Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
File: NQtAztNuMfkF4abo4DxiHp-_yyk.mft (raw, json)
Hash identifier: F+UU6yx/5Ftjr/5TA4f2kg9LcI1Jg17c+5PNsurwCl8=
Subject key identifier: 92:3F:F9:90:B9:8C:19:26:2B:E9:3B:24:51:CD:A8:92:82:24:AF:E0
Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
Certificate issuer: /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Certificate serial: 0194BBCE6A64BF89D6DAD6BEC6117B6D0290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
Manifest number: 1167
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: NQtAztNuMfkF4abo4DxiHp-_yyk.crl (hash: i4htXdRElXkOdrZNmttHaxK9m5ytCSv8lgMgK/+J9Vk=)
2: u7-gL9wSp2bGW7DIF24NVuhmOKc.roa (hash: tP75Wdne3vqUbGN0hrtXpkGNXdZlPHZwjnI3xiXFlak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:64:bf:89:d6:da:d6:be:c6:11:7b:6d:02:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=923ff990b98c19262be93b2451cda8928224afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:15:75:12:5c:04:57:8d:65:b0:57:66:1d:
41:6f:a5:5b:b3:bd:89:be:9c:01:67:cb:c5:b9:7c:
7e:99:81:c5:a2:23:74:4d:4f:39:34:df:d7:d9:a1:
5f:3f:c1:01:f5:28:de:2d:84:6a:a6:eb:4c:70:93:
7d:db:e9:b6:93:ef:de:5d:28:54:93:10:ea:71:71:
69:ca:1f:10:24:75:e5:3d:61:79:a2:12:5f:2d:d4:
93:48:e4:9f:18:2c:69:af:1f:43:f9:3f:71:74:07:
d2:9b:0a:af:ba:d1:e9:01:60:7e:a4:9a:5a:04:2c:
d6:32:ca:fa:26:bf:7d:51:0a:26:04:46:95:cc:fb:
a7:dd:36:d3:50:46:9b:13:b4:b3:bd:3a:d7:4f:f0:
bf:88:13:f0:18:95:78:8d:be:f3:ec:4a:8a:25:28:
8e:14:a7:a6:d7:26:91:13:56:42:a8:47:43:0f:1f:
15:4a:0d:f3:87:69:52:48:6a:7f:d3:7f:98:e5:d0:
61:99:05:de:d9:e1:25:cc:c3:f9:24:d1:28:e9:e3:
45:0d:ae:59:7f:95:cd:b3:a5:20:65:30:48:04:82:
d5:a0:e7:55:b4:8c:f9:30:11:db:60:96:f6:a6:c1:
9a:0e:bd:11:de:a6:0f:8e:61:1c:0d:5c:b8:84:d2:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3F:F9:90:B9:8C:19:26:2B:E9:3B:24:51:CD:A8:92:82:24:AF:E0
X509v3 Authority Key Identifier:
keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9a:ec:bf:be:5e:5a:f9:d5:e2:dd:58:5a:51:56:bf:9f:a6:
9b:9b:d3:ad:7c:ed:e2:ea:a5:05:10:fe:2f:57:cf:69:d3:75:
f2:96:99:9a:79:5d:d5:29:3d:6e:28:43:fa:98:cb:0a:f2:fe:
36:dd:12:a6:33:60:58:61:1c:b4:b5:0f:73:93:11:5f:ac:7b:
33:66:cd:95:71:97:09:c3:9c:eb:ac:a2:b2:54:c3:a8:ef:37:
83:33:83:59:42:15:3f:aa:8b:68:d6:8e:92:4b:83:ae:1b:53:
31:22:05:4f:40:07:9a:51:1f:4e:f6:76:64:e7:dd:5b:a9:17:
e8:6f:92:28:fb:09:b3:bb:4a:7d:fa:28:3a:c1:6f:5b:df:36:
34:58:7b:ce:4d:b2:1e:5d:1d:8e:e0:dc:e1:2c:87:07:d3:eb:
45:73:fb:2c:76:41:4d:89:64:5e:13:50:ef:ba:0c:84:49:c1:
c5:34:75:20:59:9a:e6:3c:e7:6b:f3:e4:79:c5:e1:3e:99:33:
2f:9f:f2:08:ad:da:71:ac:4a:7b:06:ce:46:c0:f4:79:65:46:
eb:a2:c5:f3:3a:f8:d2:bc:1c:3a:8f:57:c4:c5:73:c1:60:98:
e5:73:cf:e4:f0:d6:f4:3f:e4:27:71:f3:37:f4:7e:78:99:07:
8c:a6:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:13 2025 by rpki-client