Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: NJIL2zwoI+MYlMNqcRcmpL+7r4Ke215ty8pd77z3nww=
Subject key identifier: 4F:C7:0B:2A:69:C1:18:8A:61:E8:91:94:6B:E7:77:6B:10:5B:77:F7
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 0194BD179D3F512BD90D73C7E90843DE0CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 12BE
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: SGSfirs+CsVdRTkBp/Z+PN8OsQmg6YsuXISzXYV2nH4=)
2: UO1KioDak-iT8kDHcohpIq9FtOw.roa (hash: c3Q9cGyrR1r4x1r6NclTtEj7o03+DJv3Ywm72vFkEgk=)
3: kh50C_NbBjs1xffmc65N3htJRDA.roa (hash: zegMkFf00MvL1ZefKCFbf5kmHagYnvltoauO7HXIkok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9d:3f:51:2b:d9:0d:73:c7:e9:08:43:de:0c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=4fc70b2a69c1188a61e891946be7776b105b77f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:3f:83:6f:7f:ad:e8:94:2b:6c:94:7b:39:
1a:90:3c:2b:e5:e3:a4:a9:d8:d5:df:a9:34:2f:6b:
fe:38:7d:13:e9:ba:81:01:eb:5b:dd:83:dd:53:d0:
c5:ad:ff:1b:bd:14:7a:60:d6:4e:e6:72:05:0f:40:
bc:04:cd:dc:9e:df:c4:e6:37:aa:34:5b:2b:cc:e1:
5f:cc:a7:90:c5:1c:9d:be:14:fe:18:f3:16:76:87:
05:2f:3b:37:eb:bb:83:00:ec:ee:81:cd:f4:e2:cb:
da:09:bc:bc:6c:c4:46:5e:64:7d:18:dc:8f:d5:57:
d9:76:29:39:ba:fc:e6:d9:2d:8e:31:c8:ad:70:d4:
a6:c8:15:d0:5e:df:3c:3c:3e:20:bc:14:be:64:b8:
7b:60:96:98:37:dc:39:d2:c3:92:06:58:4b:2c:55:
90:8c:de:59:07:50:3f:96:b2:2d:bf:93:8f:bd:6d:
09:6c:ab:8e:02:3d:27:e3:e1:85:21:6e:f8:43:66:
1c:c4:11:c7:e6:2f:c5:13:97:6c:ba:df:2b:72:f5:
a3:71:73:28:4f:01:bf:39:5b:89:40:a9:ec:70:9b:
d0:55:02:a3:4a:db:0b:bf:34:6d:c4:dd:90:79:77:
fc:32:d9:74:2e:cd:e2:7a:34:44:7a:dd:eb:5e:b2:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C7:0B:2A:69:C1:18:8A:61:E8:91:94:6B:E7:77:6B:10:5B:77:F7
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bb:79:02:de:7f:16:bb:37:52:be:de:8e:3d:1a:d3:84:4e:
55:3b:e0:d6:de:f0:e9:6f:87:f6:aa:8f:34:bd:94:65:c0:1c:
4e:ae:c8:16:85:a7:ff:c1:66:42:93:7b:ee:4e:1a:48:b2:59:
f7:f9:22:fa:26:46:5a:62:6b:9d:18:2a:39:39:a1:59:04:cb:
f8:c1:5a:cb:eb:e4:62:81:e1:02:38:2f:f1:7e:d5:7d:27:32:
c7:4f:0b:a4:0b:46:85:29:24:97:5b:2b:eb:f5:04:46:a4:d4:
eb:68:c5:54:9f:dc:f6:2b:ef:f1:3c:68:bf:1f:f8:42:6d:ab:
15:77:53:04:6d:29:b8:c3:4e:e5:53:1d:c7:42:21:fb:2b:22:
d2:4d:33:a8:99:d3:8b:cd:1f:a5:7d:0e:71:66:ac:3c:a5:79:
d7:e4:0e:e9:61:e7:09:6f:e7:f0:0c:d1:b8:11:b5:d9:4b:48:
6d:5b:4f:af:60:ac:89:c7:46:5c:be:c1:17:bc:01:ed:1a:78:
fc:ac:0b:b8:a1:b2:0c:dd:92:02:c4:c5:dd:ba:1d:89:39:ca:
34:17:69:ed:d5:0e:af:0c:9c:e1:94:8d:ad:dc:1e:9e:fc:49:
b3:6e:a1:22:6d:ff:87:2b:6b:27:bd:d2:ba:f6:a3:29:98:e4:
f8:5d:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:16:05 2025 by rpki-client