Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
File: NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft (raw, json)
Hash identifier: hjOCVwkuvRSjt0IzaLQegTBTg6u/DjqPkK2PCAlxCN4=
Subject key identifier: D9:54:E0:21:12:0C:32:F6:93:01:18:EC:B9:95:C2:0B:C0:28:F1:28
Authority key identifier: 35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
Certificate issuer: /CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Certificate serial: 0194BD4E5907E50146917DCECEB91C44D018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
Manifest number: 01FC
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl (hash: NQlP8KzjxGT5kLWuBdyvV63bsBXdMZI7Fkd5HTLeGtE=)
2: okivhnQi7w6GWYPlNEAmkXkmxpY.roa (hash: k4R8rWTOlMy3O5fk1lka5CmGZaX0JQEHHbZQX1i51u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:59:07:e5:01:46:91:7d:ce:ce:b9:1c:44:d0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=d954e021120c32f6930118ecb995c20bc028f128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:30:07:e8:bf:e3:71:05:d2:91:ca:ef:da:
bd:b7:d6:f2:b8:3b:69:52:c1:d1:f3:25:12:6d:d5:
4f:45:88:64:91:3c:6e:2f:6b:8e:16:5d:ae:eb:78:
25:37:9f:87:aa:78:1f:0d:a1:f2:f5:d4:ac:14:05:
45:5e:c0:ff:ac:53:80:51:07:c3:ed:ab:16:a0:6f:
4f:98:f1:9e:ce:01:0e:9a:fa:57:b5:a0:84:6a:31:
65:cf:c9:11:c8:31:b3:08:b6:2a:ff:fa:f7:bd:59:
9e:75:4f:ee:c8:fa:59:13:a7:f7:38:92:48:19:c3:
5e:39:92:73:b4:d8:5f:48:a6:2e:de:c2:7e:d3:24:
96:49:fe:54:71:16:10:89:04:6a:8b:d5:5b:4b:1c:
24:b4:96:b9:0a:b9:7c:15:fe:8d:19:ec:f2:41:29:
bb:6f:72:70:07:98:92:1b:8a:b1:c4:8a:33:b8:84:
dc:03:3f:5e:1a:60:34:a4:42:24:5d:46:ff:24:25:
0e:4d:f8:35:fd:08:f9:e8:3b:d3:aa:88:d6:06:ee:
94:ac:60:94:c9:69:68:07:d6:a5:d7:89:60:e6:31:
b2:24:a2:b4:44:ae:8f:9f:96:3b:2e:57:52:db:f8:
6e:f3:d0:50:ba:a4:6d:03:27:91:26:0f:6a:28:f2:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:54:E0:21:12:0C:32:F6:93:01:18:EC:B9:95:C2:0B:C0:28:F1:28
X509v3 Authority Key Identifier:
keyid:35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:83:2c:7d:f9:03:21:f8:db:06:c2:b1:39:57:fa:ea:a7:63:
70:ef:51:2e:22:6d:08:5d:06:e3:b3:84:8e:20:f2:e2:a6:36:
d3:c9:58:6c:0f:d3:59:43:79:e0:54:b2:61:a2:47:0c:5b:6d:
33:27:9b:0b:7b:ae:02:77:aa:00:59:8f:6f:82:e9:64:69:99:
aa:e2:7d:3d:a8:38:ca:50:b9:da:8c:57:9d:b6:d6:42:de:ba:
eb:a0:4b:cf:39:59:42:70:03:83:bd:a7:5a:08:d6:e3:1c:ea:
62:84:de:d8:ad:49:cf:30:c0:51:b6:6d:f0:f6:22:f9:4e:8d:
93:ae:e7:3c:15:4a:b3:e5:10:99:f6:c4:ab:3c:17:e3:a4:14:
eb:06:14:48:5c:c7:c7:bc:7d:d4:98:e4:be:99:1f:f9:3a:75:
11:58:25:9c:91:0e:c1:8f:27:81:00:a8:e1:29:c2:04:bd:85:
4c:6a:77:52:17:33:7d:a7:2e:be:5d:fc:d0:e2:e9:cb:9c:0a:
1f:62:4d:c4:55:cf:c1:81:e8:61:f7:7e:9b:02:e6:98:86:e1:
52:68:ac:b0:cf:3c:c7:0c:d1:18:24:cd:4b:a4:56:b9:cf:c9:
6d:9a:8d:ad:1d:54:6d:45:6c:59:a0:7d:c4:d7:c3:92:51:9a:
79:c3:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:52 2025 by rpki-client