Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier: /oR5lEIyda3qUG8Tr8ETk1LMNWbttahgtMvNefDv/m0=
Subject key identifier: 03:18:E5:47:89:5C:4C:05:4C:FA:62:64:DB:66:A7:91:6B:FC:65:2F
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 0194BC3BFB0B1EE905A1516F44113EA489CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number: 0FE0
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=)
2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: BIsaUcflROAdEaEQhGTncUoTUBTO41vrevhssp+2xvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fb:0b:1e:e9:05:a1:51:6f:44:11:3e:a4:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=0318e547895c4c054cfa6264db66a7916bfc652f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:b2:ec:89:fe:16:d0:f7:b5:b8:aa:55:22:
7a:fb:c9:43:c9:12:bc:8b:11:d6:25:e1:d3:98:ca:
e8:9d:50:72:53:5f:4b:ac:eb:ae:e6:46:d0:0b:22:
ae:86:70:bb:fb:1a:e3:7a:b0:34:42:7a:3d:45:b9:
3b:9c:c5:81:05:be:4d:a3:ae:55:01:a3:38:6f:c0:
ff:0c:d3:6d:ef:80:c5:f7:ea:d3:80:69:22:ca:24:
db:d8:b9:60:04:e4:c6:79:6c:ef:3b:16:e9:c7:06:
e6:f5:9a:1f:ed:03:81:e7:5a:b8:1d:a7:7a:90:c2:
0a:c8:8d:55:39:05:fe:b5:71:61:6d:7b:0e:67:e8:
ef:9c:8f:e2:a4:7c:eb:39:25:d9:15:0c:54:65:c6:
3f:c6:7e:cf:98:18:fb:9a:a0:f0:db:63:9e:fa:1a:
ca:03:6e:68:98:66:57:f4:22:71:6d:8d:c3:17:0d:
88:4b:dd:2a:ea:8c:1d:b1:9a:8a:35:e1:41:ee:96:
87:e0:c0:58:6b:af:76:bb:96:49:ab:e7:08:68:2b:
33:74:a2:3a:91:25:ce:17:66:d3:aa:1c:4a:6c:c9:
f6:d9:e2:2c:68:21:f4:50:c3:01:14:64:bb:e5:f7:
6b:83:46:a5:fe:56:5f:dd:6b:e3:29:60:17:1f:c8:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:18:E5:47:89:5C:4C:05:4C:FA:62:64:DB:66:A7:91:6B:FC:65:2F
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1a:e3:f3:a3:08:f3:c6:4c:a2:ef:bb:ae:12:c6:14:63:91:
7b:45:cc:8d:a4:f2:ed:82:90:57:cb:cb:08:5e:05:d5:5a:1a:
ee:d1:5e:83:36:e5:32:c4:cd:ca:82:a9:7f:e8:f1:05:49:1d:
47:46:03:f7:ff:9d:61:57:3c:12:56:1a:8c:95:c7:62:3d:9a:
36:b8:d7:bd:4f:ab:b0:df:cc:18:f3:6c:b7:d2:cd:3e:71:3f:
14:08:50:9b:66:f1:32:40:ae:a9:58:e1:28:f0:24:68:10:58:
aa:a8:cf:41:b6:41:16:08:ce:99:05:6f:0f:f4:07:ec:ad:89:
16:76:a3:f9:10:9a:9a:2a:72:e4:72:d2:96:d5:05:1a:ef:5b:
d6:b3:57:34:4d:1a:10:b4:62:9d:b4:18:35:f0:de:5a:3a:b9:
bd:66:81:74:42:a6:d9:36:56:50:f9:34:b9:af:1b:7f:90:2e:
10:31:4f:2d:9d:74:46:dd:7c:8b:8e:71:22:a4:f6:78:67:43:
97:1c:ab:92:15:a4:c6:19:c0:7e:7b:4f:d9:27:c1:d6:76:2c:
1a:5f:50:b0:68:4d:2f:7c:4e:15:10:06:e3:1c:e6:b0:c2:71:
2d:0f:dc:43:08:aa:07:2d:c7:bc:98:e3:48:fe:fa:c7:0c:1e:
61:86:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:20 2025 by rpki-client