb:90:
52:60:25:b4:db:3d:ab:1e:59:bf:43:78:8f:4f:49:
21:de:c5:26:ae:60:16:cd:c8:a6:98:8a:58:47:47:
5f:2d:24:43:dd:19:f6:d2:51:7d:e4:66:7b:d8:6c:
59:fb:6c:d9:31:c1:2c:c7:3c:1a:e4:b1:3a:47:97:
95:46:99:12:4c:c3:bd:9c:18:78:be:a6:5b:3f:28:
a8:96:56:72:5b:95:d7:07:2d:b6:fe:98:aa:4d:25:
63:40:23:31:71:a1:b9:05:bf:07:e9:4c:d6:e1:62:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:C8:51:68:F7:E5:62:25:BA:86:4C:38:AF:04:21:5E:58:C1:5F
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:db:af:ba:d0:ad:df:32:02:18:8e:b0:db:c8:d3:ea:f4:01:
2c:89:7a:2c:b5:1f:8f:11:84:5b:29:18:55:a8:8a:00:ce:36:
c8:f6:9d:da:3d:9a:cc:77:4a:41:d5:ee:58:c7:7e:3c:c7:b7:
aa:d9:4d:d0:5f:0d:23:20:3f:f7:11:70:00:68:95:fb:0d:e4:
7d:68:26:25:3b:1a:64:c3:3a:83:b9:8b:b6:4c:c3:48:ce:e8:
bf:c4:ef:3a:19:2c:d2:7c:f9:52:7f:9f:89:74:53:f6:aa:09:
2d:8a:91:a2:ee:78:7a:92:ce:fa:c9:b7:cd:1f:03:b8:bc:7a:
c3:36:5c:a3:a7:df:76:54:3c:44:c7:b3:cc:25:75:76:9b:5b:
a4:1a:af:b4:42:7d:9e:c2:96:ee:c2:57:1a:58:69:10:5f:1b:
cb:ea:81:c1:7a:a2:87:f1:26:2c:d1:d2:f6:1f:a5:1a:d1:58:
40:58:ff:02:8d:fe:a4:a8:07:80:60:f0:1b:97:96:d2:68:9a:
cc:cb:2c:c7:c7:53:cc:a0:c0:59:05:56:26:a3:87:c4:25:41:
c3:13:ce:0b:62:f2:f1:41:04:4b:43:48:1e:eb:bb:92:19:e2:
a1:4d:23:77:94:d9:09:a2:93:e9:ef:dc:c1:2a:76:41:7d:16:
4a:14:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:01 2025 by rpki-client