Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: XKnCRIuvHNUWdYsKGNX/0Het9/OrBqTjFZdJbeCz928=
Subject key identifier: 5E:1D:AB:9D:B5:6C:D8:92:45:90:3C:55:76:04:D4:30:67:1A:0C:F9
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 0194BCAA34CBA42088480985CD7FE8E4DC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: DoSQxj87tl5FRxMLQyiaF5QJwbUPaShsSpQRi0ebnj0=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:34:cb:a4:20:88:48:09:85:cd:7f:e8:e4:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=5e1dab9db56cd89245903c557604d430671a0cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:4f:42:6f:89:1d:aa:b5:a9:2b:49:df:b5:
40:15:ad:53:07:91:e4:37:39:8c:5c:da:7c:ac:fe:
8f:a2:69:9f:e0:c5:15:74:52:9c:2d:2b:24:24:60:
01:b3:b9:b2:e9:70:54:db:06:bd:c7:a5:28:2c:83:
8e:35:e7:6e:44:1a:fd:cb:cf:42:f3:ad:14:f5:27:
10:bc:b9:45:c8:34:7c:50:e2:9f:a4:8f:37:13:ee:
ba:0b:e8:ff:22:42:18:be:b1:27:12:2f:86:54:ef:
9e:34:c6:40:ec:61:ce:1b:dc:d4:c7:70:fd:54:5c:
8e:46:a9:c8:6f:a3:3e:c5:23:2c:30:41:d7:d9:c7:
e2:8a:d0:2b:e8:8b:39:03:9f:f5:d2:07:b8:23:b3:
69:d1:b4:b1:4d:3f:6b:a5:85:46:59:54:95:d6:8b:
51:cd:c0:9c:84:7b:8f:09:c6:5b:27:cc:c8:8b:80:
be:25:10:01:a9:bb:69:f5:0c:2b:8b:97:c9:28:f0:
a3:9f:79:01:cf:32:d8:78:55:88:94:e1:16:f1:1a:
56:a1:72:81:0d:fc:58:2a:a3:fb:c4:42:c6:47:6a:
73:c3:86:35:f9:9f:f8:be:9d:35:b9:e2:30:dd:68:
10:8b:3c:e9:b6:5a:a9:c5:2a:93:75:21:d5:ef:60:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:AB:9D:B5:6C:D8:92:45:90:3C:55:76:04:D4:30:67:1A:0C:F9
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:90:41:09:25:ad:e1:15:87:25:34:eb:5e:fc:8c:c6:b0:96:
23:a9:4d:6d:ab:a5:9d:b8:be:83:55:ab:eb:71:6b:98:b0:92:
05:f1:ec:d3:e0:e2:e0:55:49:0f:b9:ed:51:e3:9a:d9:67:20:
13:0a:f0:f6:af:11:72:c7:75:7d:26:3f:eb:94:1b:24:eb:d2:
67:2b:50:1f:d5:39:00:e2:e5:e6:ce:d2:45:b6:4e:b0:69:2e:
1d:06:c0:ca:56:ad:d4:9c:20:d7:1d:86:06:d2:2e:21:21:e5:
b4:d4:ce:5a:c1:00:ac:c0:d5:86:38:e1:6b:5d:a9:a4:5a:f6:
bd:1d:cd:eb:58:f0:18:67:9d:ab:f7:91:3e:e8:e7:bd:9a:33:
e3:99:d9:00:69:dc:03:76:ad:cd:c1:ec:2b:d4:26:70:7c:83:
63:0e:65:42:5d:7a:88:b5:20:b6:60:5a:18:31:6d:a1:12:be:
1a:6f:c1:55:e8:5e:08:2e:fc:7e:6a:8a:72:31:42:f8:10:32:
06:45:c3:88:2c:4d:a8:72:e8:7c:f0:01:cb:d9:d4:7b:f4:59:
4d:38:8b:36:9d:f8:49:9a:a6:26:2d:81:3f:00:30:91:c1:88:
f0:6f:8d:c5:64:ff:a4:f9:7b:e3:d6:9f:0d:60:b4:cd:b7:69:
cc:65:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:34 2025 by rpki-client