Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: zb1tXMg1h916m4gGjmvYMn/RWf/UhM7met/aXlZCGB4=
Subject key identifier: F2:C0:C2:D7:3E:1A:29:A0:10:0A:EB:66:86:48:3C:46:38:60:B0:84
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 0194BBCE8DAE9880D2F6D59CF3A0BC2EC72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: x9488CZEPTQhEXzO/kJjLPzfjV/IZ7C7fWNRCRURZs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8d:ae:98:80:d2:f6:d5:9c:f3:a0:bc:2e:c7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=f2c0c2d73e1a29a0100aeb6686483c463860b084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:b2:3d:9e:2e:f9:ae:db:a2:ba:c1:63:d7:
99:33:64:68:4c:4c:30:aa:25:d8:ab:ab:73:73:2f:
46:26:90:5a:cc:6d:17:bf:36:be:d9:60:bb:43:1d:
79:05:16:c3:86:de:70:87:9f:e2:57:8c:5d:10:e3:
28:06:9a:52:dc:8b:75:51:2e:6d:8f:4d:ba:b7:10:
1a:0b:53:b1:31:d3:a2:fc:a2:0d:c8:b4:f1:41:0f:
9a:d4:42:1b:00:7d:11:e2:48:f6:54:34:5a:41:b3:
5c:b2:6d:3d:a9:ef:5b:73:38:c9:27:31:b5:bb:6e:
81:3c:d1:3c:b1:c9:aa:fb:15:1f:f3:1d:46:7b:1a:
50:da:d5:9a:4e:24:6c:ab:d6:b8:8b:eb:be:40:d1:
c3:d2:da:1b:c4:df:c6:53:31:73:e3:d7:11:08:9d:
c1:56:9a:e1:7c:ae:40:74:21:51:ab:89:c5:03:7c:
ca:cf:71:3b:fc:c8:e4:e5:8e:2b:af:1c:46:30:2e:
48:7c:9e:64:5b:85:51:34:3f:b9:6e:de:f7:3d:05:
05:fe:2e:d5:79:a2:94:1a:39:7f:c4:d1:f6:c0:21:
67:7b:af:d6:17:59:42:65:79:1f:62:54:91:ca:5e:
27:e3:8b:b8:ca:28:7e:ed:ea:5f:30:4b:0f:7d:d0:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C0:C2:D7:3E:1A:29:A0:10:0A:EB:66:86:48:3C:46:38:60:B0:84
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:79:16:ae:23:70:16:6e:74:72:84:86:8f:ff:eb:cb:5e:e0:
88:b7:d8:6a:42:a5:39:25:1e:bb:20:72:92:f9:35:e3:72:f4:
f3:dd:e4:9c:bc:c5:31:35:9c:94:8e:e4:f8:fb:1c:ff:74:5f:
cf:4f:5c:c3:13:5f:7b:e9:a1:57:d0:48:f8:11:56:52:8a:58:
c0:2a:a9:6d:e8:d6:b0:6a:c4:11:97:cf:46:79:88:6a:1f:51:
9c:93:1d:47:57:0c:aa:e8:49:b2:0d:af:60:a4:17:3d:58:7c:
e9:a7:64:0e:05:c8:aa:f5:1f:86:30:1f:84:a0:36:2b:8c:66:
59:ec:db:e6:23:c6:d1:10:b3:48:02:3f:72:ef:cd:01:3e:16:
bb:3c:98:32:9a:5e:e7:98:52:f1:70:64:af:9d:79:d6:ec:be:
a5:3a:fb:43:94:c1:02:7e:96:cc:17:ec:57:7f:d3:93:24:b1:
63:b0:b7:02:89:fd:51:6c:f0:3d:5b:32:c9:97:fa:f7:15:ed:
ff:79:81:b4:7e:33:ba:2e:8f:85:f4:73:17:65:9c:7d:13:0e:
c0:7c:17:b9:df:dd:a6:5c:62:fb:c7:ee:01:2c:35:63:44:58:
52:d4:99:93:ce:e5:61:33:c7:d4:61:a8:f2:1d:89:87:a1:d0:
90:37:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:32 2025 by rpki-client