Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier: KGGPP7ZslcWYpkPqwwwWvGGe5ItvXeihPhIwPwpL+10=
Subject key identifier: 78:66:FE:00:56:F5:82:FD:35:61:AD:EC:5E:FC:43:0C:B8:4F:F8:5D
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial: 0194BCA9B0B3CB2F97E055BB404CD39D4183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number: 03E8
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: P3Zh2u//YRViuCiRPHVs7yGTU30EnQeDXdRMEil9EkI=)
2: StdZuEMdBW7X4NXLCF7XI4ppVlw.roa (hash: iq6H8WyI/GcnhvxxJGW8O2+6IQ6zatbRbbXOnldRxIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b0:b3:cb:2f:97:e0:55:bb:40:4c:d3:9d:41:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=7866fe0056f582fd3561adec5efc430cb84ff85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:40:14:21:51:cc:5d:fb:84:dc:47:02:64:
cd:5b:be:ff:6b:71:59:90:28:dc:6c:ba:20:b0:aa:
01:46:e1:f5:07:39:ef:cb:67:ca:d5:23:f8:b2:ab:
5a:87:c3:79:d0:6e:59:6e:ef:d7:95:30:8b:ff:4f:
37:f3:2c:8e:bc:ee:39:ab:dd:7e:94:d2:77:24:8b:
48:e5:95:98:88:f7:12:57:66:97:ee:14:c3:bf:7e:
eb:b5:44:02:43:68:cf:0d:22:90:59:bc:33:d7:36:
50:ca:76:fc:7b:0a:9e:50:d0:bd:f6:c1:28:3e:0c:
e6:b0:e2:09:0b:e8:d1:21:0d:ae:01:2d:c1:08:e6:
2e:aa:fb:c5:67:e0:0d:6f:01:dd:69:5a:61:f5:36:
58:ab:56:85:d8:ca:e4:f8:bf:48:6e:e9:f3:01:e5:
39:94:6a:ec:d9:e3:fb:46:fa:ae:18:d4:2b:fb:65:
14:68:11:2e:20:9a:52:8a:cd:e9:4d:b7:3f:72:59:
a3:7e:08:5e:af:9f:79:e5:22:a1:82:ef:58:8b:36:
4d:67:67:4a:42:83:fd:5d:f7:3d:02:24:ff:54:b4:
d8:f0:5e:fc:67:c2:64:16:38:20:75:98:2a:47:0e:
9b:b9:b2:41:37:c9:d7:8a:98:d5:e6:ad:8c:da:87:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:FE:00:56:F5:82:FD:35:61:AD:EC:5E:FC:43:0C:B8:4F:F8:5D
X509v3 Authority Key Identifier:
keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:59:89:d7:91:d4:b0:cd:f5:cf:dd:e0:ff:c3:49:51:5b:09:
eb:b0:24:1b:19:ce:21:d5:a6:cb:47:62:35:29:27:57:01:e6:
14:b9:69:af:38:d6:0e:04:30:83:20:d8:6c:c1:65:00:03:ac:
68:50:ef:d5:24:29:6c:d7:fa:19:f7:31:2a:fc:7e:b7:4a:91:
dc:16:75:da:46:9f:43:49:c4:02:10:2a:7d:ca:69:39:59:c4:
94:86:26:69:3b:5a:e3:79:d4:19:af:b2:ed:a1:77:30:20:da:
5b:29:b4:4d:7d:ed:80:da:cf:ac:0a:58:34:fc:2c:61:de:bb:
0e:88:42:c4:07:8a:b2:13:7f:f3:6a:25:80:3e:84:ee:62:94:
9b:c4:9a:90:af:91:20:f1:aa:36:70:ab:05:81:b3:0a:b4:55:
9c:1a:8c:6a:6d:1c:45:5e:75:e2:da:64:21:02:99:35:f9:7e:
76:02:31:32:28:9c:1a:5f:65:43:39:ec:ff:1e:3c:be:31:b1:
20:44:65:e6:1d:f9:d7:8a:1a:66:fa:b6:6e:a2:8b:7f:c7:7e:
e1:bc:44:1c:99:52:8b:b4:81:b9:86:47:e9:af:7a:ed:23:cc:
52:2c:b4:2b:cc:fa:19:d4:a5:1c:6c:25:75:8c:40:e5:a3:bc:
f8:01:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:36 2025 by rpki-client