Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: AJOvx5t0j1olSsNJLapXdJelQbsiqomANyxtaAkNmHA=
Subject key identifier: 99:C7:9E:8D:02:9E:39:ED:85:55:70:3F:98:07:89:42:A8:73:34:68
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 0194BCE0EB1674D70729E0F43C44104CF1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 030C
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: /gbdDHTKkp6ZjWqYI6sxYSDio3GOcTjPM7rxYbA/qDQ=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:16:74:d7:07:29:e0:f4:3c:44:10:4c:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=99c79e8d029e39ed8555703f98078942a8733468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:c5:f1:c7:a2:1a:a5:95:a2:c1:43:61:a5:
f1:d8:81:32:3e:59:40:91:ac:8f:87:f1:80:db:53:
e4:35:95:14:a6:0b:d7:b7:6f:30:73:80:2c:16:dc:
4e:9b:57:4f:b4:11:2a:31:63:c9:95:78:f2:4b:f0:
65:c7:e3:66:df:aa:1d:43:73:56:d7:d4:4a:cb:d3:
4e:69:24:a0:99:bb:8c:d9:1c:83:d5:0d:6c:88:b8:
b7:67:02:be:23:a0:3c:43:03:40:f6:f2:6e:d1:ef:
e4:ec:a5:f5:24:94:e8:ac:3b:b6:99:71:76:df:ad:
c4:ef:f5:34:7a:74:40:e9:fb:59:58:2e:ca:53:19:
80:ba:fa:39:94:d7:63:83:fc:21:2e:30:ad:4c:2b:
67:0a:98:7e:47:f1:20:bd:89:25:24:c4:06:cd:f9:
58:c3:d9:99:2b:c4:68:b1:ff:e5:98:34:83:37:05:
bf:0b:2d:27:13:4d:dd:35:4a:03:ac:c6:11:94:ad:
cc:18:dc:dd:6a:16:91:ea:9b:32:30:c5:92:0f:dc:
d1:40:7c:b0:94:1b:3c:a6:ad:d2:74:68:4c:c1:6c:
e1:2a:e3:29:06:ae:c3:1e:11:16:16:11:bc:75:74:
4d:40:d3:c5:88:e3:77:ef:37:90:ee:4d:8f:7e:b1:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:9E:8D:02:9E:39:ED:85:55:70:3F:98:07:89:42:A8:73:34:68
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b0:54:b6:cb:20:3a:ec:d4:6a:34:cd:ae:c0:0b:fe:94:0d:
1b:bc:9b:a8:25:10:6e:c1:32:b1:3a:a3:ce:c7:16:82:2e:ca:
8e:06:35:67:61:d0:a0:01:ab:b7:01:ac:48:84:54:35:9a:73:
39:2d:e2:25:5e:c4:7a:3e:f0:6e:5f:fa:ef:65:35:b6:d9:e2:
8d:aa:b5:dd:dc:7d:ce:8f:77:09:11:c5:99:b1:2f:24:fb:14:
40:4c:a7:21:df:2e:6e:59:db:77:e9:49:68:ef:2c:63:99:a6:
fc:8d:78:9b:ef:d5:c1:ff:c2:84:47:c0:37:5f:fc:57:a8:8c:
3c:20:e1:57:00:6a:3f:17:a3:c9:11:59:3b:a1:35:8f:7e:16:
07:97:36:94:56:6f:1d:40:3c:e7:b4:82:75:0e:36:08:12:04:
df:1e:aa:aa:bc:6b:b1:fb:86:8b:34:f3:2d:39:e3:63:e1:84:
03:f7:f4:38:b8:9b:73:d0:bb:5d:43:9a:2a:27:1d:fe:8a:d9:
3e:cc:85:0f:c5:f7:6a:12:3d:42:80:c9:ff:86:ab:91:f5:e5:
a2:d9:c4:57:07:04:f1:30:b9:d4:20:c2:91:4c:c4:c6:a8:6a:
43:2a:a5:6c:69:22:24:86:79:95:23:4b:24:35:15:07:b9:ca:
45:ae:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:59 2025 by rpki-client