Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
File: NEGOJrKutuqoFD_XGDD5s1Sue7w.mft (raw, json)
Hash identifier: 26A6GZQfUxwd44B9qTHGAQk4fVbDtF7vp1twzGc57WY=
Subject key identifier: 15:27:FD:8F:1B:38:41:C0:4D:3C:58:D6:DF:5E:62:10:02:C9:30:B5
Authority key identifier: 34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
Certificate issuer: /CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Certificate serial: 0194BC3CC0FA3B625E4B5D6C648D622786A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
Manifest number: 0CFF
Signing time: Fri 31 Jan 2025 12:01:25 +0000
Manifest this update: Fri 31 Jan 2025 12:01:25 +0000
Manifest next update: Sat 01 Feb 2025 12:01:25 +0000
Files and hashes: 1: NEGOJrKutuqoFD_XGDD5s1Sue7w.crl (hash: iieL1+sneCIxo0ObMMobHZ0NyPnJ8idWIMqCtZyjI2k=)
2: nsObN2DjPGcwLXn29XqybNz0hdw.roa (hash: LniUQovzLZtOR3Vslt1uv0Oiv/eQZfXqUz8XebxPz+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:c0:fa:3b:62:5e:4b:5d:6c:64:8d:62:27:86:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Validity
Not Before: Jan 31 12:01:25 2025 GMT
Not After : Feb 1 12:01:25 2025 GMT
Subject: CN=1527fd8f1b3841c04d3c58d6df5e621002c930b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:e5:af:96:68:1f:ae:3b:cd:3a:31:a0:42:
9c:7c:8a:ad:e3:8c:a6:7c:6b:1c:1c:b8:da:8d:53:
3b:a0:e6:18:27:70:ac:2f:1f:77:d0:d1:9a:14:89:
97:53:1f:2f:f2:00:94:63:ca:88:95:36:c5:83:9e:
59:b3:33:63:8f:2d:51:ab:43:ea:e7:aa:7f:78:8b:
80:ce:53:25:77:3a:b1:91:2e:51:6e:5c:16:6c:bc:
ac:9b:e6:82:84:37:99:08:e0:9e:ed:83:bd:76:91:
44:65:6c:11:5b:71:ca:f0:77:3e:a9:97:f4:a0:2d:
4e:da:ec:69:ed:d9:3a:12:f9:64:c9:59:58:b4:64:
da:70:e3:1b:ba:a5:7c:ab:6e:bd:22:0a:a9:b2:08:
26:c1:f2:83:a3:21:ea:5f:1b:65:d8:d4:b5:9a:9b:
92:75:f8:13:26:de:93:92:7e:a2:6b:de:59:50:18:
fc:a3:8d:6d:b8:2c:ca:6d:05:51:61:55:1a:ca:20:
79:68:e5:7d:37:ee:aa:5f:12:28:03:32:74:d0:c0:
47:ff:41:c8:e8:60:14:90:ea:b7:17:7e:d2:23:27:
3f:ac:62:15:41:35:79:88:a7:5c:17:87:55:a6:4c:
3d:28:36:a0:91:91:87:e3:0c:da:39:05:83:48:d9:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:FD:8F:1B:38:41:C0:4D:3C:58:D6:DF:5E:62:10:02:C9:30:B5
X509v3 Authority Key Identifier:
keyid:34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f2:f0:28:5a:ae:b1:ed:e5:76:53:2f:60:b1:62:8d:6b:14:
1b:5c:75:06:2e:fb:6a:b6:a7:7c:73:f2:b8:e9:4a:4d:c0:2e:
0f:6e:98:2f:79:e1:ef:7c:e7:83:52:47:ba:18:9b:52:dc:e9:
92:eb:06:6d:98:34:e4:ab:05:22:0b:e6:e0:3d:fc:a7:7f:0a:
da:f8:d5:ec:78:a4:58:dc:b0:be:ac:d0:91:8e:a1:0b:b1:24:
e6:4a:ca:be:3c:41:ff:80:48:53:a8:1f:06:c0:61:e9:2e:d5:
08:af:ee:ca:fd:36:a1:07:53:7e:6f:4c:bc:6d:2d:72:4d:1d:
65:67:2d:31:92:5a:8a:05:da:36:02:e9:5a:33:d9:d9:da:55:
ab:ad:6d:61:b7:3a:df:3c:d9:a6:a5:28:05:7c:97:6f:27:6d:
a1:93:4d:a0:54:c0:62:61:2b:01:db:e8:98:3a:ca:bd:c9:7d:
9e:d6:44:aa:e5:dc:19:2b:7b:a7:af:c6:06:1f:92:85:7b:7f:
ad:3c:cd:e4:fb:10:b0:7e:c5:d0:33:55:cf:c6:a7:48:60:e8:
53:8e:a9:f1:85:03:c6:97:20:85:94:34:eb:2c:57:67:f6:bb:
91:47:88:d6:9d:ce:fe:e2:60:9a:7b:f4:8b:c8:8f:ea:89:ad:
8f:41:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:44 2025 by rpki-client