Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: tu101SWfNNRPviQn4pDCDiheWJOogLd3/dzr7BVQFzk=
Subject key identifier: 7B:42:DB:19:70:01:1E:75:82:AD:CF:01:C5:15:F2:67:28:B8:B3:35
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 0194BBCEA7F7A2A9CD81FCC4B57B07BC01D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: na9Hst7EFquzF3ETffzf+mLWVS5/QCn5mrP6ALHAyIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a7:f7:a2:a9:cd:81:fc:c4:b5:7b:07:bc:01:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=7b42db1970011e7582adcf01c515f26728b8b335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:67:4f:4a:ba:de:98:97:ab:86:75:05:4d:
d1:8a:1d:6c:21:b0:b9:0a:40:36:e9:64:81:bf:4b:
6b:7a:d5:98:6b:99:85:10:be:71:dc:a0:2b:5e:3d:
ef:65:cf:ea:f3:ec:80:b0:c0:ff:dd:df:05:7b:83:
7a:1e:cf:b5:c5:63:fd:f4:cf:7e:21:14:7c:07:a9:
b2:9e:d0:32:0b:f8:43:4a:f6:9a:c9:76:a0:c2:8b:
7d:f1:89:6b:41:b0:4b:d5:4d:08:c0:8e:2c:2f:8e:
e0:3d:d6:a9:f4:bf:c5:99:18:0e:ff:58:b9:ba:ad:
2a:31:70:a6:1a:29:2e:d2:64:53:95:ba:a0:a4:13:
d1:ea:c1:ab:b4:45:95:87:80:07:c4:a7:57:96:9b:
df:2e:47:18:c7:8c:91:1f:89:41:45:a9:d8:61:62:
8a:40:e1:9e:ea:55:c1:5b:46:a0:fd:76:de:88:f7:
ae:bc:56:77:e5:08:82:7c:23:88:07:2a:2b:1f:d8:
3b:33:70:31:3d:31:9c:c2:f5:83:2f:b3:ac:e3:2d:
71:9d:39:8d:f5:86:b8:ab:56:88:1b:83:dc:8c:34:
10:02:04:27:e8:99:19:e3:53:fe:57:79:ce:b0:15:
99:8f:7c:63:5b:f8:f0:d2:49:2c:86:5a:cd:2c:64:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:42:DB:19:70:01:1E:75:82:AD:CF:01:C5:15:F2:67:28:B8:B3:35
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fe:d6:7c:20:0f:4f:6c:e6:53:6e:0f:fc:4f:b0:e7:7a:88:
1e:43:09:24:91:ec:92:16:a2:32:50:6e:c8:12:6e:79:8e:48:
a4:30:cf:24:d2:a9:40:88:28:ed:44:d5:89:69:9b:12:1a:90:
2c:44:96:3a:7e:e6:0e:46:64:17:c3:76:be:6e:c9:03:6f:e3:
8a:a3:33:bf:0a:60:4b:65:ae:0f:e2:30:f2:24:b9:95:3f:54:
ce:bc:8e:fa:90:c4:af:fb:c5:cf:24:ee:34:55:1b:f2:df:a1:
c7:65:87:03:83:e3:97:e0:63:74:6e:2a:b8:e5:f8:a0:10:64:
8a:9c:f0:da:66:1c:36:70:24:27:65:e8:43:c7:c8:2f:b7:90:
29:81:3e:68:6a:c3:32:1a:67:ae:41:6f:af:3a:51:3b:87:db:
3a:46:83:b7:58:46:92:9a:a8:18:b7:36:67:02:a9:84:f3:9a:
6c:1d:7a:92:a6:c9:ad:00:ff:85:8f:be:75:b8:52:1d:0f:6e:
65:cb:9d:9c:60:7a:8f:b1:58:8d:63:df:38:b0:85:06:9e:9a:
4d:58:41:c1:6a:6e:d1:e3:14:e1:20:ab:b8:b2:0c:ff:ed:93:
a6:d8:59:18:9a:fb:bb:59:76:85:eb:e4:5c:ad:99:e3:18:95:
a3:88:13:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:32 2025 by rpki-client