Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: tY+36M/95NKJdKHb3DEVzWAibe5bD9IbjYyPAKbEho0=
Subject key identifier: 90:2A:AF:AD:72:B5:5E:D3:B6:14:9A:83:2E:F4:10:41:9D:81:EF:97
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 0194BCA9ADD2FDA8B453960260A5AB878E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0D42
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: oTBui0uo7r39PWM4YcEji+Q8NMFY1MNHWuCekJRqTuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:d2:fd:a8:b4:53:96:02:60:a5:ab:87:8e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=902aafad72b55ed3b6149a832ef410419d81ef97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:9b:d2:57:22:41:5b:be:f3:27:64:6a:59:
07:ba:97:ce:fe:e9:e7:3f:7b:79:37:9c:17:75:57:
db:e6:00:f2:91:d6:7c:d9:44:1b:71:78:6d:a3:4c:
6d:46:ef:80:f5:12:4a:2b:23:a6:4f:14:ad:78:c4:
1b:5a:47:57:8f:4c:5d:e7:f5:20:61:7e:dc:08:83:
84:1e:c2:9b:71:4f:f2:76:77:5c:1b:a3:d6:f0:65:
d5:77:20:01:11:f3:3c:81:bb:fa:12:8c:59:14:05:
23:be:bc:f6:b6:55:b8:e3:1c:7c:f7:22:70:9d:fb:
76:4e:ca:9a:a4:d3:5c:9d:4c:4e:8a:75:9c:c4:3e:
ec:f0:2c:89:03:12:9c:71:d3:99:91:36:ce:f8:ff:
d0:b1:79:d1:17:db:e7:90:85:20:66:f3:26:65:4b:
28:0b:b0:b8:d4:32:95:b5:e8:4c:67:6c:93:dc:2e:
87:76:d0:d0:e5:d8:69:27:99:75:51:19:9c:a1:ba:
90:bb:6c:99:99:cd:4c:10:f0:38:75:f4:fa:f2:80:
d4:e5:92:8f:01:38:30:2c:60:81:57:10:ef:69:fb:
de:18:a5:b1:70:c3:3f:7b:84:2a:51:e3:e0:f7:30:
e1:6b:f0:71:8d:64:84:4d:9d:4c:6f:e4:ea:20:ca:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:AF:AD:72:B5:5E:D3:B6:14:9A:83:2E:F4:10:41:9D:81:EF:97
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a9:7e:82:b3:8c:23:a8:87:3a:0d:44:58:8b:47:d8:12:5e:
32:b3:43:72:de:1c:a3:f9:c7:ef:20:7f:67:9d:5d:e7:60:8b:
cf:fb:dd:42:e0:94:3b:47:4f:a4:a4:2e:57:64:03:ff:ef:60:
7b:14:a3:2f:b4:40:a0:d7:dd:8d:2a:35:38:68:6a:7b:45:c7:
89:ee:ab:8f:ac:4c:a3:82:1b:c8:0c:5a:6d:a9:84:69:a6:41:
e0:e7:08:ae:c7:3c:cc:0c:f6:66:10:57:b0:41:e7:bc:0c:b0:
1c:5a:45:5f:01:8f:a4:d6:3b:c7:40:19:55:68:dd:0c:d3:62:
97:6f:55:33:b8:9e:bf:40:13:ff:5a:c8:ca:f2:b6:d8:c7:fb:
90:f1:3e:6a:bc:cd:63:e3:8f:af:22:d8:a4:88:a3:e0:26:7b:
db:db:ca:5c:24:f2:d1:62:2a:5f:c2:6e:fc:c3:d5:eb:38:3b:
69:bd:c9:9c:ad:b4:e3:13:2e:8e:e7:9a:ab:77:c9:ad:7c:ff:
13:fc:89:67:37:c3:73:ff:f3:99:a6:2e:3e:cb:20:b9:e4:ba:
5b:97:cb:cf:ab:3b:9e:bd:98:30:67:d1:b6:01:73:a9:77:59:
c7:26:ca:e3:ae:12:24:42:a0:63:27:e4:d8:1f:0f:29:7a:04:
31:33:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:27 2025 by rpki-client