Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: DoI7NpFvjjw78DnTkzfaqKHJDRG1n3tmOv5L8lQSzhY=
Subject key identifier: 04:0D:BE:57:16:76:21:88:5C:86:12:FB:C0:71:CF:DF:98:0A:9D:3E
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 0194BD17C4B662163973CE04E77690C115B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0800
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: xK64N3sPwFpkpDGxXRCBSdzdogDT1lJt2Z9/Hgv5Ls4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:b6:62:16:39:73:ce:04:e7:76:90:c1:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=040dbe57167621885c8612fbc071cfdf980a9d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:cc:3e:4e:56:a3:01:1a:7c:19:f7:64:e2:
82:42:f1:2e:86:b4:41:86:71:a1:14:3c:55:da:4e:
56:19:70:77:f2:23:f1:a1:b6:4a:69:cf:0c:34:54:
b4:62:9d:2d:31:3b:f5:8e:29:24:d5:6a:59:a6:71:
e2:00:71:3f:eb:14:00:a6:5e:ac:27:bf:fe:9c:0e:
b4:ea:ae:34:61:87:cf:a0:cf:e2:1b:30:8e:dc:3e:
9c:18:60:0b:25:1c:b9:d8:dd:2e:c9:a8:b4:9d:4f:
83:d2:e2:37:62:fe:7d:71:8b:86:8c:06:b5:25:07:
20:3b:c4:4d:a7:ca:dd:fb:8a:88:cb:a9:25:e3:98:
2e:f9:d3:8e:d0:db:52:d2:1d:9b:a5:61:a9:f9:10:
bf:86:00:83:d8:52:81:14:5f:f4:49:44:b2:9c:55:
b4:f2:4d:63:2b:29:e7:0a:45:23:df:7e:e0:51:58:
ab:2d:b3:aa:98:4a:52:bc:ee:3a:1f:2a:c8:53:84:
d3:42:f6:8c:22:c0:80:39:77:82:46:3f:42:35:a0:
6b:f0:3d:bf:e6:38:b8:d7:18:b6:56:1c:fd:70:8f:
20:fa:ee:dc:6e:ce:60:40:e8:02:6f:b9:2a:36:88:
bd:5f:e4:79:0f:6f:7d:71:27:f9:7b:dd:36:cb:a0:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0D:BE:57:16:76:21:88:5C:86:12:FB:C0:71:CF:DF:98:0A:9D:3E
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ad:69:d6:0d:4d:89:dd:c8:ad:aa:4e:5a:93:df:15:d3:94:
55:1d:fa:25:e8:36:42:f8:e5:92:11:12:ca:94:b6:22:a3:84:
8d:a5:30:49:84:10:63:1e:c5:33:dd:c1:f9:10:83:b9:2a:c5:
8d:ed:4c:04:34:38:9b:77:25:de:5b:18:c4:5a:47:4c:5b:65:
b0:66:2d:bf:53:17:54:31:5d:c0:9b:2b:42:01:ea:58:45:d4:
fa:04:1c:dd:8f:7c:fb:02:6f:0a:9f:d7:51:56:d6:70:02:ee:
6a:06:69:b8:fa:79:5e:54:69:04:fa:fb:c7:89:ac:9f:ba:e9:
04:70:0e:0c:dd:6c:57:e4:ec:62:a8:34:93:9e:15:c9:4e:15:
c9:d4:25:53:b8:6c:44:f8:d2:27:ba:35:87:3f:98:5b:17:a0:
96:30:14:d7:2d:74:50:13:34:9a:ce:5b:bf:cb:47:13:89:60:
7e:61:90:d4:e8:00:68:f3:72:5c:95:cb:77:67:41:78:89:79:
b4:f8:19:db:ec:b5:9a:ff:b5:1a:dd:82:57:cb:80:3e:27:1a:
65:35:90:22:e7:f0:24:f8:90:bd:e5:ae:37:71:28:de:c5:3d:
0b:da:b0:c3:27:7b:b9:55:dc:a3:13:d0:64:e3:4a:c9:bc:86:
ac:e2:b1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:34 2025 by rpki-client