Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: eG+lgTM7Kxll8sRM/stqVSJqBV3AR8e+1aXgx9GYzKY=
Subject key identifier: 67:F0:58:42:9F:83:46:0B:E8:0C:9F:64:45:F9:16:DA:B5:41:32:42
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 0194BD17F45BCE92A80CC8D6CDFD28FF2387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: yak54z3z8G4PrSdlBU1hk/E/s3Ci/hZyqgCI79GX2jE=)
3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f4:5b:ce:92:a8:0c:c8:d6:cd:fd:28:ff:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=67f058429f83460be80c9f6445f916dab5413242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:8e:8a:54:a7:58:8e:60:40:89:e6:fe:64:
e7:8d:72:49:03:7d:da:72:f7:5a:ce:31:3c:ee:8a:
fc:26:c4:70:c5:a2:f5:f4:6f:12:73:c5:d5:99:e8:
2a:f0:10:28:8a:19:c8:64:fe:a6:92:aa:6c:12:59:
1b:2b:1a:42:65:39:46:44:f5:09:1f:87:04:ae:29:
2f:de:99:e1:d0:6c:e1:20:55:2c:74:56:a2:dd:68:
18:f0:a2:54:39:a2:34:79:50:aa:6a:f5:11:a2:aa:
fe:47:d2:e1:8f:44:0b:6e:35:52:b2:96:36:82:68:
9a:3c:9f:a1:79:8c:2b:93:13:c1:84:82:b8:1a:9d:
05:1b:0d:38:94:2e:59:23:65:c7:b4:a2:96:58:da:
7d:3a:40:1b:51:79:99:8f:9d:9f:80:81:99:c7:48:
47:ce:54:c0:bf:3a:2a:69:9f:6f:6d:7e:66:70:10:
b3:67:73:97:19:eb:19:01:46:b3:f6:35:85:47:62:
d2:56:03:89:d4:57:96:7b:fb:1d:8e:11:6a:70:fd:
77:89:7c:e9:d9:cf:60:b8:af:7b:ab:30:62:19:fe:
b2:d9:6e:02:34:fa:4a:db:0d:5d:8a:54:68:84:cc:
b9:07:a6:26:7c:07:dd:10:8f:ad:34:72:94:da:bc:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F0:58:42:9F:83:46:0B:E8:0C:9F:64:45:F9:16:DA:B5:41:32:42
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f9:97:73:2f:12:68:47:1f:8c:c0:53:c9:73:36:7d:aa:7b:
1b:21:9f:1c:fa:9f:79:3c:16:40:17:39:5f:62:31:77:13:76:
4d:8f:2f:af:74:e7:3a:ae:c7:0d:56:08:f8:26:b8:88:1c:ef:
0b:05:e1:6f:b2:e6:79:2d:7d:e9:e3:5f:17:b2:15:20:64:38:
be:6e:f3:32:86:42:51:0c:92:06:76:69:a0:f5:3a:f3:6a:07:
45:9a:75:73:6f:36:0d:55:f4:46:68:8e:76:38:e5:d9:19:cf:
a0:a0:1b:a0:7c:0d:02:23:62:fd:a7:1c:73:4e:e0:26:8e:c8:
92:5f:85:de:e9:c8:4a:05:6c:b3:29:2b:0e:f9:c3:2f:af:88:
a6:ce:ce:70:c3:61:35:65:cf:74:75:1a:eb:f3:a5:8a:e4:7b:
5e:e4:65:33:4f:8b:2a:2b:ea:0a:58:03:0f:cb:9c:47:c3:bb:
3f:b9:59:57:6c:5b:f6:72:03:d9:37:61:46:73:9c:ad:7f:76:
bd:65:60:35:d6:fd:f2:26:0b:2f:75:b5:80:fa:04:9e:b8:36:
af:c5:09:5b:d1:53:f5:55:c1:4a:f3:35:7f:e7:9e:a8:9b:d5:
3d:d4:b1:51:d6:fe:7f:c6:92:ac:33:76:a8:98:ba:1a:d1:fc:
c5:b5:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:05 2025 by rpki-client