Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier: 487CLv641PbpSa7GfzkKuYnTDrBMbIrO174wKl1rvlA=
Subject key identifier: C4:0D:5C:1F:4D:52:8C:78:CD:ED:E0:B6:7F:3D:FF:C7:67:96:85:62
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 0194BC3C83233C4C66EC33754F16D75B7C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: TdEjnvlSrG90KL2a1Gt3wWrdpe9CPMG6qEtCY0EIygk=)
2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:83:23:3c:4c:66:ec:33:75:4f:16:d7:5b:7c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=c40d5c1f4d528c78cdede0b67f3dffc767968562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:85:23:f9:47:c4:e3:99:80:9e:53:64:de:
0e:a3:18:87:5a:92:65:93:4f:b0:99:77:53:62:20:
64:5c:91:45:47:01:50:fb:4b:75:e4:85:ed:70:8c:
4b:c2:a7:6b:fa:04:f4:b1:04:3b:7b:09:a5:6b:d7:
19:6c:bd:2b:7c:19:26:a8:74:3d:97:f6:55:97:ab:
81:b9:37:41:05:c0:40:14:39:9b:3b:64:5b:94:07:
de:de:c8:b6:79:a6:17:a1:fa:f8:c3:2a:d8:cb:78:
82:40:0c:54:d3:02:b7:ae:72:89:9a:0d:21:fb:eb:
9a:3f:3a:ee:0b:7d:56:1e:30:92:26:01:d2:be:cd:
94:bd:c0:db:f7:69:a1:9e:7e:56:bc:f3:b9:8e:65:
36:9f:a6:19:5d:a2:9b:e7:ab:fe:1b:c8:da:fd:57:
40:6f:48:96:b3:d3:e1:09:78:6e:14:8a:9c:25:99:
ac:54:82:1c:0b:22:92:9b:fc:89:de:85:dc:36:ea:
ff:b8:41:77:e5:2f:8a:d0:94:f4:b9:3f:f2:99:1a:
71:a7:bd:89:a7:ad:1f:c4:1a:7b:01:a3:88:63:48:
ba:d3:93:a1:e4:20:3f:ca:05:db:26:b6:2b:b5:ce:
9f:ab:ae:f8:0c:be:f6:b1:98:9f:14:59:7b:ad:eb:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0D:5C:1F:4D:52:8C:78:CD:ED:E0:B6:7F:3D:FF:C7:67:96:85:62
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:46:44:57:eb:7a:75:df:0c:04:43:bf:d9:f2:88:16:68:14:
dd:70:02:29:86:59:90:10:ae:65:1b:41:63:37:da:a1:06:47:
b1:09:ad:19:5d:0c:e2:c4:03:4d:6a:45:d2:a9:b6:44:2f:99:
d7:57:ef:37:e7:a2:b7:3e:5c:c2:4d:60:97:5d:48:e7:b4:d7:
50:0b:bc:b2:93:23:76:06:93:83:50:d8:05:88:47:3c:15:12:
1a:df:d4:e2:85:59:d9:76:b7:f9:36:78:6c:15:6c:c7:97:c0:
d5:f1:8c:f3:99:c8:61:51:08:4f:26:7e:22:56:9b:06:48:c0:
9b:68:d5:33:7d:79:21:99:9c:6e:c7:40:8f:1e:d8:9c:3a:5d:
bc:0d:cb:0c:67:ac:a3:5e:e5:7d:5e:56:40:2b:d9:4e:61:47:
51:15:4c:a4:fb:b6:db:97:ef:da:40:23:14:02:9b:ea:8f:89:
03:40:08:d2:ee:33:ef:67:15:d9:94:48:62:cf:24:f0:95:03:
f4:32:c0:c3:fc:0f:38:9d:58:5f:57:68:af:a0:d8:19:d9:f5:
ef:40:27:46:c2:7c:c6:98:01:e9:d7:6e:3e:33:2e:64:10:02:
ea:77:99:3f:cb:49:ca:97:bb:37:3c:0b:85:3f:ba:93:10:16:
93:aa:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client