Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: P/j2JTAPlut2OS5a8EASsC5dVS+cIACYy9Upko2tOa0=
Subject key identifier: E3:47:BC:E9:E5:FB:74:F9:BF:53:7A:50:16:34:5F:0D:A0:17:82:46
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 0194BC3BFF6CF7EC2BA81F1E91F891362FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 030A
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: FSTejsy85xyT+AI1dBnw5HXs0UVyq38+lu7VEbBngxc=)
2: cekUNXzTWTu4gnxTXJJQQyW61Cg.roa (hash: ZDt6OkPV5Ex3Yi3FM3u0/RzjrLejRDKeTGQEGbNL8iA=)
3: gZkzIGBCOcCNiXUZazqSYQeGbpg.roa (hash: SNGs7fhDLTyLRk6mGoAtMtemcP7ESy0f3pn7nCib2+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ff:6c:f7:ec:2b:a8:1f:1e:91:f8:91:36:2f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=e347bce9e5fb74f9bf537a5016345f0da0178246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:10:db:6e:ad:d9:8e:4e:a5:dc:dc:58:65:
d2:56:73:ec:82:c9:4f:25:06:77:80:9e:77:26:df:
b7:5f:fa:03:0b:8f:95:a8:43:d8:e4:e2:29:2b:56:
e6:b6:f6:16:23:5e:74:e0:a4:9a:f4:d9:bc:49:63:
f5:4c:fa:70:7a:a3:9a:32:c1:92:8c:9a:65:5a:d5:
0d:a3:3c:12:d3:9a:f4:11:17:ca:fa:92:01:10:9e:
7b:a7:4b:5c:9d:e2:1b:7a:b1:28:2d:5d:d7:55:c5:
36:b1:d3:19:b5:d7:a8:4c:6a:8f:87:16:f0:08:38:
f1:d4:a8:ce:bc:8b:0d:6f:6c:ec:0f:36:19:56:1e:
29:7b:3c:e9:df:71:2d:c3:6c:cf:69:02:07:40:e9:
45:15:fb:20:50:b8:8b:98:96:59:3c:c0:9f:d3:8f:
22:69:47:c2:9a:f0:f7:82:97:1d:19:3b:a2:56:f1:
98:f5:1d:4b:a3:23:ab:12:ed:1d:43:55:6d:d3:5b:
16:d7:a2:62:e7:76:b4:29:9f:59:bf:af:df:e1:39:
de:d8:cc:60:f7:6d:22:95:b8:29:9b:13:2f:44:19:
fb:c6:6c:d5:fc:37:b5:83:48:21:a0:23:68:b7:ee:
fc:54:87:d6:1e:da:c3:51:a0:b5:fb:b1:06:36:56:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:47:BC:E9:E5:FB:74:F9:BF:53:7A:50:16:34:5F:0D:A0:17:82:46
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:a7:de:8d:a7:ad:cf:f5:96:20:ac:d0:56:ae:39:10:c9:
36:7b:5d:38:b6:3c:8c:d0:90:c2:74:4a:b7:0d:c2:3e:45:8e:
bb:62:f0:7b:75:27:4a:0a:32:11:50:42:91:ea:0b:a3:c7:c5:
a7:08:d4:fe:b0:c5:08:36:47:75:34:c6:55:71:db:a3:4c:8c:
93:3a:b9:13:09:c6:d8:04:cf:b7:55:51:3c:f9:d8:c6:fa:58:
86:a6:22:2a:13:5f:64:83:3e:18:00:d4:e3:28:6c:8e:49:9c:
45:c2:30:c6:e7:b4:0f:08:9c:c0:32:8c:08:6a:50:2b:95:b5:
e4:ad:5b:4a:43:fd:2c:85:45:e3:16:a3:b8:88:9d:17:c4:27:
00:42:56:0d:bc:b0:2f:dc:66:4e:c5:33:c6:76:ef:0d:6c:79:
d9:a8:4a:45:72:be:1a:18:82:2b:2e:11:2c:28:c5:91:2f:7c:
5d:c7:92:98:e8:c3:75:c9:87:30:f5:bf:8d:db:f1:a7:cd:89:
a7:c7:3c:dc:64:14:81:c7:4c:5b:ca:9f:58:ad:b6:17:20:cd:
c2:da:0e:df:63:eb:75:7a:8b:7d:d4:23:93:a5:9d:c7:2d:99:
02:be:e2:07:a6:a8:bf:35:f8:06:ac:ee:7f:a4:0c:ef:ae:76:
d0:0f:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:27 2025 by rpki-client