Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: U2MpQ0OhFC90huogkRkY2VBvzsZirgp8G8II3gFDb+w=
Subject key identifier: 71:F5:ED:3D:A9:D0:B3:BC:F9:3B:8A:B5:49:23:EC:95:D7:18:49:CB
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 0194BD17B0D5CCEBB8972148F0E66610C4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 099F
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=)
2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: F0L5G90bpUKY+Djn2ar0Io8WilGae07ZE7wa+HkWwQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b0:d5:cc:eb:b8:97:21:48:f0:e6:66:10:c4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=71f5ed3da9d0b3bcf93b8ab54923ec95d71849cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:87:a5:09:57:d7:cc:18:0d:44:ef:94:2c:a0:
d2:ae:04:52:26:29:f8:ef:a1:b9:21:20:8c:90:41:
c1:b5:89:f0:4d:9a:cd:54:a0:40:29:75:d0:b0:0a:
19:0d:84:2f:3c:b9:fe:5c:db:73:ef:46:60:1a:2f:
5b:dd:d6:85:37:11:0f:0e:a0:0b:ea:81:5e:cc:1e:
f3:ae:cb:ae:c1:95:9c:78:d8:38:f0:81:46:b2:d5:
8d:35:7c:7c:c9:fc:20:17:e1:3d:ad:3f:4b:77:85:
8a:4e:13:2d:f1:c7:a3:24:58:03:4a:0e:a6:29:0b:
d1:a9:8b:6b:9a:8a:d1:be:05:15:7f:83:18:9d:16:
fb:2a:81:a7:30:cf:0d:e1:16:df:d7:eb:bd:06:d7:
30:40:eb:77:6d:d6:4a:00:fa:41:cb:44:fe:4c:a6:
5c:46:71:e8:eb:8b:ca:3a:90:86:ef:1b:47:bd:cb:
ab:db:f8:7e:17:07:56:1b:12:06:94:11:75:f6:e0:
32:cd:5e:cf:6b:88:c2:9b:ff:9f:bd:7f:0a:52:a4:
20:27:a7:81:17:5a:b3:12:9f:b7:9d:be:e7:53:34:
c2:9b:55:a9:8e:5d:8e:7a:32:84:b9:46:7c:b0:6d:
45:47:74:ab:f1:b1:4c:53:23:3e:53:4b:e8:34:5f:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:ED:3D:A9:D0:B3:BC:F9:3B:8A:B5:49:23:EC:95:D7:18:49:CB
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c0:ed:91:c7:fa:59:ba:ca:b3:99:ec:57:09:b2:a7:ff:40:
54:cc:2f:9f:15:a3:a2:e0:1e:00:39:fc:37:71:be:d5:8a:05:
94:ab:bb:e3:8f:92:35:1e:2e:29:d1:81:b9:c8:55:cc:26:e1:
50:74:18:ae:96:0c:14:88:8b:11:b8:2c:0c:dd:4a:d6:d3:5f:
39:d8:38:88:31:58:fc:ef:7b:4e:58:8d:31:05:b3:f0:61:e7:
22:5c:37:1e:a5:a1:f0:d9:b1:a7:ba:26:75:93:55:64:b2:8b:
18:6a:5d:07:57:29:e9:37:1d:d6:f6:5f:1c:d7:e0:0c:95:1c:
c3:47:bf:a1:e3:45:b2:94:47:50:57:3c:a0:86:ec:35:56:86:
61:28:7f:99:8f:1a:84:04:b5:d1:5a:81:3e:04:1d:ae:d2:0b:
a4:67:af:67:13:82:fb:aa:02:f0:e9:a2:b8:6d:d2:01:9d:32:
ff:c2:4b:ee:91:49:72:31:71:a8:2b:32:31:93:a5:00:a9:0e:
0c:40:67:06:44:de:40:55:9a:f6:6f:52:88:3d:90:45:94:33:
9c:67:d2:b6:73:43:19:da:28:49:5b:b1:e9:40:62:32:4b:98:
78:5f:68:6d:e0:55:c2:43:81:09:ed:80:13:52:9f:57:38:f6:
d7:1e:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:36 2025 by rpki-client