Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: xmy6qMghQzCMlPNnD7hr7ifg0oTgTtfp6x4OBz5rFOs=
Subject key identifier: 63:84:C9:8F:3B:67:2C:4A:96:B8:24:99:37:C3:50:65:5F:9C:9F:60
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 0194BC04FC39DE3BD0966C1D5AF800DED5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 3A
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: Ex/YS2rMkmjlQXXKAZeD093SpfVfwtz9jNHT8odXOCg=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:39:de:3b:d0:96:6c:1d:5a:f8:00:de:d5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=6384c98f3b672c4a96b8249937c350655f9c9f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:1d:12:93:f8:2a:8a:85:3a:49:01:1d:d1:
a0:5b:32:a4:81:6b:43:f3:43:cb:3c:ff:db:fe:37:
30:17:c1:8a:67:b0:72:b3:83:f2:22:1a:ad:6f:30:
73:a5:72:92:ff:85:71:e1:b4:11:60:90:ac:72:1d:
e9:bb:2a:ca:be:22:2b:8d:5b:5e:3c:f5:8d:a1:f9:
0a:6f:35:35:90:50:2c:53:3e:49:84:82:85:5e:2a:
ec:f0:50:c6:52:e8:30:c4:63:67:ff:e5:45:f5:24:
13:8a:41:fe:4b:eb:79:1d:0d:c8:c7:5c:3b:08:29:
e0:60:56:81:73:d0:76:98:e9:07:77:47:16:3a:42:
51:51:18:d6:34:54:70:20:37:12:87:03:46:2e:b9:
79:e0:09:7b:71:6f:bb:df:39:aa:7f:38:56:fa:c5:
0a:d6:a5:9c:8e:cc:b1:77:2d:62:88:c2:7c:7c:bd:
1f:f6:80:aa:9a:6b:30:d9:fd:50:62:5a:66:39:3d:
28:e9:24:1d:47:cb:66:f1:ca:cc:e8:4c:f7:0f:a6:
c6:88:18:07:4d:ed:d7:f6:fa:3b:24:d9:ac:3b:21:
7a:1d:25:c1:13:aa:4c:19:bd:c9:7c:8f:f3:7a:ad:
14:5b:a7:b2:f2:95:f7:e9:2e:c2:51:cc:60:59:b3:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:C9:8F:3B:67:2C:4A:96:B8:24:99:37:C3:50:65:5F:9C:9F:60
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1f:fe:34:85:4f:dd:19:97:a4:e6:ed:7d:92:40:63:96:50:
00:b7:4b:f3:16:11:0e:d4:5d:3e:d2:1b:69:7b:6f:cb:46:7e:
89:a4:af:92:3a:76:53:a4:ea:2b:88:a6:fc:01:f8:01:fd:e8:
df:94:f8:6e:b3:b6:3d:27:6b:e9:12:0b:4a:9c:c9:9f:3e:42:
67:d3:a6:c5:b5:f6:35:4f:e8:a1:a9:20:f8:4f:70:89:7f:eb:
8e:72:0d:00:48:18:4d:9d:21:db:c3:17:26:45:33:f7:97:e8:
7c:6d:d1:2e:47:f4:98:6c:78:b6:87:1c:1f:4d:a7:a9:60:9d:
9c:11:dd:df:1f:7a:df:dc:5e:5d:25:c6:e8:05:e3:f7:2a:51:
e1:7c:5a:d7:30:9f:66:8a:ce:dc:03:4d:62:92:7c:33:69:a7:
e4:f4:19:25:4e:ec:5c:3a:1c:eb:ab:03:a8:a9:e0:c3:48:bc:
c5:03:32:da:6c:aa:04:50:56:53:5c:33:7b:de:a5:fa:db:33:
83:84:05:cc:29:da:86:3a:6d:68:16:c5:2c:b5:05:3e:de:64:
29:5f:ff:98:59:25:ac:ce:32:77:8f:d6:42:24:03:7e:c1:24:
97:b0:a7:a7:d0:09:bf:32:3a:ed:85:78:34:b7:26:4b:78:f2:
3e:3c:3d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:12 2025 by rpki-client