Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File: ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier: Nd4S/+Om4qg9wgZ2YUsozU+9ihEMuUWt2viaglx9tVA=
Subject key identifier: 0F:01:44:20:91:97:B8:EB:2B:64:04:76:62:01:53:4C:D8:34:C3:CF
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer: /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial: 0194BD85A21017656D5DD4F8CF7264B7DC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number: 1071
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (hash: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=)
2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: SPlh1v3PRL/vPGgJScU2+j9JB6r0bgwOFY8Vwyoj5Dg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:10:17:65:6d:5d:d4:f8:cf:72:64:b7:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=0f0144209197b8eb2b6404766201534cd834c3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:2e:8a:e4:8e:0d:d6:c7:f7:16:25:ee:57:
0a:2c:f1:a8:88:9f:f3:e5:68:34:4f:6f:3e:16:d3:
a0:5f:ca:b9:7c:9c:ca:f7:50:99:dc:1b:e2:82:4a:
53:5a:1a:e3:3b:98:bd:4d:51:91:50:4c:f1:53:82:
8c:a4:c9:f1:d7:0a:c6:9c:24:a4:c1:94:1e:b5:37:
65:70:96:e0:b4:0d:02:f3:bb:1e:e6:b5:63:0e:82:
80:8f:82:dc:b2:7e:ee:87:f1:66:5c:a0:f8:06:b5:
85:86:a9:11:5a:2e:f2:16:00:73:7e:42:56:98:5b:
8b:7d:dc:6d:f1:66:e5:84:43:67:a7:33:aa:3d:2c:
c0:cb:f8:df:48:88:bc:64:78:3a:bd:4a:55:98:bb:
3e:29:58:7a:de:57:a7:a4:3a:cc:3f:0a:b3:15:ff:
ba:98:7b:49:5f:0e:4e:b4:79:9e:cf:28:64:17:9d:
d4:db:53:d8:8d:cb:29:68:c1:64:c5:69:26:a1:be:
75:12:39:53:bc:d0:61:e5:a0:55:26:e1:53:79:c4:
bb:de:8e:de:14:88:ad:16:6d:dc:52:0c:c5:13:79:
f7:3c:24:e1:42:20:dd:28:98:31:b2:73:14:e9:82:
ac:9f:40:65:e7:a4:5d:28:13:f2:d2:4c:f1:e1:4d:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:44:20:91:97:B8:EB:2B:64:04:76:62:01:53:4C:D8:34:C3:CF
X509v3 Authority Key Identifier:
keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ef:a2:46:28:14:19:a4:64:db:ea:83:8a:65:e7:b4:4e:3d:
c1:95:05:da:3e:15:c1:9b:72:04:a0:03:d9:20:2e:cb:4f:dc:
aa:b2:1f:d9:0a:54:45:b5:87:c9:7f:64:2d:0d:43:7c:23:5a:
8e:f0:b6:50:1a:bb:e7:9a:1e:56:5f:e2:93:af:31:bd:c1:0e:
64:35:d7:82:d0:89:cc:dc:aa:45:03:f9:62:82:99:fc:2a:ec:
fc:99:e1:bb:5b:4e:68:28:22:30:75:ed:b7:85:8b:2c:69:e5:
9c:ec:59:7f:e8:44:37:55:90:e5:f9:5e:96:74:d3:d7:32:59:
7f:f0:d6:b7:3f:3d:cd:ed:12:e7:03:18:70:75:17:e6:f2:9d:
66:0d:8e:80:ce:a5:18:cf:d0:cb:8b:f7:81:7e:81:e9:f3:4e:
69:9f:da:13:03:f6:a2:f2:b4:ea:c2:d9:a1:57:e4:b4:fc:26:
eb:57:10:84:75:d1:50:ee:aa:6d:9c:91:bd:ca:e4:e2:41:75:
23:ac:d1:8e:94:21:f8:ae:fa:49:c8:6b:08:14:1c:22:93:53:
47:00:3d:de:3e:c3:57:01:13:b3:14:5a:9a:cf:b6:ba:c9:b0:
a5:d8:d3:b1:da:85:d5:1f:4a:3a:97:ad:45:d4:89:9b:01:ed:
fe:cb:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:56 2025 by rpki-client