Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: jqpnqxJDXjBG5TobI/CKSjhgkZG4zV9yLghESgE7Wb4=
Subject key identifier: 3C:D5:E6:29:BA:CD:68:57:E0:F6:22:71:80:70:AC:89:7F:27:95:F8
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 0194BC3C5A6DB0EA412FAF0B98CC0FBB202B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 13E9
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: hBRMkgu+ZD62nAQMJ/gAkLLU7W1m1Q0bJ/JsriKzpSU=)
2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5a:6d:b0:ea:41:2f:af:0b:98:cc:0f:bb:20:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=3cd5e629bacd6857e0f622718070ac897f2795f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:5f:19:5f:3c:05:f1:a0:a7:d1:8f:5e:95:
63:15:2b:d0:a4:77:3c:c0:3b:d6:a6:bf:56:26:cc:
12:5a:9d:15:90:42:2b:fa:86:fc:fc:0c:16:41:56:
53:38:a5:53:98:00:4f:c0:72:6d:3a:43:e5:72:a2:
fa:5d:40:4b:b7:61:2e:c7:21:17:1b:4f:de:a3:ef:
29:17:33:f7:0a:66:c5:2f:57:7f:6d:29:92:72:b2:
55:e3:82:35:8e:f7:e4:55:e7:bd:d9:7c:ae:5c:a5:
bb:f1:e8:96:09:cf:9b:bf:c9:44:74:b2:57:2d:0d:
ba:0d:31:79:1e:4f:41:3c:f2:d9:8c:b3:1a:d8:c3:
31:9c:8a:e1:0a:44:7b:6f:7d:4e:4f:00:81:d6:72:
6c:0f:87:e5:c0:3d:a7:ed:ba:01:1e:81:c7:86:6a:
27:fc:82:cc:be:17:08:e1:9d:b3:2c:0c:f1:08:53:
27:e3:50:90:ea:61:27:d3:fb:f0:49:c2:9f:08:0c:
56:9b:9c:5c:f6:11:4b:2c:0e:fd:f8:da:22:bd:52:
a5:45:1a:ea:35:10:90:4d:a0:e3:95:58:8e:b4:38:
c4:1c:23:87:46:bc:a7:00:4b:d2:77:b3:26:9d:47:
e0:74:29:55:55:d9:9b:fc:8e:fd:48:aa:83:e0:67:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D5:E6:29:BA:CD:68:57:E0:F6:22:71:80:70:AC:89:7F:27:95:F8
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3a:71:02:9c:be:c3:e5:70:4a:2f:bc:74:8c:ac:82:45:b5:
87:17:5b:a8:ec:a2:a6:2d:82:0d:c2:a6:3d:a5:1f:ad:30:ed:
c6:94:fe:85:09:4c:e1:a2:2d:98:16:9f:2c:64:92:10:f1:03:
88:75:ce:72:db:d9:79:b0:09:18:a6:06:b1:52:e5:8b:00:36:
8b:67:2a:92:34:ad:a5:4b:be:77:e4:10:f7:dc:41:12:78:86:
d1:be:3a:64:5b:07:0c:4c:c4:ec:8a:98:4b:74:58:cc:11:40:
a3:ec:0f:ca:72:b7:6f:76:9d:8b:d6:89:7f:0f:27:6d:13:f0:
58:ce:1f:d2:c2:08:98:6e:1d:3e:fd:a8:ff:1a:43:b8:bd:43:
86:04:36:c4:3d:d7:13:50:de:b3:eb:58:5d:2c:00:9e:e8:40:
06:63:b2:9a:29:81:a3:6f:b3:37:e7:10:fd:17:5d:55:4f:f2:
c2:2b:62:d6:6d:7f:c0:58:5e:5a:ba:8a:69:2d:fc:40:ea:93:
3a:d6:8a:2f:dd:eb:b3:d7:58:25:23:dc:27:ac:f3:52:2a:c1:
aa:fc:71:d7:bc:34:80:d7:94:28:09:69:dd:73:d8:9b:92:67:
06:3c:f7:3e:67:f7:57:d2:81:f2:6f:95:37:68:81:a2:67:9e:
0b:ca:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:24 2025 by rpki-client