Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: aY47UAkg2+wHreAgXKOJDLyiL8Yg3bOm5NRiUjW4EJQ=
Subject key identifier: DD:0A:DE:D6:5B:28:D7:02:A7:20:7E:25:12:35:68:B2:18:E6:B8:FD
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 0194BC3C8EB8B95EFFC467A6020DE946EE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 010A
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: Y0YxikW15z6fJ32aso16ARYlshB0Jn5RMKThk1jIMbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8e:b8:b9:5e:ff:c4:67:a6:02:0d:e9:46:ee:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=dd0aded65b28d702a7207e25123568b218e6b8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:d3:81:4a:54:67:6c:be:45:24:ec:cd:50:
e6:f7:cc:48:6c:50:43:58:ef:57:fd:8f:92:42:69:
34:e0:1c:09:40:cc:07:a5:1c:e9:9e:12:0e:7a:68:
d3:ad:c1:d6:f0:d8:3a:7e:64:ef:6d:af:53:98:f7:
be:f3:11:fb:8c:3d:91:49:db:63:1a:82:dd:21:ec:
c1:1a:2c:9a:ea:f3:d1:76:72:f9:01:10:c4:38:c9:
c1:b4:32:da:53:1b:d2:56:89:18:72:50:42:86:7e:
35:aa:a6:c6:33:f0:65:a9:26:89:b3:32:80:b1:8b:
4b:28:98:f5:f9:a6:22:c5:45:03:ea:f0:10:44:8c:
97:d3:74:cb:bc:67:49:83:92:eb:fd:27:b0:ec:3c:
a6:97:43:5b:c7:cb:25:e7:ac:ca:83:89:92:69:e6:
16:3b:1b:2e:8f:00:2b:01:4b:3a:b7:86:a0:3e:33:
43:3f:54:84:56:47:91:fe:3f:78:c3:44:07:dc:e3:
1f:59:55:d5:1f:22:91:d3:d3:25:53:93:6a:0b:3c:
58:50:8d:08:96:5e:f1:9e:c0:86:a0:0c:57:1f:cd:
7e:16:27:87:a1:93:5f:4f:1a:7d:71:a4:ce:98:25:
ea:a4:7c:b7:34:21:de:7c:2a:97:70:b8:fc:6a:1c:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0A:DE:D6:5B:28:D7:02:A7:20:7E:25:12:35:68:B2:18:E6:B8:FD
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:f3:63:c5:32:75:7f:98:ee:58:af:6d:c7:57:90:f3:db:
56:f3:9f:4d:d9:19:42:db:34:ec:2f:b4:28:b4:a0:4b:09:57:
d5:2d:85:94:97:55:5f:6e:63:62:43:4f:ca:c0:21:7e:8c:26:
95:43:bb:5c:16:d1:68:52:4c:c2:03:29:17:05:f5:57:19:e5:
ee:20:db:13:ab:ef:73:ad:c6:43:ae:58:03:e9:bf:74:4d:b4:
03:fe:b0:a3:d2:5e:22:1e:d4:4b:12:72:4b:4e:0f:cd:67:3a:
7d:53:e0:98:08:e2:ea:ca:0b:58:37:64:24:56:13:c5:97:90:
3c:ab:ec:d3:1f:1a:6d:f8:1b:9d:b0:cb:ea:9e:79:0f:36:5a:
79:72:95:ff:f6:20:42:36:81:25:28:cd:fe:dd:66:5d:de:6b:
5e:7c:93:ed:b0:aa:60:1d:66:d3:25:c2:a5:a3:36:81:7d:60:
43:b1:e9:b5:33:5e:2b:f9:9c:c7:d1:05:2b:61:41:8a:3f:ba:
60:10:d8:ca:0f:b2:e0:88:ff:ca:90:ac:cb:b5:df:8f:95:fd:
03:25:36:4e:81:07:8f:0d:7f:10:6e:50:78:a0:af:a6:d2:7a:
1e:9f:ff:14:6d:cb:06:c7:09:10:07:b5:f7:f7:e7:68:08:b3:
99:b8:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:12 2025 by rpki-client