Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
File: caNBPUB9it-Ktr5VcGCU7-nD1do.mft (raw, json)
Hash identifier: W6JdyEx1Tdf59EzpcmyZTt+Xwg5uQCTNAWpVtx18yZc=
Subject key identifier: 5F:24:A5:D5:FB:AB:97:33:E9:51:97:AF:85:DC:56:B8:60:72:E0:6E
Authority key identifier: 71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
Certificate issuer: /CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Certificate serial: 0194BC0509315B30D1FD02DA659CC40C3922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
Manifest number: 0FF0
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 7G7G7tpVmWd60uNlZ2vEN1k8ScQ.roa (hash: 2r8MgNw8qHVAZHcXcB+fjTECDN+jibhAZMIq0CBmNHM=)
2: caNBPUB9it-Ktr5VcGCU7-nD1do.crl (hash: SNowPMpd9BzMbeRkggpcwk/EZMuMnH7JuNSn/GwgGTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:31:5b:30:d1:fd:02:da:65:9c:c4:0c:39:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=5f24a5d5fbab9733e95197af85dc56b86072e06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f3:34:62:f1:71:ac:93:e0:52:92:e4:6c:85:
a8:09:60:c0:f8:0d:e2:6c:e6:16:5f:c4:fa:b5:61:
30:b0:d9:98:b1:aa:82:fe:77:ca:88:37:5d:1a:a2:
dd:b2:ff:9a:19:1d:b6:11:d0:37:aa:74:2a:c4:47:
5f:b0:87:3b:30:3b:ec:e9:04:bf:18:6a:ae:b5:2d:
32:de:e5:fd:8f:f6:c4:fd:c0:9c:3a:f7:d8:e7:b2:
8f:44:5f:c5:3a:a7:02:60:7d:00:8a:d0:cc:e5:d4:
bc:a4:72:81:3f:e5:49:60:12:9e:76:e1:01:4b:f1:
39:bb:03:60:2a:4b:da:ae:83:92:15:55:4d:65:5b:
9e:72:59:80:00:97:8f:f0:11:11:a2:f0:76:65:bb:
b5:60:6b:dd:07:2d:17:2d:8b:54:38:75:4e:27:4c:
bd:2c:ea:9b:c8:a8:30:e8:8e:0e:05:52:03:9e:60:
fb:6f:7b:7c:84:e2:04:d3:2a:fe:a4:55:c5:14:c7:
44:11:be:62:43:1e:e2:5e:5b:fb:70:9e:be:ca:6c:
35:80:f8:ec:75:ca:4d:74:8a:eb:cc:34:67:6b:ae:
99:02:48:8d:fe:38:39:1a:7a:da:af:81:19:26:bc:
4b:f7:50:75:9c:a9:4d:ff:a7:fa:1b:10:8e:ea:4c:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:A5:D5:FB:AB:97:33:E9:51:97:AF:85:DC:56:B8:60:72:E0:6E
X509v3 Authority Key Identifier:
keyid:71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:98:c0:01:da:c4:3b:56:40:78:e3:45:0b:fe:db:9c:36:35:
fb:c4:9d:7d:f3:d0:78:d1:28:e6:b2:32:8c:51:95:64:a3:8f:
13:d1:65:58:c8:dd:01:d3:69:ed:26:9a:77:b3:9a:2b:07:bd:
62:18:b9:fb:60:f2:58:f7:3e:c1:53:37:dd:5c:1c:d0:8d:f5:
e1:47:16:5e:f7:82:6f:ba:7d:60:4b:ca:f9:49:03:16:21:6f:
3c:6a:ed:26:78:d3:41:19:97:5b:72:e9:56:80:38:92:3c:9f:
bf:7d:6a:34:74:1f:1b:74:f2:3f:ce:3f:af:ae:8e:7a:09:cb:
f2:c6:5e:b3:45:29:81:fb:3d:84:4f:fa:76:e2:a8:3a:d7:13:
ab:4c:72:75:a8:36:ce:a3:41:c3:9e:ea:30:7f:c6:f4:81:a0:
aa:d7:b2:02:ec:ba:dd:79:f7:c3:e0:06:aa:07:2c:50:62:f1:
5f:27:21:64:e7:e0:63:27:6f:12:07:a3:bc:2e:d4:f7:62:56:
ae:4e:7f:ab:c6:fe:5d:e3:15:ab:8c:6e:ee:b5:18:b6:d5:e7:
ad:45:89:c7:a4:a4:ec:47:dd:97:46:32:d5:ee:83:34:ee:14:
ca:61:8b:8a:b3:ab:b3:01:48:2b:b5:6c:22:dd:df:ea:0c:bd:
45:d0:9d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:16 2025 by rpki-client