Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: 4gXKnRD0WCP/+en7p717YCHlbgKNG6LBeVcy4PWUXCc=
Subject key identifier: 5C:64:E2:38:E6:FE:72:A1:7E:A6:00:54:5C:68:3B:C0:44:08:E5:38
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 0194BCAA32858908504E3CA04B5E2C79C187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 12
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: 6rro2X1RcM02cDppT5o3YosI73/r9Mbo0/n2bENPx2s=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:32:85:89:08:50:4e:3c:a0:4b:5e:2c:79:c1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=5c64e238e6fe72a17ea600545c683bc04408e538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:5e:d8:de:d1:b0:c0:43:8a:ec:1f:5f:54:
60:a0:d0:55:61:57:15:57:f0:54:ee:ee:cd:2e:87:
af:c6:52:15:5f:d1:dd:5d:28:ff:f3:ff:80:77:6c:
5a:75:44:6f:43:03:8a:a7:9a:aa:bd:cf:a8:7f:3e:
7c:02:40:82:8d:ae:0c:fc:2c:80:85:82:1f:64:3d:
12:9c:c5:f7:5e:fa:c8:b0:af:7e:09:25:af:6d:f7:
61:ed:b8:fd:e8:fe:2b:b3:0d:46:ce:fc:3e:51:94:
ab:8a:9f:e9:55:ed:be:aa:e5:13:eb:4f:9c:5c:f5:
81:77:7e:3e:e4:6b:e3:1e:1d:14:42:46:43:aa:4d:
5f:fb:71:35:3b:d2:5f:ba:a9:be:47:1f:f0:f0:ef:
d4:20:fd:4c:da:ac:75:6a:25:31:5a:5c:57:ab:48:
fc:41:ed:2f:b5:ed:8a:9f:6d:b1:5f:89:ef:14:da:
ac:a2:77:68:1e:03:0f:fc:42:b7:f2:e9:f0:0c:32:
f2:92:1c:1a:20:6f:eb:08:33:af:e0:c5:cd:34:b0:
28:e1:4e:02:e7:94:43:29:f6:85:c0:47:99:87:06:
b3:ce:3d:19:12:6a:1a:9f:d3:95:40:e4:c8:2f:48:
60:8d:8c:18:cc:a4:71:c0:2d:73:1b:ff:07:ab:26:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:64:E2:38:E6:FE:72:A1:7E:A6:00:54:5C:68:3B:C0:44:08:E5:38
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:df:26:6a:85:d9:8a:fc:d3:2c:0b:93:c8:0b:0c:0a:0f:49:
64:48:0e:eb:a0:e5:de:60:23:e7:33:52:c2:8f:cf:4a:9a:40:
fa:06:d3:70:24:ae:25:58:cb:36:0f:bf:d9:ee:3e:4e:cf:7f:
6f:63:31:24:fc:d9:7a:5d:6a:a8:ad:d1:fa:cf:22:f4:aa:fc:
09:55:8c:d4:3b:14:cb:13:09:fa:3c:12:48:17:ba:0a:5f:92:
e0:8a:8f:ba:94:02:2f:97:3b:ca:8c:8b:75:9b:72:1d:24:bc:
f9:bc:c1:e2:82:b1:17:3f:40:5b:fc:77:e3:a9:3d:7c:81:65:
91:a2:b6:a8:eb:45:06:f1:ed:4a:a8:b6:c5:19:50:dc:30:e6:
f7:bf:df:0a:db:e5:8b:25:a4:2d:f9:26:cb:aa:a0:12:a0:01:
82:ef:e6:e0:50:fe:44:c5:d1:d0:de:98:01:71:a8:48:a5:23:
2c:0e:60:07:b8:01:07:e8:2d:55:1b:0a:fc:d7:1f:93:00:52:
db:47:2c:49:63:a5:9e:ea:cb:15:ee:13:65:0f:6f:4e:3b:20:
5c:25:e9:28:55:51:0c:44:d6:f6:fb:04:cd:18:55:13:bb:7b:
16:67:fe:6b:07:5f:b2:9d:59:5e:55:02:a2:fb:ac:4a:ca:2e:
63:82:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:22 2025 by rpki-client