Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: nUGIH0xKG9/3Dq1nWPHXlsLsw9hH8IPUi6GfheJw8zI=
Subject key identifier: AE:A6:2F:C5:AB:BD:FF:15:67:A8:D4:6B:AC:CB:5F:8E:A3:75:2C:0F
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 0194BC04F99352F7ECF1F1D9C5C2D6F14A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 0F05
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: gg4kjQH-MRQrS-FzBjsif1edZso.roa (hash: K0w6We/nHbxDdN4hPxZ1hRud5nyEBhVgL5F/G8Gxd1w=)
2: ijqfOwh-mKxL0IFbe46uAqyqBe4.roa (hash: NhINayUAgUyP+pjnQ3qR8pj7oOBaH36Jng4YmwD8sGM=)
3: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=)
4: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: g1xU1FYNtX9gMfP2TvMVxoV5pAAFTtOMt5alqrGkpsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f9:93:52:f7:ec:f1:f1:d9:c5:c2:d6:f1:4a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=aea62fc5abbdff1567a8d46baccb5f8ea3752c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:08:63:84:f6:ce:62:6f:aa:a2:1c:27:ba:
05:6e:fc:49:1f:dd:d3:88:ce:6f:11:a3:c6:c9:7a:
9f:81:d4:aa:a9:30:f3:ad:ab:11:f0:41:d2:8a:a9:
85:fe:06:69:7f:18:36:b8:24:1c:c2:63:81:73:7b:
02:c8:c0:f7:ff:2a:af:b4:6a:2c:26:83:59:e9:e0:
41:55:b9:50:e6:0f:bb:b5:42:ae:be:3d:2c:07:e3:
dd:f4:fe:e4:6c:9d:ca:b6:7f:c1:28:05:88:bb:8f:
fa:8a:ad:15:c3:a8:35:e5:f9:52:de:d7:21:4e:e4:
23:6c:1f:7b:38:37:c8:ca:49:ee:a4:08:2c:17:d2:
b8:07:17:84:60:45:57:19:fb:fc:74:26:b3:1d:64:
98:80:06:41:57:53:c7:92:fb:c1:57:27:48:e6:b5:
ad:56:ab:23:52:58:81:ef:5f:6b:e5:1e:1c:bf:ce:
65:ab:7d:72:1f:2a:66:cc:45:49:a1:8c:d4:dc:e1:
cc:6d:a9:7e:26:1b:dc:57:a9:b6:5d:49:7d:cf:ef:
41:57:06:5b:dd:90:98:af:46:96:e4:5d:8a:7f:37:
03:b3:19:9d:47:48:89:00:ad:69:7f:08:d2:19:b2:
a4:f2:ff:22:e3:5a:71:4f:16:ec:2c:ee:6d:eb:d4:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A6:2F:C5:AB:BD:FF:15:67:A8:D4:6B:AC:CB:5F:8E:A3:75:2C:0F
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:68:95:5b:16:bc:b4:a0:2c:9c:ce:09:90:40:53:b4:71:84:
67:95:b5:24:73:be:82:25:92:81:6d:9c:5e:03:3c:16:2c:5a:
64:80:d8:29:ec:c4:b1:71:52:eb:62:47:56:df:b6:c3:a9:63:
cc:e9:51:41:f0:27:80:bb:6e:c3:11:8e:d7:e7:d7:85:11:83:
5c:90:d5:da:e1:5d:99:bb:fe:63:8b:18:a3:c5:91:8d:37:8d:
09:1c:f2:b4:fb:07:f3:7a:6b:77:c7:34:e6:6c:b6:14:f4:9c:
4f:1c:0d:bc:e4:0c:46:9e:53:ba:11:a8:1a:1f:11:7e:d0:f5:
b9:37:0b:9d:bf:6f:13:da:3b:cb:cf:3e:96:44:20:23:7e:ca:
0e:61:d6:25:1a:3c:e5:49:a0:6a:de:83:83:26:2a:34:da:e0:
f8:6e:d5:1b:f2:12:84:88:57:24:d2:7e:04:64:92:c6:88:b1:
6d:80:a8:dd:79:00:1d:58:64:7f:34:97:72:32:ca:11:05:b4:
37:1c:e2:db:07:df:6d:47:12:ab:47:49:56:b3:68:c7:38:11:
28:78:8f:cd:6d:5d:40:67:d5:b1:ce:1e:0c:24:6d:e9:a7:81:
d4:91:98:de:09:19:25:ec:13:24:8a:e7:2f:d7:51:bd:4d:ff:
d9:e3:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:02 2025 by rpki-client