Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: BsM3GJmREc8EbgWGpfAFeIH1XHOUAnmRQaT2tCi4b+4=
Subject key identifier: BC:86:47:A6:B9:80:85:5E:51:0E:EC:04:FA:DA:AC:70:77:DF:50:DB
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 0194BD4EA4FE3B098B453B745CE124622368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 0144
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: w8IGj7bEkPiodbLF3R111953+wf+iuvqCTkTSqqQmoE=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a4:fe:3b:09:8b:45:3b:74:5c:e1:24:62:23:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=bc8647a6b980855e510eec04fadaac7077df50db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:4e:a5:82:96:65:cf:9c:70:33:34:96:5b:
21:4b:4a:ef:b0:54:f3:75:7c:c9:8a:53:2d:11:df:
92:5a:c4:94:86:c8:a4:fa:a5:53:b6:16:ad:c3:00:
af:50:bf:22:4a:8c:36:07:74:06:5e:85:1c:3c:3a:
e1:02:1b:d7:58:de:6c:9e:6b:a7:71:dd:a4:20:57:
7a:3e:d2:bb:80:61:57:10:64:cc:c9:6d:c3:26:34:
72:a6:38:49:40:48:0d:6f:1e:e1:5b:10:c2:24:0e:
ef:7d:9d:65:a9:8e:d5:f0:7b:c8:29:f2:97:ff:7e:
f7:92:97:23:89:b5:7a:7e:41:ed:d4:a1:1a:20:6a:
cd:f9:f3:c6:53:3c:be:99:a2:10:2f:10:73:45:f1:
47:5e:3e:02:d1:20:c9:be:ad:3a:56:5f:86:d2:5b:
35:3e:b9:a6:e7:9b:98:10:1d:15:2d:ee:84:71:41:
ec:0c:c2:f2:eb:eb:1a:f4:dd:2b:4f:f9:91:f0:82:
90:dd:0d:d5:de:bf:73:3c:e2:c0:77:d8:40:4a:82:
bf:bb:0c:09:10:c2:85:94:22:f5:f5:44:b1:75:b0:
e9:85:a9:2e:ee:71:05:a0:af:1a:c0:8b:87:d5:8a:
10:de:97:e6:26:e6:af:86:fd:78:f8:7a:0c:e1:d2:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:86:47:A6:B9:80:85:5E:51:0E:EC:04:FA:DA:AC:70:77:DF:50:DB
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b9:66:00:85:37:21:46:b9:d6:16:e6:27:2a:89:9b:c0:da:
32:0c:8d:a7:d2:7a:8d:2b:eb:83:08:73:e9:49:2a:8f:a7:c1:
62:6c:b1:d4:4f:15:b7:47:f2:f0:92:82:54:6a:72:15:9d:9e:
0e:5e:40:3a:65:b1:8e:b0:4b:ce:cf:63:4d:f8:61:5a:51:85:
bb:81:56:f1:fa:e5:71:9d:4f:e1:6d:91:5f:69:9a:10:7e:3a:
67:f9:e3:cd:09:2c:b2:ee:72:a2:79:e3:04:e9:a7:73:2a:f1:
63:d0:33:76:89:13:87:4f:df:3a:2e:51:15:94:46:e8:20:71:
54:08:d1:34:65:ba:ba:0a:59:a6:d4:b8:43:97:29:4e:d1:df:
d8:47:ab:c7:42:90:62:d5:00:12:cd:bd:d7:24:bb:e4:b8:0d:
cd:5d:10:cf:f1:d1:3e:31:4a:1f:1a:b8:5f:4c:4c:87:6b:b5:
bd:53:bb:b1:90:6d:63:87:b7:dd:71:08:93:8d:ba:a6:4c:00:
72:b1:93:ab:aa:4c:29:41:39:17:e1:a7:14:a3:86:28:28:31:
6d:75:85:9b:9e:82:12:69:cf:a3:37:a7:33:44:e2:28:27:3f:
68:67:99:2d:1d:0e:c5:f2:f2:a3:c7:71:ba:f0:ad:0d:c4:05:
05:eb:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:29 2025 by rpki-client