Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: P4HMVle8LDF8zAkb3UY5Z5Gm1Tw+y6lfFhJhVpfivAM=
Subject key identifier: 0A:2D:83:22:AE:07:ED:7E:1B:C2:55:C2:41:DB:55:5C:89:40:E9:C0
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 0194BD85A4C2968057DD9E031C8711F9148F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: ltn6QKVi7PbTYXSXmBG391AXzBx/LAgyS5hsQn33PqI=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a4:c2:96:80:57:dd:9e:03:1c:87:11:f9:14:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=0a2d8322ae07ed7e1bc255c241db555c8940e9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:c2:c9:fc:93:af:a4:9e:e2:9e:54:6e:c2:
03:46:89:fe:25:92:27:f1:b6:de:b4:53:0b:5a:f0:
0d:78:24:57:0a:ce:10:2f:0f:ce:39:af:20:b3:e8:
f6:5a:c8:eb:5d:4a:8a:34:4c:e3:33:cc:36:4f:5f:
58:6d:87:c2:4c:bc:c0:6f:e7:fd:09:24:95:47:c3:
bc:f7:5c:ca:c4:13:70:75:de:30:86:9a:ed:5d:cf:
f2:8f:50:87:73:d6:aa:c6:c8:05:1d:e1:67:e7:c6:
c7:ae:96:58:99:9a:88:db:37:49:a7:a2:fa:02:a2:
89:20:4e:78:b3:63:88:4b:d0:88:f1:40:20:0e:59:
2d:fd:12:19:55:de:82:9f:cf:b1:43:6a:dd:ad:68:
45:f3:9c:d4:84:7a:43:02:8d:d9:d4:35:96:4c:81:
14:9e:a4:82:c1:6e:a3:d5:15:4e:81:4d:c7:a5:55:
79:ad:06:83:a1:63:07:f0:34:48:69:82:30:b4:2c:
ac:6b:bc:3c:37:28:87:20:41:ed:38:85:d7:68:43:
03:1b:34:91:d3:61:28:75:e5:ea:22:84:8a:c6:83:
5d:c2:e9:a5:25:57:8f:0b:0f:7f:06:52:42:6b:79:
bb:af:93:07:1b:4a:d0:2a:eb:84:c5:7e:f2:b7:3f:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:83:22:AE:07:ED:7E:1B:C2:55:C2:41:DB:55:5C:89:40:E9:C0
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b1:fb:e9:ab:97:50:6d:57:c7:b5:22:81:6d:f7:cc:82:4e:
5e:45:93:85:be:0d:cf:ca:0d:94:50:3b:8f:62:e0:63:5e:90:
a5:02:dc:9c:d3:2e:0f:f8:78:7c:fd:ec:b3:5b:9e:ba:d2:75:
3a:63:df:9a:a4:0a:98:b6:22:e5:99:23:aa:6a:3a:45:6b:19:
89:74:4b:60:a6:49:8f:60:25:b4:51:78:4c:98:32:f9:80:6c:
11:7a:27:36:e9:15:23:55:65:0c:7f:4d:3e:f5:bf:0f:99:07:
54:01:04:17:fd:11:f9:0c:c9:17:b1:a4:06:de:65:fc:6a:81:
81:3a:65:91:88:8c:bf:10:fc:e0:71:c5:5a:7d:e6:7d:15:5f:
01:57:5a:54:13:4f:b4:a1:6c:c8:a0:31:4d:5c:cb:a8:6f:21:
9b:6c:82:78:7e:f7:12:05:fb:4e:87:cf:31:17:1c:7a:f3:43:
84:cf:d2:9b:63:e1:7e:be:80:10:db:6c:ba:4c:b2:13:99:6d:
7d:67:11:5d:a1:fc:05:fb:8c:56:e9:28:1a:c1:17:ad:a7:5d:
17:f7:a3:a1:d8:f2:3c:f1:3c:3a:59:33:e5:1e:be:93:29:31:
20:09:47:51:26:0b:d1:da:5c:c4:6e:bb:bb:b7:11:f1:5b:e5:
57:b0:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:59:29 2025 by rpki-client