Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: e9qy8Np0xhu2yO+oYEjUS7uRAMNLNVsr1H9Hbf9Awjs=
Subject key identifier: 11:96:95:66:48:04:7B:99:6F:F1:B9:B4:8F:F6:4C:52:07:51:CE:3D
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 0194BBCE79F098288626A70B4F599689EEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 02F8
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: CrsfCkZmwZqrVzZduOPK1Kys8ca4FGd33ixwVUMPUIM=)
2: aOjf7ha4NpM1xf113RLoBKrWwUY.roa (hash: hUQXGx10+6VeL01cd/7kpuKBjZges7kH8YJzcunm/rU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:f0:98:28:86:26:a7:0b:4f:59:96:89:ee:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=1196956648047b996ff1b9b48ff64c520751ce3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:4b:9c:e1:0f:5d:10:4d:fe:47:65:df:61:
ba:00:8c:5f:f4:c4:6b:d2:0b:9b:f4:ff:d5:e3:88:
b1:85:20:bd:be:a9:32:dd:2f:65:91:19:e9:13:e7:
84:14:84:54:ff:47:2d:79:53:15:e0:d3:9f:ca:05:
a2:92:95:bf:e3:fc:28:ab:93:12:06:9d:5b:d2:08:
ee:07:e5:69:be:2a:39:6e:a4:0b:ee:ec:39:1d:32:
cc:15:82:66:9f:ac:08:a7:6c:3c:46:1e:02:bb:43:
27:96:07:74:57:3d:46:77:fd:30:f6:9e:78:56:28:
b1:4b:b0:f8:14:53:66:3c:83:5e:ac:95:53:ca:a4:
63:26:33:72:02:8d:19:ae:21:21:f4:47:32:68:d0:
42:81:08:f0:a1:e8:ae:c3:6c:33:18:ea:c5:6d:fc:
0f:c5:1e:10:a9:03:04:41:20:67:16:8f:94:8f:72:
20:80:85:ed:e3:a8:e4:10:e8:b9:14:9b:58:a3:85:
56:64:2f:12:30:3b:cf:a2:0f:3c:2e:7f:1c:08:c8:
f6:a0:18:21:06:c1:8c:15:78:16:94:9d:dc:c5:0c:
56:5c:d1:a6:88:97:93:d5:9c:9b:a7:94:d7:46:23:
0e:c5:8d:d7:54:42:77:15:b5:58:67:d9:f1:6e:4d:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:95:66:48:04:7B:99:6F:F1:B9:B4:8F:F6:4C:52:07:51:CE:3D
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:30:50:63:34:f6:ee:5d:42:f0:e3:c9:1b:b4:f8:21:78:a4:
65:17:b9:ab:36:e5:61:d1:91:9e:c9:eb:5c:9b:11:c1:f4:4c:
08:5c:05:05:dd:8d:31:8e:ff:2e:f4:07:28:d5:be:c8:2d:b3:
35:22:da:da:1b:bd:5b:f1:07:dc:5f:08:2d:db:12:96:be:67:
a7:5d:57:37:18:9e:4a:65:df:68:87:2c:2e:1b:56:26:bf:f8:
45:2b:f9:77:00:be:01:91:43:71:ef:34:37:1b:d9:0f:0b:c4:
8d:e0:c3:4b:8f:df:b9:7e:b2:83:91:06:8f:73:b2:52:ee:95:
ca:71:b9:86:cd:a3:46:e9:c2:36:18:0b:a8:50:97:e8:c7:7c:
ee:16:bc:98:3c:ea:1c:30:c2:6a:30:c4:f1:65:b1:59:31:f3:
da:5d:f5:3f:bd:a8:d7:c4:db:2b:19:65:fb:46:cb:fa:1f:4e:
be:4f:14:91:c2:14:fa:3e:62:6a:34:ed:52:a6:20:aa:47:30:
8c:1a:0b:a2:95:45:be:29:c9:ae:17:38:54:6a:a3:32:f4:15:
e1:9e:72:a1:fd:98:c2:4b:4f:b5:83:cb:e6:87:f4:0c:32:e0:
58:83:52:1f:65:42:9a:70:05:cd:bd:71:2e:39:90:5e:f2:66:
5e:a8:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:29 2025 by rpki-client