Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: BAeCFZZk4LK42IzO4ptKZObT0x2PsrZ1pDLcib2fZ7s=
Subject key identifier: 0F:82:C7:37:FC:32:60:2C:E9:19:2A:5D:AB:61:01:F7:32:60:5D:61
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 0194BC0514A079921A8FC5DADE616942F443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: E2UhO579zA4FmxKPOl5WHt//eORKH52NtsJq2twdDKA=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:a0:79:92:1a:8f:c5:da:de:61:69:42:f4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=0f82c737fc32602ce9192a5dab6101f732605d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:32:f4:09:62:95:c5:7c:24:78:18:7f:27:
81:da:be:cd:2d:5c:7f:f5:73:24:81:a5:a5:6f:a4:
ff:a8:b4:2a:33:04:e9:3b:9d:ee:ef:06:83:da:e5:
90:ac:fd:b0:d8:f7:00:63:5b:0b:c6:29:c7:61:c0:
c2:f0:de:ac:29:b5:3f:b6:34:8e:24:65:c0:0a:e9:
48:79:fa:fd:eb:54:da:9d:30:00:bd:07:44:33:27:
42:24:ca:3b:21:eb:e0:20:39:ab:69:d8:5b:e4:0b:
cc:c0:b0:ee:3e:87:9e:15:63:8b:0e:c1:dd:7f:36:
ef:6d:9f:51:b5:05:7a:ee:12:fd:e0:3b:fb:6c:56:
50:d8:bd:4f:12:b3:9f:ca:3b:64:29:07:cf:d9:66:
13:0e:86:05:95:58:29:25:dc:d3:63:b5:03:8e:29:
ce:6b:0a:50:81:58:50:1a:70:12:17:16:7d:d0:f8:
6a:46:f0:26:ae:07:ec:c0:a4:1a:f6:03:80:13:00:
e2:20:0f:1a:1e:01:35:89:84:2e:95:ea:6d:37:22:
3e:21:a7:ed:29:60:22:4d:48:3c:25:83:f7:f4:69:
4d:e7:21:54:78:3a:44:d9:d8:fc:16:82:7a:b3:9c:
50:43:6c:76:9c:16:7c:31:2b:b3:90:6b:0f:cd:a6:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:82:C7:37:FC:32:60:2C:E9:19:2A:5D:AB:61:01:F7:32:60:5D:61
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:14:df:9f:2b:1d:01:b2:77:98:11:76:31:ba:05:9e:6e:d1:
8c:50:b8:a5:6d:7f:c5:c6:7d:26:7a:18:a2:34:59:fe:13:1d:
26:d1:0b:50:99:3e:46:0f:8a:88:c4:0a:2a:16:4f:a6:f1:3e:
38:5a:a8:7a:2e:c8:02:3e:de:9b:9a:13:0a:46:a1:ed:72:c5:
e2:0d:3a:cf:7b:07:37:e4:c1:da:f9:06:c8:99:4e:52:94:42:
67:a2:a1:3a:12:55:1f:58:03:55:80:e5:38:b8:5e:2b:3b:85:
0f:54:9a:b1:dc:78:52:d5:61:89:4c:44:5f:c3:e3:9b:8f:9b:
89:e3:d7:62:7e:87:f0:c5:c6:14:6e:76:3f:b4:15:54:22:fc:
72:3f:c8:af:59:68:7a:6d:ba:23:f6:34:1a:3f:9e:c3:f7:2d:
36:22:81:bf:cc:17:c8:a7:7f:40:7a:ed:2d:89:09:b0:ad:3e:
b1:0a:67:a7:9c:e3:b8:0a:b3:c0:6d:a2:84:30:a0:31:9f:16:
43:4f:0d:1e:35:28:05:61:2e:50:e6:54:1b:8c:e1:6a:ca:b4:
82:b7:46:d2:75:f1:d4:f0:24:d1:58:37:2f:a3:b8:52:17:e0:
aa:b6:b5:8f:a5:da:7b:ee:57:7f:ed:79:83:25:18:a5:10:a3:
53:58:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:29 2025 by rpki-client