Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: n84+yxS2Ad7JHGjIRJKBYf1vrayeOZrGmB6gB7ImNmk=
Subject key identifier: 1C:A8:5F:97:C0:61:EC:4A:F0:58:A1:DD:10:82:2D:26:A2:E7:6D:AA
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 0194BC3CAA6831FB462C30F3AC554C3E77FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 0C6E
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: 5790DOkKny5vGOZUNVYKXT3eVaMmaNyQjlzZgYtlYUo=)
2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:aa:68:31:fb:46:2c:30:f3:ac:55:4c:3e:77:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=1ca85f97c061ec4af058a1dd10822d26a2e76daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:59:5e:5d:d6:1b:47:fb:ca:68:19:ed:c2:0e:
b2:60:aa:78:68:dd:f8:b2:91:7e:cf:5d:25:7a:55:
46:4c:28:7c:ac:cf:f9:3a:12:af:9b:56:f4:b6:d1:
4a:22:90:ed:7f:fd:3a:ab:76:41:e4:8d:f2:53:03:
c2:7a:45:f3:83:0b:8d:4c:d7:5b:a9:01:fd:b5:a9:
cb:4e:06:9f:34:dd:c2:4b:2b:d8:f0:8c:59:d1:27:
aa:54:f2:d0:54:e8:1c:6b:b6:c2:46:2e:02:7e:e3:
e3:58:ee:d2:e3:4e:ca:e3:21:f6:73:3f:8b:59:f4:
c9:22:f7:54:ac:b8:ba:08:13:38:61:48:8e:68:b9:
b2:18:9c:a6:71:dd:f1:41:b3:fe:41:03:ce:54:fe:
60:0d:bd:b1:bf:85:09:c8:4b:3d:46:78:39:a4:86:
d8:5a:05:d0:78:37:a6:12:9f:61:89:5c:9c:82:e6:
2c:32:fb:ba:c8:f0:c5:05:e3:7b:6e:4a:46:bd:23:
73:cd:b1:93:15:4f:c8:6d:13:f3:45:06:42:fb:eb:
f1:01:c9:99:5f:ff:8d:cc:2f:eb:a5:d4:41:66:63:
7d:2a:c3:1c:ef:9c:18:59:54:fc:8e:1e:ad:a4:4b:
55:67:74:0a:97:34:fd:22:3c:aa:88:3c:8b:02:b9:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:5F:97:C0:61:EC:4A:F0:58:A1:DD:10:82:2D:26:A2:E7:6D:AA
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f7:2b:cd:3a:a2:14:e1:13:b3:22:2d:54:15:4d:f4:8d:1f:
ae:e0:ab:56:27:59:4f:63:a2:0f:9d:8d:28:4b:72:b3:32:9a:
d6:ea:49:19:3a:2f:e0:bc:d1:23:f5:26:3c:a0:e4:38:75:a2:
a2:18:f2:27:13:25:c2:63:9a:4f:e9:80:40:cc:0d:5f:90:6c:
ab:ef:6a:6e:7e:2b:ac:1a:40:a5:2e:3d:52:5e:64:1f:08:27:
41:e6:e8:d5:2d:f1:91:4d:8c:f3:8c:dd:58:43:c0:22:10:c7:
38:a8:6f:d0:2b:fc:ee:c3:3a:16:a8:dd:d7:f4:8b:e8:d9:f6:
c7:5b:1e:67:01:3e:93:e8:06:67:d1:2a:d0:6d:0d:fe:5b:9a:
08:cb:f2:e0:d0:c6:bc:95:0b:cb:32:c0:10:ec:96:5e:76:6b:
c5:d6:21:c0:6d:9f:75:2d:02:9d:af:d7:6d:45:91:19:08:cb:
39:62:96:cf:e2:ec:c5:ba:2f:fb:fd:d5:dd:b4:0e:3c:1a:32:
b3:1e:36:3a:f5:71:ed:eb:f5:d3:ca:a9:87:5e:42:c9:12:3e:
41:3a:4b:0e:63:43:37:f7:2a:a5:b5:37:3d:34:24:c3:68:aa:
7a:c7:c4:81:ad:67:c3:39:9b:1a:7e:a6:10:24:27:77:9f:49:
21:1f:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:14 2025 by rpki-client