Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
File: NmTkRiopAqUvgm2uOFZXMe_FvdM.mft (raw, json)
Hash identifier: NJwctp4KGtpYOhe6GQY3Kam/lpVWszb3hogW0gJCg8I=
Subject key identifier: 62:02:7C:B7:A2:5C:6B:DF:D4:C5:CE:A2:5D:CC:02:93:45:E5:F6:2D
Authority key identifier: 36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
Certificate issuer: /CN=3664e4462a2902a52f826dae38565731efc5bdd3
Certificate serial: 0194BCA98621F849C980A1544DA1FFC53655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
Manifest number: 137A
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: NmTkRiopAqUvgm2uOFZXMe_FvdM.crl (hash: l1HxZ7eEwSZBYcE/hx1vgf76olTZOuTymEz5M9T6dD8=)
2: bRSiH3Ltu0n345442eKdUINyK3s.roa (hash: WObRy2TpZce8N0K21ZTeL8NwUXrbmFADn/Y+S73z7rk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:21:f8:49:c9:80:a1:54:4d:a1:ff:c5:36:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3664e4462a2902a52f826dae38565731efc5bdd3
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=62027cb7a25c6bdfd4c5cea25dcc029345e5f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:76:9b:f6:fd:dd:83:11:84:fb:c4:6b:c0:
42:60:82:21:44:92:30:1a:28:9d:6a:4a:e6:29:18:
98:70:ad:76:9c:c8:b2:a4:4e:5a:47:30:ec:7c:09:
ac:01:c0:70:66:c2:58:95:57:5b:36:03:c0:2c:e9:
62:f2:21:47:37:dd:85:bf:de:18:0a:41:8b:ad:09:
86:50:34:cd:02:19:dd:2f:fd:cf:90:59:a4:40:e8:
b1:57:26:7d:5a:74:9b:5f:da:e0:18:ea:43:f3:3a:
5b:22:ff:4f:73:b4:75:8a:f1:67:8d:c1:42:e9:14:
c9:66:22:56:86:a7:f7:04:61:16:6c:76:c1:9e:4c:
a2:40:c4:0d:ba:c2:c1:00:b9:d5:01:98:46:bc:a8:
82:c6:ff:23:0b:38:40:7f:71:fc:6b:5b:9b:a4:34:
29:84:2e:c6:99:fe:1e:df:9f:44:3b:00:3c:43:1d:
95:0e:10:0d:69:a1:5d:ab:d1:77:b5:0c:7e:58:ae:
4e:50:0b:8f:d2:60:bc:e9:27:76:ba:5e:75:4a:45:
ed:bb:49:00:88:6f:41:06:a7:06:e7:c5:f2:69:b7:
0b:d8:c3:f1:e5:e3:79:8a:b9:a2:fb:e9:0a:8a:84:
ab:a8:29:f1:37:bc:03:62:00:58:3f:c1:be:0f:b5:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:02:7C:B7:A2:5C:6B:DF:D4:C5:CE:A2:5D:CC:02:93:45:E5:F6:2D
X509v3 Authority Key Identifier:
keyid:36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:37:4a:ab:12:fd:8d:2e:c7:6c:4a:4f:ef:4b:b0:64:ba:
70:c5:cf:31:cf:5c:7e:28:a2:fa:d4:4e:45:fd:b4:c0:a9:ec:
f4:e4:4c:c6:25:11:1e:66:40:f0:3a:9f:eb:9c:ce:c3:f5:b3:
33:7c:f5:e8:e4:fd:8c:23:db:75:84:29:a3:61:ce:54:53:fb:
69:4c:bf:2d:79:f1:a7:5f:ff:26:68:56:53:cb:d5:a6:85:8a:
de:0f:3b:51:8e:7d:99:ce:3d:ae:ae:19:f2:85:45:37:d3:a6:
63:f2:ea:4f:df:91:ed:01:29:9b:04:4d:05:6f:08:da:8d:63:
40:d5:dc:bf:87:f8:57:28:29:15:13:51:61:0f:5e:74:d6:27:
7a:17:fc:ee:91:84:64:37:69:d1:dc:89:60:2d:4a:dc:26:de:
f2:db:a0:91:72:17:ce:59:bf:03:e0:57:27:aa:e4:02:c6:fc:
c6:0a:9e:8c:ac:f7:40:37:49:54:05:87:79:d7:eb:fc:1a:2a:
a6:1a:78:48:16:4c:c1:de:8f:1d:f3:a8:ec:e0:98:6f:4c:b1:
1c:90:e8:8a:fb:c3:35:51:55:7e:c1:04:93:d2:fc:35:d8:c8:
88:d7:1b:5d:22:4e:a9:e7:d7:ac:f0:26:4d:3b:b0:c1:b9:24:
1e:63:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:06 2025 by rpki-client