Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: Ftr8iWfaTAy53m5oRqnsVqqRjeDiWjX99RkCTIv7tYs=
Subject key identifier: 65:B1:8B:7B:97:E5:18:45:A8:02:FF:0D:2D:6F:8C:31:49:F8:D0:03
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 0194BD4E492FEB856D6C1ECD503E0EE26938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: piTExp10lakyyfi4vLowRAR7SNkcZKq/KKZDvqzfn4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:49:2f:eb:85:6d:6c:1e:cd:50:3e:0e:e2:69:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=65b18b7b97e51845a802ff0d2d6f8c3149f8d003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:26:6f:f5:8a:00:b4:2a:a9:cf:a3:c3:cf:
4e:0a:4f:15:45:1a:4c:35:8f:9d:53:14:ca:e3:d9:
1e:13:d4:90:c4:29:7e:dc:06:ee:1e:0f:67:06:3e:
2a:c8:61:5e:f9:6d:7e:75:14:a4:78:6f:76:bb:a8:
23:d1:bd:43:5c:0c:c6:8c:db:b1:87:eb:8c:bb:af:
b2:45:74:f8:d1:26:c0:17:ab:c7:04:82:de:c5:78:
ab:0b:13:4c:74:1d:4a:1a:47:cc:44:3f:e3:b4:e8:
f5:8d:ef:9d:c8:da:28:20:c0:d8:52:5a:5a:50:27:
34:8c:d1:ac:c5:8b:4c:f0:c4:3b:39:9e:bd:d0:b6:
b5:f4:13:f1:d8:5f:5e:5e:85:2b:ca:67:b9:5f:2e:
6b:5f:79:99:86:5b:09:62:07:94:65:0f:e6:99:5c:
fd:b7:f7:a6:15:d3:ff:09:7d:c9:95:cc:0d:e9:d2:
df:78:e9:7e:a2:02:7c:a1:7a:95:a1:28:91:a5:39:
95:46:ff:10:07:0e:fb:87:47:4b:13:90:32:e5:91:
94:45:b9:20:d0:14:bc:76:47:f4:a4:8c:03:91:bf:
bd:1b:e7:b8:f4:8a:cb:4f:1f:a1:b0:56:6b:6c:9e:
d6:13:00:67:e0:93:95:13:b9:64:7a:32:7b:57:6b:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:8B:7B:97:E5:18:45:A8:02:FF:0D:2D:6F:8C:31:49:F8:D0:03
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:41:98:4a:9e:99:ee:6b:49:ca:14:32:0b:6e:32:50:5d:a3:
05:19:bf:6c:c7:80:a3:c1:97:42:e2:e3:ef:f6:cf:e7:e1:37:
d0:87:dd:e8:cf:0a:df:39:36:8a:7e:16:69:fa:ba:b7:89:c1:
d7:c6:b6:55:0f:89:8d:c1:2e:3f:28:62:39:ad:d0:84:40:30:
de:84:9d:bc:23:c2:c0:c2:f1:4a:00:a9:d9:f3:77:fa:db:65:
b2:80:e1:66:92:5d:b3:e9:a8:b3:af:72:9d:6d:d6:10:ba:30:
52:c0:70:2a:5c:97:60:45:47:34:4a:9d:a1:5b:7a:17:e7:1b:
41:47:c6:d6:74:0c:16:5a:09:98:07:80:93:3b:25:7d:9a:cb:
64:04:0d:f5:5d:85:68:86:85:65:12:25:41:ef:1b:9e:44:18:
a2:5c:64:38:c6:3a:c1:ce:e3:73:fe:0e:4d:10:b3:fb:65:d7:
8e:22:49:b8:26:bb:2b:fd:49:6b:23:ed:d6:d4:fe:22:07:ae:
a2:b3:57:65:f6:c3:29:5b:12:5a:e2:95:fc:7e:c3:6e:82:97:
db:7e:71:5f:83:5d:22:3e:59:79:c7:42:49:b7:7a:bd:da:c2:
26:22:52:d7:e2:2c:47:6a:77:b4:ae:59:ed:7c:5c:cc:1e:b4:
3c:3a:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:19 2025 by rpki-client