Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: SUquCeDQE8ivOdAFzB+xL/0Xkrof8xqaPEXMh5ObzJw=
Subject key identifier: 00:45:11:21:B6:B6:C7:0A:FE:ED:B7:87:7A:DD:71:01:15:DC:8C:E9
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 0194BC3C1E2DD3C8E124FD9186295EEE9E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: GXHyCf43fNrDow/U+HfzGmCZJtRf5jXyfis7Mu3bB8s=)
2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=)
3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=)
4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1e:2d:d3:c8:e1:24:fd:91:86:29:5e:ee:9e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=00451121b6b6c70afeedb7877add710115dc8ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:8e:f4:cd:d0:67:91:8f:a8:0b:aa:a9:72:
19:dd:dc:bb:11:b7:1d:97:48:b2:94:a7:01:48:92:
bf:be:1c:e4:47:6e:56:67:4c:12:f4:b3:1f:3a:a3:
d8:98:c2:63:58:99:5f:bf:5d:cb:1c:d1:43:bf:f0:
ac:56:df:40:74:5a:fb:13:73:59:e6:e3:bf:ad:0c:
65:6a:97:5f:49:eb:92:53:8c:fa:dc:2f:22:55:24:
6a:26:77:6d:ef:fb:d5:1a:72:34:ca:ad:dc:76:97:
3d:a1:c2:fc:37:56:9b:49:40:31:da:d9:45:c4:94:
2f:3b:49:18:0d:02:89:c1:97:c0:a7:aa:9c:55:c7:
fc:cd:2c:8c:e5:c1:e8:59:91:0b:42:fc:aa:d5:a7:
3f:55:1c:64:5c:97:cc:d3:85:e4:4d:18:fb:3e:4b:
0d:18:49:55:15:96:72:78:46:a4:ef:23:51:13:91:
b4:e3:aa:7a:fe:9a:1f:77:cb:07:82:98:f0:00:2c:
74:b5:b9:4f:52:96:05:ed:2f:ad:67:ec:f2:40:2a:
4e:ae:70:c3:a7:67:ec:47:17:eb:54:38:3c:65:86:
66:17:ec:1b:c3:f8:ae:8a:b7:70:8a:fe:dd:14:0c:
9a:d6:80:74:2f:2f:d1:55:d1:fe:39:23:fa:15:b7:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:11:21:B6:B6:C7:0A:FE:ED:B7:87:7A:DD:71:01:15:DC:8C:E9
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:95:f1:40:f6:0a:24:3e:c2:33:25:8d:51:13:6d:5a:5d:
97:8e:87:cc:b9:d0:46:83:6e:1d:34:fe:56:15:31:37:8e:2b:
de:e9:59:90:7d:b0:c6:d8:54:7d:14:69:78:9b:cb:58:84:65:
0e:42:0f:52:b9:3f:d2:ab:6b:43:3f:cd:1c:79:fe:50:f2:dc:
2c:bd:1e:80:c3:ed:05:51:f0:d8:bf:32:89:b6:41:45:f7:fa:
03:24:f9:e8:79:19:aa:11:e6:aa:88:4e:9a:c6:47:01:11:46:
88:8a:60:31:d3:c4:7e:bf:9e:16:e1:45:18:e4:58:e0:4c:4f:
06:9f:45:fb:ed:8c:c4:98:bb:e5:a2:d6:61:ee:75:e4:cd:d2:
6d:87:e3:9c:65:0b:bd:d8:9e:fa:83:41:61:6b:60:67:e3:a5:
74:9d:ad:01:77:1f:4e:43:bb:2b:08:17:99:dc:05:49:8d:d3:
14:8a:06:cb:82:9a:1a:e7:0b:37:3a:91:a6:78:30:68:14:b5:
3c:03:71:09:55:38:68:c0:7b:12:76:a0:de:27:00:20:37:d0:
69:c0:8b:71:c4:11:e3:c2:52:8d:a0:59:31:76:30:cd:3a:e4:
59:ef:c0:74:fe:95:e1:36:67:d0:e9:98:56:31:74:4e:72:ec:
9e:db:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:57 2025 by rpki-client