Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: zo4AojTea7vR3vZU7yiofRXX/XYBIILoR8DfD0cSGAQ=
Subject key identifier: F5:EC:C5:1A:A3:64:05:07:A1:72:F7:AD:87:32:F0:9A:F2:88:6F:0B
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 0194BC3C0031F09496547426891778BB97A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: p0ZY3Bxs4dSob5+PQQFqhv95LiBXyx31dOBipgclqvE=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:00:31:f0:94:96:54:74:26:89:17:78:bb:97:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=f5ecc51aa3640507a172f7ad8732f09af2886f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:3d:28:56:95:d6:85:59:f8:82:c9:ef:07:
0a:ca:19:83:88:c3:be:f9:2b:ae:9b:9f:c8:16:ff:
c3:ff:4d:ff:95:97:05:9a:dc:f0:d8:b0:15:b4:17:
3e:8f:fe:6f:1f:1e:d7:69:26:14:c3:6a:95:d7:30:
bd:a9:04:7a:2f:9d:63:ce:77:1e:ec:07:6e:d6:34:
20:09:21:0d:9d:40:20:01:5e:0f:7d:09:95:ee:70:
9e:9c:c4:6c:2b:1b:3f:05:d9:dd:41:5a:34:0d:68:
fd:7f:41:6e:b1:b7:32:bc:8d:8b:cd:94:4c:f6:61:
ea:56:fc:80:dc:8a:fb:39:6b:95:c1:85:7c:f6:74:
4a:39:ce:ff:3a:e1:ae:b6:bc:d7:13:b1:a5:c2:ec:
b0:95:3e:cd:c2:d4:13:2c:42:cf:d1:1e:4b:36:11:
57:92:e6:62:2b:cd:f8:41:c2:30:be:57:fb:a1:1b:
9b:9d:9a:43:e1:ca:77:40:0a:db:26:77:78:83:e6:
65:d5:0f:7e:71:8c:59:c2:30:f7:62:65:e1:ad:da:
fd:76:b7:a2:46:2e:86:f9:be:75:9c:e9:4f:c3:6c:
74:9f:c8:9d:11:38:2b:21:fc:11:8b:2c:2d:99:26:
89:a7:fa:60:52:42:69:6b:f3:41:ac:b1:cb:09:30:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EC:C5:1A:A3:64:05:07:A1:72:F7:AD:87:32:F0:9A:F2:88:6F:0B
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d9:f6:30:2c:36:c9:06:78:25:ce:43:6b:75:16:bd:7c:2f:
b5:28:d3:5e:f7:32:c8:a6:6f:6a:e0:e8:ba:be:3f:e6:f1:48:
a9:79:2e:9d:16:26:e7:86:c2:49:90:39:fa:d4:cd:3a:d0:5b:
7c:ac:86:ac:8a:21:d3:8d:58:4a:39:c1:ee:46:7c:66:e6:78:
67:60:a9:dd:c0:2d:31:30:ee:e7:11:db:f8:5d:23:01:42:57:
1d:a4:75:11:f9:2a:40:37:42:9f:2e:c7:a5:c2:bf:2e:ac:7b:
73:ac:75:6a:66:cc:77:73:95:bd:97:8d:15:ef:8f:12:74:68:
ed:95:12:56:be:8c:2d:03:64:ac:1e:9d:86:90:32:25:5d:e8:
69:83:5e:85:43:2e:37:7d:ea:04:30:92:42:6b:ab:63:95:a6:
4e:66:43:d7:c3:d0:a3:30:56:0c:ab:5d:c7:b8:4b:10:ba:6c:
68:f4:fb:e2:79:aa:b0:a1:90:3c:2e:c0:22:ad:7f:06:fe:da:
4f:06:65:3c:ce:23:7e:da:7f:4e:2a:df:87:c5:3c:3f:ca:5e:
f2:ce:ef:02:9b:da:8a:c7:4a:6b:3d:85:26:50:96:4e:f3:85:
6d:56:d6:0f:e1:a5:03:e6:0c:73:71:5e:f4:8d:0c:cb:4c:22:
d2:66:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:13 2025 by rpki-client