Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: CHuqtKcoMROThHsD4Gp/dgRW/hKBoc1+x7Ynmpl2jRo=
Subject key identifier: 57:4F:D9:8B:DA:38:19:A8:CB:80:76:74:7A:30:3D:C8:F0:A7:52:FD
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 0194BD17C797231D6D10B3B79971BA79486D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 135C
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: jw+8LTM4HgUj1SLI7m5sGwVN/BAA9alFBX92ep2IdTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c7:97:23:1d:6d:10:b3:b7:99:71:ba:79:48:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=574fd98bda3819a8cb8076747a303dc8f0a752fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:96:22:35:8e:fd:fc:91:d2:fa:b6:b5:7e:
07:05:3b:70:d2:f4:55:fc:66:f3:fd:f6:bd:d6:af:
56:42:54:3b:e8:81:3e:f1:8f:f3:e8:f7:de:c1:54:
b6:4a:5a:b5:3f:71:72:d1:d6:71:cf:c4:06:42:c2:
76:6f:c5:a6:6d:fb:43:ed:b9:c4:da:12:8d:f0:32:
26:44:66:e1:fe:1e:43:d3:3b:1a:d2:06:41:18:25:
55:97:3a:ea:e2:56:e0:30:b8:5a:ca:84:11:9c:49:
a8:e3:e6:19:b5:7a:5e:dc:d2:42:f0:36:d6:51:9a:
57:be:ad:d9:5d:9d:ab:e8:e4:a0:b7:48:3d:16:f2:
a8:46:7f:a5:a9:13:a1:26:53:8b:86:44:cf:9c:0c:
7b:4a:ea:23:40:a5:90:09:b2:70:70:e8:8a:f3:0e:
12:72:f3:24:d8:b1:3c:76:68:cc:af:b6:0d:64:7e:
4d:bd:ed:b0:f3:8a:4d:87:23:dc:71:28:f7:4a:01:
75:12:df:0d:9c:51:91:77:3d:87:9a:8c:e0:5b:a9:
4f:a8:b1:fb:19:e6:bb:2b:41:bd:ad:eb:24:d2:d3:
94:81:42:2a:60:a7:c7:a8:71:ef:53:80:50:65:53:
99:f5:51:7e:e6:32:e8:65:de:12:e0:0e:08:bb:ba:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4F:D9:8B:DA:38:19:A8:CB:80:76:74:7A:30:3D:C8:F0:A7:52:FD
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:3d:16:d0:57:ba:99:3b:b4:b9:6c:8e:96:33:54:09:17:
a1:da:e2:b9:76:b2:e7:6a:da:df:21:7c:79:f1:a8:c7:c0:f3:
55:b8:c0:c0:8c:00:be:e5:c5:59:7e:28:91:68:a0:f2:47:79:
84:f4:56:3a:21:2c:f0:d5:6c:1f:ae:9a:8d:98:04:0c:d1:d5:
82:71:d2:e0:da:1e:6f:fc:ef:0d:ef:1c:dd:6e:5f:e8:5a:c3:
bf:76:af:4a:79:5a:95:49:75:28:28:53:28:e2:0c:c0:9c:17:
c9:c9:21:5e:23:d4:7f:68:70:d7:72:b4:0f:38:36:ec:06:3d:
9c:e5:cc:89:bc:1d:d5:a2:34:4b:72:6d:31:64:c4:ec:20:1e:
3f:d7:14:29:9c:4c:7f:e6:9a:3e:09:40:74:dc:6c:81:f6:9d:
e3:d5:ee:ba:30:83:f2:20:e3:40:60:34:5e:ef:a2:73:70:4e:
c0:14:cd:42:ba:9b:8a:5b:17:44:29:cb:59:9a:54:50:e1:7f:
ee:67:12:cb:88:45:48:10:8c:02:94:11:61:b3:77:19:b7:45:
84:ae:2e:d0:c2:33:c1:a3:68:65:42:0b:a8:d6:fe:32:81:80:
91:2e:f7:b4:d6:d1:12:43:38:55:4c:19:bb:b8:a2:81:b3:18:
e0:38:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:42 2025 by rpki-client