Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
File: NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json)
Hash identifier: exqkmF+bDiDWg5Jy6P/8uJQhiNdvDb594LtZaOfqwIg=
Subject key identifier: 5D:52:C5:3E:D5:13:33:FD:26:51:A9:79:DD:38:34:4E:F6:AA:CA:89
Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df
Certificate serial: 0194BC04E90AFC23D39B4AD01F3C538D6CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
Manifest number: 0C2F
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: L0g65zDp7dTxjEZyeBLxsS2MAObx/IlaUOm1oUG41bE=)
2: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (hash: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e9:0a:fc:23:d3:9b:4a:d0:1f:3c:53:8d:6c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=5d52c53ed51333fd2651a979dd38344ef6aaca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:19:d2:93:6e:89:e7:44:14:9e:93:14:7a:
25:52:e9:45:c4:a7:93:60:26:29:00:e2:8d:a3:31:
2a:28:bd:06:35:62:92:bc:dc:95:a3:85:16:e2:eb:
66:db:c2:b8:a6:01:9e:96:c4:a5:f9:f3:20:6c:f5:
01:06:90:bd:7d:0a:3e:48:40:ba:de:a2:48:c5:37:
17:07:87:71:05:d5:63:27:b0:96:e0:84:c0:4f:9a:
ec:65:02:52:12:f5:e5:d3:51:4c:5c:39:40:c3:2c:
1f:fe:1f:12:8e:f3:43:96:b4:83:df:54:e6:9a:11:
87:33:a5:26:5f:79:ce:de:9c:24:01:8c:2d:6a:5e:
63:3e:a2:2e:88:e6:e4:e3:db:05:78:17:55:f1:97:
d0:dc:04:2b:51:d4:cf:0e:60:fc:30:31:79:7c:98:
af:8b:a9:a6:f4:af:1e:65:72:77:c2:33:c7:45:25:
9f:dd:8a:8a:81:45:e0:26:3a:f0:dc:31:74:9a:23:
2d:48:84:05:03:1a:be:96:c2:6b:08:de:71:18:e4:
fc:ce:20:72:2d:a4:c0:29:da:9b:29:28:c4:4d:ec:
51:e4:b5:b2:17:87:e7:ea:56:d1:d5:84:c4:8c:24:
f6:6a:aa:1f:67:c8:e0:aa:bd:2c:ab:fb:8a:fa:1e:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:52:C5:3E:D5:13:33:FD:26:51:A9:79:DD:38:34:4E:F6:AA:CA:89
X509v3 Authority Key Identifier:
keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a1:70:6f:d9:27:31:26:59:b3:3e:8a:81:88:f5:aa:dc:a2:
b6:81:8c:c1:ef:e4:a9:75:4a:9f:9a:aa:b5:19:57:9e:78:34:
1e:2c:37:1b:f4:79:52:53:02:1b:36:33:56:0b:f0:ae:61:d0:
8c:0d:b8:81:19:f7:8f:4a:ec:1e:7e:74:92:83:75:bb:3a:e3:
10:17:cb:45:60:98:eb:be:a4:14:12:89:99:ab:9e:ec:02:b6:
0b:a4:3f:51:f9:b1:99:81:5c:ac:61:8b:e7:80:33:b5:6b:32:
72:e5:58:79:f9:e7:44:43:5c:d7:74:c8:81:08:f8:8c:13:d7:
4d:d5:9a:ac:79:cd:b3:9d:dd:d6:04:7b:f7:43:14:ba:bc:e9:
08:f6:06:57:60:b4:fc:bc:cc:79:23:a3:89:8d:92:d6:fd:2f:
58:ff:e3:c7:1e:c7:4e:1b:68:7f:87:c3:ba:e4:63:51:a3:e1:
f6:e0:82:7b:45:cd:ce:6d:81:63:55:40:eb:3a:36:59:45:f5:
cd:50:31:7a:57:50:2b:8e:c2:f0:64:a1:ae:47:28:4a:b9:ad:
f7:46:9e:f4:9a:94:37:cd:9f:1d:5a:98:c6:08:3d:7d:53:55:
0f:ac:da:70:e9:91:6f:75:41:61:6d:2e:3d:83:0c:3f:42:5b:
65:26:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:27 2025 by rpki-client