Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: CeP4vzPy9++qdI9fVDNf0kV5ZI96K5Wu7oJgA+ekf84=
Subject key identifier: 6D:CE:93:98:49:97:C5:49:46:BF:6D:51:39:9F:D3:12:F0:26:CA:40
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 0194BD4E3780E2EA2D0B7F0F704098491627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: jjlk9Kbo381dtazCfTGk+rmuFuTdURGLHTQwxFKldeA=)
2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:37:80:e2:ea:2d:0b:7f:0f:70:40:98:49:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=6dce93984997c54946bf6d51399fd312f026ca40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:f6:f6:24:a3:12:54:1d:06:a1:96:6d:64:
fe:bb:48:01:44:49:57:06:b1:d2:23:89:25:c9:cf:
b5:4e:9f:b0:d5:c0:87:c1:d1:31:c1:1f:5a:4a:00:
ad:d0:1e:57:a2:a9:96:89:aa:15:4a:67:7e:c5:0b:
91:83:6f:ac:dc:65:a3:80:9b:a9:08:02:cf:1d:60:
88:1e:90:27:83:02:c6:2c:cb:4d:70:82:52:03:c1:
8b:4d:06:97:cf:a1:67:42:4a:9b:9a:d0:dd:80:d9:
57:4c:f3:c6:46:00:0e:52:db:79:2e:97:7e:79:1a:
a9:50:bf:3a:52:a4:84:0e:45:17:17:47:9c:fc:e7:
7a:5d:46:d3:cf:00:c2:8e:a6:27:a6:a8:22:96:83:
fb:89:9e:d6:bf:bc:fd:02:7e:ed:f8:ab:86:20:16:
29:b7:71:49:0a:75:6d:f4:00:ed:3e:bc:e2:1b:33:
ac:ac:26:c6:0b:8e:4e:54:2b:ef:a0:7c:5e:c4:a6:
97:30:fb:ed:e8:0b:a7:0c:58:e3:9d:01:88:70:a4:
9d:a8:df:3f:26:8f:9a:eb:31:fb:53:13:6b:1c:38:
3f:33:a2:e6:78:ab:cd:30:db:e9:6c:86:de:f5:b9:
02:fb:01:90:d9:3c:b1:77:47:1c:a2:97:17:17:4c:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:93:98:49:97:C5:49:46:BF:6D:51:39:9F:D3:12:F0:26:CA:40
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5d:bf:96:16:e7:ee:e7:71:d5:2b:ad:37:72:07:ab:70:e0:
60:df:be:cb:f7:44:25:ad:03:34:06:e2:1d:de:53:af:69:39:
80:98:5b:c6:43:10:16:d1:11:b4:3f:9f:4e:4a:5c:74:a5:da:
2d:f6:1b:b9:14:65:1f:a0:87:bb:f6:63:bc:f4:5a:95:95:c3:
6f:be:ea:53:48:d8:e2:6b:02:f7:ed:09:05:b7:9b:c5:84:7a:
f7:e7:81:f9:81:d9:3f:59:e5:b8:67:da:35:29:8b:4a:3f:a0:
49:3c:47:14:c0:3f:bb:ee:e1:3e:91:f9:db:d5:27:8f:ec:bb:
4f:9d:b6:32:52:b8:cd:59:82:58:02:84:e7:26:9e:69:f3:7c:
12:fd:fb:9a:f2:05:45:4c:4d:f4:88:5c:95:5a:46:7b:12:3b:
e8:52:20:ef:ec:49:1a:de:f3:b3:ca:55:35:3d:66:95:85:77:
af:c1:48:08:bd:55:ad:19:74:a8:e4:17:12:6a:53:68:ab:d7:
4d:dd:03:56:3c:52:f7:27:5c:de:07:3c:35:02:f3:40:b8:72:
aa:51:79:38:47:32:e3:ee:5f:48:46:7a:4a:99:8f:4a:7f:00:
50:b9:04:b0:26:2c:00:7f:72:c3:39:11:49:36:9d:a4:9c:e3:
a3:4b:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:55 2025 by rpki-client