Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: gVEci+YBZuh0SkTR/sT2GsoxGjsY629KnYAKEUS/m44=
Subject key identifier: 5A:B2:B1:91:1D:3E:A7:94:D7:F8:2C:2C:69:56:73:F6:5E:2F:EA:F6
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 0194BC050906C3E52AAC2070B8FAA6A9642D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 04E8
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: NixiWYmD-vroRsSm1dMfYuXBZWQ.roa (hash: CO9r6UJIKKxiHIlAzYOgJDFF6Cx5kTVMmonckxBJgDA=)
2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: 24GNaTXMhDCdS2M4tYpZ7QJux9Glr3hWRTKmFXNWvR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:06:c3:e5:2a:ac:20:70:b8:fa:a6:a9:64:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=5ab2b1911d3ea794d7f82c2c695673f65e2feaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:3a:d4:8d:12:f9:25:3c:2d:80:02:94:e1:
af:f6:de:18:b4:e6:6f:e2:61:b1:93:d8:26:c6:9c:
11:83:16:80:3a:0f:82:f9:ba:30:02:0d:50:97:94:
90:71:d4:69:78:27:9a:8f:01:2d:72:99:f4:a2:35:
c7:54:c3:98:5d:5f:24:9a:b3:07:ca:9b:b1:5f:27:
f9:6a:bf:4f:20:d9:78:4b:ba:07:ed:9e:af:45:77:
c0:01:33:e6:8d:13:74:f4:e0:8f:60:5c:b0:c8:15:
4b:49:10:47:6f:40:ef:87:12:f6:ee:e2:3f:25:d2:
f2:56:bf:44:b7:92:90:b0:5e:ca:10:6c:e3:46:9e:
69:df:fc:76:ec:ac:87:58:66:93:b2:50:b5:ad:09:
8f:0f:fe:b7:55:5d:b7:3e:ad:23:8c:84:cd:6f:92:
52:43:15:bd:e6:cc:c4:a6:ba:08:92:3b:20:79:51:
5e:04:21:2a:46:72:42:dd:2a:0b:76:c6:79:37:8d:
cf:11:f2:e6:05:cb:54:96:90:e4:85:a9:ef:f4:95:
35:e7:6f:ec:e4:16:29:8e:2e:b7:93:23:d0:d8:ef:
07:be:5b:06:35:3d:88:7e:a1:a9:f0:f4:de:8f:8f:
0e:20:ba:49:95:a0:d2:fc:0f:b8:3f:1d:4b:5b:b6:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B2:B1:91:1D:3E:A7:94:D7:F8:2C:2C:69:56:73:F6:5E:2F:EA:F6
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:82:51:61:16:d3:ea:61:1a:db:4e:cd:4e:0f:59:a6:0e:88:
b4:e4:32:67:24:a8:6e:7b:7b:56:c3:1c:da:41:05:33:79:b1:
0b:d8:11:72:25:c0:c6:d8:e0:7f:c6:4c:2d:83:4c:f4:e4:a7:
ca:d2:c1:42:97:9f:a7:ed:b1:f9:9d:7e:3a:0e:dc:7b:7b:ae:
4c:fb:21:1e:42:4b:9a:74:7d:d0:43:f8:81:42:6f:e2:72:46:
a7:cd:4b:27:a4:73:e4:49:57:cc:b3:3b:1b:94:fd:e7:57:6a:
34:9d:87:dd:51:db:af:00:43:b3:54:0c:cf:fa:3f:62:86:d7:
3c:c9:2d:d0:e8:6c:3a:42:d8:30:aa:5b:5f:b6:d6:1d:e1:83:
b3:25:4a:13:c8:6e:2e:a7:db:5d:03:9b:9a:09:b4:3d:c8:2c:
d6:52:cd:a8:3b:49:f6:e8:06:28:59:a9:f1:e9:21:82:2b:0b:
76:90:54:9b:e9:c8:5e:97:e3:ac:16:4c:5f:27:9d:c2:bf:e4:
49:01:bf:6a:9d:42:ab:9a:2c:2f:75:a4:ae:df:93:67:52:5c:
90:30:5f:af:87:b0:d7:df:f6:b7:ac:2d:0e:68:d1:ae:4e:d7:
be:54:09:af:94:8a:fb:72:92:69:a5:4b:ab:66:61:1a:fa:45:
ef:fc:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:13 2025 by rpki-client