Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: H66tlJVjR9TuKHuI3dC6Xy62giNyr/KPd3HV1NWwYYA=
Subject key identifier: 39:D6:E2:F8:DB:BE:18:DE:80:B4:D4:84:4F:C1:02:55:B7:00:22:DB
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 0194BD4E645C5E32B734C371350CB125EDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 0E8E
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 57xvgs1C64qj87aIpNvXlZvGXRo.roa (hash: zjoFwMxs5GYLsG8xg0G8PjPosJWEnHUje1reYWnSt8s=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: sLnu7acm5DL0+wcfGHZYEAbZ6L6l4rq2/0bNlnXo6S0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:64:5c:5e:32:b7:34:c3:71:35:0c:b1:25:ed:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=39d6e2f8dbbe18de80b4d4844fc10255b70022db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:3e:50:24:30:7c:d9:f4:0c:2d:32:87:bc:
fa:6f:52:79:5f:bb:4b:32:e3:aa:e5:ac:6a:0d:dc:
67:95:cd:94:f6:c2:44:26:fc:7b:85:81:5b:92:95:
b8:cb:e5:a2:ec:61:61:be:6d:6d:a5:d2:09:1f:31:
b2:d1:bf:79:f6:45:5c:c1:4b:db:df:77:00:fa:3c:
41:01:3e:9e:29:2b:81:0a:aa:8c:89:fd:5d:81:91:
b9:20:dc:4d:03:fe:73:cd:3b:2c:ec:27:30:eb:03:
ed:c4:37:a4:89:2c:0a:ee:46:e9:ac:e1:e1:ef:32:
49:b2:d5:90:eb:ab:58:7a:4a:e4:25:f2:b4:af:88:
6a:af:99:a2:51:20:86:a5:ac:30:63:77:9b:e2:9c:
e9:af:40:16:a2:11:a4:ff:3f:60:be:06:ce:b4:66:
31:d2:81:2d:a6:bc:c4:c8:3e:e1:e4:da:43:ad:4a:
eb:63:b2:fb:6d:55:75:76:25:e2:92:2c:2c:0d:df:
11:4c:ea:cc:f2:a4:92:9b:b5:cd:56:f5:c1:13:46:
28:9b:26:ec:ab:f2:4c:82:6a:43:56:9c:d9:48:d7:
36:3e:1e:7f:3d:d6:47:3a:ac:8d:a9:43:d3:61:c2:
e3:2d:88:b2:ef:8b:dc:63:6a:4c:92:11:6e:02:48:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:E2:F8:DB:BE:18:DE:80:B4:D4:84:4F:C1:02:55:B7:00:22:DB
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:5f:3c:9a:88:3c:4e:55:eb:44:73:e3:e7:4b:1c:83:c4:
82:f3:1f:ad:c8:e8:46:b6:db:5a:8f:49:25:10:bf:14:8a:5e:
55:79:4b:53:2a:bd:df:95:c6:14:f7:a4:9a:55:f7:51:44:30:
1b:0a:3e:d7:5f:59:68:8d:dd:f1:99:7f:91:80:95:d0:6f:3a:
19:41:d2:38:d2:cb:34:d0:9d:6f:8e:bd:65:3a:51:b6:d1:44:
d6:63:76:43:9a:9e:02:88:7a:2a:a4:2b:cb:2f:2d:f4:cf:19:
d9:02:9b:17:81:f9:27:43:10:f8:f1:0e:a3:ab:43:9f:f3:e4:
8c:25:ed:6c:f4:01:cc:4f:78:30:96:19:d0:5c:55:2e:d9:05:
f5:dd:75:1c:c7:9f:20:f2:50:23:64:f3:46:25:f4:2c:5c:9b:
d8:84:c2:9c:41:73:4b:02:16:62:58:fb:c7:49:65:c2:d9:7e:
f8:11:20:d2:b3:54:87:f2:4c:89:2b:a3:bd:03:af:19:95:5d:
14:94:ab:0a:55:39:64:af:33:eb:a6:9d:14:79:7a:dd:c0:35:
d7:97:c3:ed:e5:cb:dc:ee:7f:00:33:bc:a6:66:71:7c:b9:96:
94:0a:99:c8:02:cc:c2:3b:13:a4:08:90:25:75:69:10:78:57:
e0:d0:be:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:39 2025 by rpki-client