Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File: NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier: 4Wg66mPRj6RKJgcUVO1FpCBQOGMy2uowBZx3a1373Ug=
Subject key identifier: A3:22:89:7F:55:D1:A6:FB:62:A5:95:92:68:63:FF:37:21:97:AE:40
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 0194BBCDE51EB872C6E7125D36B2D4BFC2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number: 0137
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: /x91bIChKinWMFDHKPDb8Xpu4BnEdsTg5IXBsAhRu5U=)
2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=)
3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:1e:b8:72:c6:e7:12:5d:36:b2:d4:bf:c2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=a322897f55d1a6fb62a595926863ff372197ae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:aa:ff:36:42:56:ed:1d:cb:8e:84:b4:bf:
97:ea:02:5f:9a:d3:f7:fd:55:1a:3a:41:8c:09:80:
50:c4:3f:ba:1e:bd:1c:ba:4e:55:9a:a0:b9:bd:2e:
d0:fd:55:33:94:01:98:84:a5:59:32:70:c0:2c:16:
ba:97:56:4b:aa:8d:49:1d:25:ca:0b:77:b4:98:6c:
5c:ee:39:08:8a:70:ed:4c:d7:ed:8d:29:d6:62:cf:
61:0a:00:af:97:3a:33:6a:8d:ae:38:85:3a:c4:c3:
95:47:a2:2b:12:fe:e8:e0:2a:36:09:34:97:bd:30:
d8:ed:5c:d4:ec:8b:4b:86:f4:4f:87:95:06:0c:cb:
54:e7:7a:dd:02:3b:6d:1a:2d:63:13:16:85:c7:5a:
2d:39:6a:6b:18:8c:d6:78:7c:03:0e:88:53:ac:6b:
04:35:ce:11:92:38:dc:5d:bd:90:46:e2:02:e2:28:
f5:ea:4d:15:a5:8a:87:a6:fe:29:55:f8:89:10:94:
ca:f1:80:50:b1:9c:36:5b:b3:ff:2d:be:d5:c5:a0:
e5:d2:30:02:41:96:98:98:05:91:76:9b:dc:68:73:
25:42:44:00:95:d1:fc:3a:3e:18:e8:9b:56:a8:f2:
21:93:49:67:ee:c9:4e:31:37:5d:31:88:52:b2:aa:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:89:7F:55:D1:A6:FB:62:A5:95:92:68:63:FF:37:21:97:AE:40
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3f:9e:fb:a8:26:b1:54:65:53:8a:2b:ec:19:7c:dc:5d:5e:
cf:4c:92:33:0c:0d:77:33:ab:c4:87:54:07:3f:26:d0:1d:2e:
b2:58:88:e6:eb:ca:58:f8:97:91:ae:ed:c0:75:24:29:e1:af:
04:d6:5b:0a:20:41:db:23:4a:49:fa:f7:31:1b:19:9d:d1:48:
a9:52:0e:b2:2f:1c:1a:cb:f7:e2:17:1d:f2:41:3e:8c:5d:ff:
58:ab:8e:32:ee:bb:a1:8f:0c:12:91:f3:7b:9d:2f:19:fa:81:
ee:07:08:4a:2d:98:b5:4e:d8:6b:15:26:41:5b:f1:a2:e6:f5:
dd:07:d2:c3:22:79:db:1a:72:88:67:7e:66:4a:db:cf:0c:93:
3c:a9:34:ae:e0:76:51:c4:b6:6b:46:22:0b:47:4d:28:4e:db:
06:ed:72:58:fe:4d:67:43:6d:59:09:59:e0:5f:59:64:82:a6:
23:7c:53:26:e6:18:7a:83:a1:22:df:86:ac:f1:8e:87:ee:a2:
a4:4d:e0:ed:14:81:a7:f3:42:ed:de:19:90:2b:b3:31:de:36:
a6:05:d8:ca:e8:a8:00:08:87:73:4f:a9:6d:f8:2f:7f:13:f4:
20:bf:8d:d9:6d:ed:33:b7:b0:a1:14:43:51:02:3b:64:02:23:
fb:8b:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:59 2025 by rpki-client