Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: pxWEmQkb8ow7GOHhMOQx7TP2aWPDzVEO5R6ThXujAlY=
Subject key identifier: CC:37:7D:8F:3C:DC:E0:F7:1E:70:40:5B:59:5D:E2:95:31:EC:3D:B1
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 0194BC3C2BABFA06BBDD7A65707ED0BF9A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 096F
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: 1xl5Gm9v3NAbmR3anxuXJ5kBugKO4D3ogyF1tRbYLtQ=)
2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2b:ab:fa:06:bb:dd:7a:65:70:7e:d0:bf:9a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=cc377d8f3cdce0f71e70405b595de29531ec3db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:b2:65:cf:02:11:88:07:c4:9b:22:04:02:
d5:ac:39:ab:90:5f:9c:8a:93:e7:a7:81:3a:2d:4d:
4f:95:a1:9c:f9:e8:20:85:d8:08:d4:f1:ef:70:b0:
c0:55:6c:c2:c0:e8:46:10:ee:a9:ca:66:83:a2:d3:
fa:ac:0b:6b:75:53:61:e1:55:04:f6:a1:31:c1:ba:
17:35:40:cb:84:0f:69:5d:1d:b8:8f:22:4e:9e:9d:
61:63:70:6e:58:86:cd:95:6e:45:e1:f3:62:5a:8c:
bd:ee:bd:3d:e0:a5:ff:ef:a9:13:43:73:59:ae:85:
74:1e:4a:9c:cd:46:07:32:3a:62:84:a1:90:8e:6c:
d0:db:66:70:57:83:41:82:8c:68:4f:54:d0:44:08:
73:6c:07:a0:f4:d5:db:43:c3:bc:29:5d:b5:a9:99:
b5:24:42:22:a5:16:3c:f6:57:93:3d:c2:82:29:07:
d8:4d:cb:a4:6a:aa:13:8f:67:ed:42:ae:52:4c:c7:
0b:95:56:4d:42:bf:82:0b:f1:d2:37:5e:64:c8:16:
23:f9:ee:c5:f1:0a:a5:11:69:aa:f7:75:63:48:46:
6b:03:2c:11:eb:eb:e5:13:cf:7f:8c:89:1e:53:37:
00:11:1c:b9:96:15:92:cb:f3:6f:c8:a1:28:bf:19:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:7D:8F:3C:DC:E0:F7:1E:70:40:5B:59:5D:E2:95:31:EC:3D:B1
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:22:1a:e7:cd:4d:94:8b:9a:5f:81:09:04:d6:59:23:46:b5:
ba:af:00:c1:25:02:48:dc:33:99:35:21:ba:e3:41:54:4c:4d:
a7:62:81:84:0d:e0:ee:c3:e7:b6:c8:8b:b9:bb:ff:76:82:b3:
87:5d:ac:d5:ca:af:04:16:6a:db:f0:7a:08:cf:76:01:8f:1e:
66:57:ff:b7:73:11:a9:86:09:d5:a1:20:35:04:b2:40:10:94:
39:32:dc:f0:1e:46:3a:ac:d2:83:7c:99:69:79:d9:67:d3:6e:
2b:60:a5:f2:f5:f2:a7:42:63:d7:05:16:c3:30:5e:45:66:ca:
fc:ff:a1:89:56:4c:6e:a1:b9:52:13:95:b7:80:da:4d:b4:82:
f5:df:b8:da:c5:bf:64:ae:b7:c4:4c:ba:2c:91:77:49:07:95:
7d:d1:6d:75:e6:86:f3:c4:a3:f7:06:62:03:fb:04:0c:58:1f:
bf:50:ea:bf:b0:00:b0:7b:bc:87:16:5a:4b:22:d0:e4:d9:0a:
31:e1:d0:b0:0b:ec:ee:54:e9:0d:18:da:f8:0f:70:e0:a5:1f:
af:f0:6c:d2:f3:2d:6b:12:05:1a:18:3c:f2:15:19:74:0e:43:
86:0d:29:07:fa:62:9e:d0:50:b2:54:4c:7d:ae:42:a5:5a:a0:
86:a8:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:37:07 2025 by rpki-client