Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: AuKFgo4aTr1pCWTkYulnOwQOkitQ70UBiO0il+4bAEs=
Subject key identifier: 17:9A:9D:55:7D:8E:2C:15:D4:65:59:C4:C7:3C:C4:A9:ED:AC:5E:90
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 0194BC04F76AAB88920655A1E9FCD4800794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0BD7
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: Mt0bMIvklpkzl7nXIZE4pgpHh2cWk7UCLl7p+3KbagE=)
2: VYVG6VPnq7QC9XEUBoUwBeqTcIE.roa (hash: D3TwAjSIL/deYEY76KxuqGu4gu3LMOsRhSTIJQA8Gps=)
3: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f7:6a:ab:88:92:06:55:a1:e9:fc:d4:80:07:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=179a9d557d8e2c15d46559c4c73cc4a9edac5e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:18:0a:c4:f2:36:c0:4d:06:fe:3a:54:33:
df:c9:49:50:d0:81:63:90:46:74:e2:13:6b:70:28:
dc:c9:20:30:96:c7:1b:47:1a:58:93:7a:d3:27:72:
eb:b0:41:e5:19:e8:d3:9a:47:ad:c4:da:66:09:3a:
e3:6b:d7:83:f3:cc:65:35:6c:e4:bc:b7:29:2a:2a:
08:51:8b:76:98:0c:9b:67:38:0d:d3:d6:be:e9:d7:
f7:74:e3:28:91:e4:84:60:5c:e9:a5:35:ab:e3:fc:
64:57:d7:ce:5b:69:55:77:24:54:26:02:4a:6d:25:
f6:3a:5a:84:6c:8f:81:a0:5b:d9:8f:ba:32:11:7f:
04:d6:82:da:51:9f:da:1f:56:c4:34:61:66:48:ba:
9a:3a:e1:15:37:1e:bc:47:03:04:53:4e:8e:0b:4e:
9c:1f:dc:cf:e5:10:cf:bd:d3:31:59:62:e4:a3:09:
0c:10:99:11:32:75:4b:d7:20:73:27:42:3b:fb:26:
90:e3:36:e4:a5:c0:fd:6b:0f:68:c6:81:47:c1:74:
34:17:80:9a:97:af:f9:6b:55:ee:ed:e1:f0:25:f1:
47:76:3c:8c:39:66:2f:f9:f0:33:f5:41:9e:61:be:
39:1d:88:31:b7:64:9f:f4:76:6e:fd:4b:db:5e:16:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9A:9D:55:7D:8E:2C:15:D4:65:59:C4:C7:3C:C4:A9:ED:AC:5E:90
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:50:53:4c:53:48:22:2a:25:d2:b5:f2:66:18:2b:f7:33:98:
4d:a3:82:31:19:5a:4c:6c:91:c3:09:44:96:89:34:20:3d:e4:
7b:e9:13:3e:bb:ac:ef:52:27:04:15:9c:7e:f0:31:db:80:fb:
42:eb:ed:9c:06:92:60:0d:31:ca:2f:b0:68:58:8e:78:64:01:
c9:3f:0c:61:0e:54:f0:35:c6:c7:21:cf:7e:1f:0e:b4:e4:8b:
c3:c9:e1:c6:78:aa:fd:90:07:ae:e1:58:f3:e2:f2:b4:d3:ba:
75:b2:6c:05:3c:44:a4:f9:16:ff:4d:d6:1a:2a:b6:0e:e0:8e:
6c:90:5d:43:d6:34:37:73:a9:c7:4c:ad:cb:0a:05:67:62:5d:
a5:f9:71:e1:9d:72:ad:73:b4:8b:c6:2a:53:9e:ab:39:09:b1:
be:e8:51:6a:69:cd:cc:6e:eb:a9:2a:cd:1e:c3:38:6f:aa:57:
dc:7b:aa:e0:99:c9:36:2d:87:59:c3:84:02:f4:91:00:ce:d3:
6a:c3:02:f7:a1:63:79:7f:1f:6b:22:66:be:b7:7f:95:6c:07:
c8:b8:94:2b:34:87:e3:09:b9:1c:51:b8:f2:86:a8:df:ee:41:
82:9b:d0:07:f7:07:9a:57:44:b1:7c:a4:53:4c:29:87:b9:25:
92:17:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:44 2025 by rpki-client