Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File: nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier: 4JEu5Xn4Fmaw9oHBoemEcb1zvHMOTQW6mFVZFvbEN0s=
Subject key identifier: B0:9B:B1:7E:96:88:9A:10:B2:66:19:74:A6:8E:A7:63:8C:24:E5:6E
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer: /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial: 0194BC730206B0FCE54F8C57D0609BF123C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: SEfajqd6Fo8tBAWadiViUIYfxIc.roa (hash: buws3E1khkxa0hWtFXM/6/Y2Vl2k7b7xq83eMENRDLs=)
2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: RitzWAPnD1ln9pTyDJGg6pi+LHYqWfPzqfGvmhpuSh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:06:b0:fc:e5:4f:8c:57:d0:60:9b:f1:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=b09bb17e96889a10b2661974a68ea7638c24e56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:70:34:7c:65:fa:32:29:4f:28:67:dc:c3:
a1:29:a9:2b:41:3e:2e:ce:93:b1:5f:57:1f:2c:36:
d2:a7:06:33:91:dd:f2:11:1c:99:0b:67:23:9e:16:
49:40:d2:72:cb:a2:5f:ec:91:43:52:3b:af:ad:1a:
0c:77:29:34:c6:b9:66:6a:c1:d8:fc:d0:d8:40:43:
ff:f9:22:fd:43:00:0c:98:69:da:ee:3a:11:1c:af:
85:02:de:16:7c:52:1e:01:c5:8e:fb:df:31:50:5d:
1e:36:63:a3:6f:20:34:22:9b:6a:40:9e:2f:b2:1c:
1e:08:03:88:3b:9a:5e:fb:4c:82:ae:66:69:0d:65:
64:23:20:6a:d4:a4:f0:9c:b5:10:1f:f0:88:20:fd:
3b:f0:10:0e:1e:4f:05:6b:b1:cc:48:a9:4a:53:c0:
59:61:b8:e1:6b:9b:88:b9:71:a8:10:83:20:fa:30:
ef:d7:d9:96:96:99:0f:c7:07:14:c3:44:75:31:11:
a7:a3:d8:f7:d5:6b:19:36:a7:06:70:69:dd:6b:8e:
f9:d3:89:48:f7:20:eb:5b:4c:7d:c5:2c:8a:e6:32:
67:b2:ba:e2:6a:e3:52:54:08:74:22:86:6e:91:e5:
57:6b:97:66:46:9e:dc:a6:e5:df:80:46:dd:96:3e:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9B:B1:7E:96:88:9A:10:B2:66:19:74:A6:8E:A7:63:8C:24:E5:6E
X509v3 Authority Key Identifier:
keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:21:29:ec:67:65:19:14:89:be:75:29:74:57:0f:26:c9:f0:
9e:ef:3f:10:cd:5a:3c:1f:30:dd:f2:d6:3d:3e:04:01:1a:75:
5e:6c:59:b5:56:91:7f:96:42:9b:2e:e3:e8:41:f5:30:fe:8c:
e9:e1:77:01:57:d5:a2:2b:b3:0d:68:b4:8a:f1:3d:aa:2b:3b:
43:2b:18:f7:84:f0:74:39:c9:47:e5:40:ac:ef:3d:48:d0:4a:
19:e9:c1:c9:8d:e2:07:b3:0b:0e:0e:e5:4a:17:08:87:aa:00:
ff:f0:74:b9:91:90:97:bc:d4:cf:44:21:a9:ca:7c:9c:fd:69:
25:2d:3b:23:ca:82:61:34:6d:86:7e:8b:66:8c:70:53:4c:22:
7a:97:49:62:ad:46:06:9f:3f:ec:e0:56:c1:1c:7a:de:fc:35:
d0:9f:05:ee:38:4a:5b:b2:75:dd:eb:14:56:da:00:dc:00:a2:
52:71:f7:a4:da:7f:4c:17:87:0d:df:52:69:03:8d:d3:4b:88:
36:12:c4:af:3d:0d:2a:85:51:a9:47:4d:7f:a5:18:51:c2:58:
40:ed:df:c7:dd:5a:59:8d:fa:fb:1c:af:a9:f0:f7:a7:88:be:
48:d4:f7:5a:2f:0c:61:06:08:9c:73:c1:94:2d:3e:b6:bb:bf:
1c:eb:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:13 2025 by rpki-client