Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: Fshr5qX0XCBh3AijlJX2uikTQm0MVWJNo67C1qvhnwo=
Subject key identifier: 32:03:EB:C1:6C:F7:F9:92:33:A9:9D:44:4E:84:D3:39:CA:78:56:BE
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 0194BD4E720276420145925DD79EEC46F660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 0319
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: OFH8FjJbzy4zU/5lhpSmHxu/uzd6MX3NRtsU2/HMAFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:02:76:42:01:45:92:5d:d7:9e:ec:46:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=3203ebc16cf7f99233a99d444e84d339ca7856be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:f6:7e:ba:35:d8:ed:4e:7e:8b:a4:5a:2b:
99:13:b3:69:ef:df:fb:19:17:18:51:83:38:6a:50:
fd:01:5f:a9:f9:99:34:9b:a0:38:57:6c:09:af:15:
74:c3:1c:a3:70:0a:72:84:ca:02:c9:26:99:7a:93:
42:bf:ef:45:3d:eb:21:f0:e0:1a:71:a3:12:a3:b2:
c5:e4:b7:46:d7:d9:fa:de:65:80:d6:86:4f:08:da:
32:bc:dd:6c:2d:e5:e6:51:46:d8:ec:a6:2d:45:b9:
83:6b:40:6e:6b:0b:0e:2c:01:e5:0c:89:ad:d0:d8:
3d:31:84:86:fd:7d:b1:49:0d:9b:e5:e4:f3:44:1b:
3b:26:bf:ad:55:63:44:05:ca:59:c3:38:9a:84:15:
6f:12:6a:fc:f8:74:80:5c:0e:ee:eb:0e:92:aa:8f:
ef:6a:bb:d0:d0:5b:0e:2e:c8:6c:47:2f:ad:8d:50:
de:94:97:50:1d:9e:3f:a3:b6:dc:2a:30:7f:93:32:
2d:e2:34:70:6f:b6:01:1b:81:5d:82:9a:79:15:42:
48:ca:bf:0c:ad:58:74:7a:f6:4f:5a:a7:4f:db:b6:
0b:e1:36:f7:21:92:aa:c2:33:ff:ba:79:cf:f7:f9:
19:ae:6a:d8:34:ad:ac:d9:b6:fd:98:e1:65:17:4b:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:EB:C1:6C:F7:F9:92:33:A9:9D:44:4E:84:D3:39:CA:78:56:BE
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:35:a2:37:25:a5:9f:ba:c1:96:98:61:f2:cf:6b:2d:83:c8:
79:ae:c2:97:06:c7:8c:32:0b:17:63:91:49:20:d4:44:31:be:
e9:ae:5a:a2:1a:4b:d6:b8:b2:4a:23:89:ef:b4:00:01:67:6d:
57:45:5d:31:2a:89:d0:65:86:a7:fe:d8:10:ae:8a:e2:13:38:
f1:6f:fa:ef:51:3f:4a:25:5d:37:fe:b6:5a:b8:80:76:1f:fb:
a6:0a:71:f5:63:08:8c:9f:2b:6c:62:21:63:fd:8e:d3:86:f1:
37:a0:f5:69:a7:6f:7a:68:76:09:5d:26:d8:8f:44:7d:be:5b:
ee:58:8a:6f:4a:4a:54:90:7f:ea:fc:94:15:42:b2:15:4d:8f:
25:57:0a:c1:21:86:a1:ca:85:ee:e9:98:40:17:10:e4:c5:6e:
37:48:82:a7:a5:2c:ec:ae:a5:d9:92:60:54:4b:a3:6a:02:3f:
ac:3f:b0:c3:73:cf:23:77:61:3c:78:27:00:09:9f:5a:92:74:
18:7a:3b:f0:a9:1a:f3:7b:96:8d:a8:49:3d:bd:90:d0:13:c0:
8e:79:f5:8f:54:03:bf:42:e2:49:02:49:70:b4:d2:e5:fb:e3:
b1:17:35:51:eb:83:31:cb:1e:d4:96:18:81:be:e8:96:da:11:
30:7d:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:09 2025 by rpki-client