Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: fqHuZuCU+iV/0/ZYmhVHjS+TAvGtFG1143al/K5sUuQ=
Subject key identifier: 18:98:44:2F:EA:13:87:36:32:F8:5A:1E:72:C8:03:3F:48:AF:90:C2
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 0194BD4EA5FADEAD57E16433B0C2490A66A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: PXxAQtUW/hwgsIO7jMDGd1DHcAhJEuWzH9dPiKH0Q6g=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a5:fa:de:ad:57:e1:64:33:b0:c2:49:0a:66:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=1898442fea13873632f85a1e72c8033f48af90c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:6e:92:3a:3b:36:9b:e4:77:1a:da:f0:5c:
3f:c7:06:73:cd:c5:da:03:1e:2c:6e:62:70:c5:2a:
15:6e:b3:a4:a0:2c:27:dc:5d:17:08:d9:c7:73:a8:
2e:d8:17:60:19:4b:09:8a:32:3c:c3:82:31:f4:bc:
44:d3:c9:a8:4c:d3:99:63:fe:7f:80:13:b5:95:75:
86:2a:92:48:20:69:db:59:f7:07:fc:25:01:fb:e3:
c7:46:f2:ea:71:fc:78:27:63:f7:ce:27:b1:32:a7:
f3:56:cc:77:f4:03:97:2f:4d:77:68:88:3e:b5:d4:
2d:3b:c2:74:9c:cf:c5:cf:36:a1:a9:c1:2d:9a:45:
8e:25:f7:50:0a:5c:b9:7e:e6:f5:50:fb:ad:22:4f:
64:53:db:7c:ba:79:22:f6:2b:5b:4c:8d:25:97:28:
a1:0f:90:fa:50:6e:1f:fc:54:fd:e6:ea:c6:83:ae:
78:6b:1e:32:b8:90:70:90:eb:98:f9:d6:22:da:06:
0b:ba:1a:35:cc:52:1a:2c:ee:1c:a7:3c:aa:fb:47:
17:ff:79:91:fb:a1:9c:47:c9:1b:1e:ea:a6:2e:04:
62:4c:b9:1a:7d:2e:53:e3:05:56:0a:d3:72:d0:43:
b2:b0:ef:5e:42:f6:ad:4b:5e:26:62:77:e4:f7:3c:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:44:2F:EA:13:87:36:32:F8:5A:1E:72:C8:03:3F:48:AF:90:C2
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a0:7d:2b:fb:41:95:15:74:23:05:be:6e:a1:29:39:be:f2:
b8:95:25:8c:2b:b3:5d:7f:ae:0b:41:08:76:af:3b:21:b0:a9:
34:dc:4f:6a:6c:77:b5:13:a2:ea:27:10:53:51:e1:13:23:bb:
ed:9b:ef:a6:03:64:ae:81:38:b4:0c:c1:e9:91:43:06:1c:1c:
60:09:44:00:ba:c7:6f:f0:b1:55:73:f9:6b:b1:ef:0a:d9:c8:
b6:2e:a4:39:f7:22:fa:35:e9:60:76:56:ef:87:c5:cd:1a:79:
9d:da:dd:f2:36:6d:9a:cf:a2:96:2c:ff:64:67:3c:ed:e8:e3:
b7:fd:1b:f4:21:ef:ca:9f:b2:70:83:83:8b:be:75:ac:f7:38:
94:03:5e:8e:d1:ea:1e:a8:28:9b:1e:4b:24:e4:f3:f3:dd:6a:
01:fa:ce:f8:6a:b2:17:f1:c9:05:25:81:1c:a4:39:42:b1:d4:
71:ae:0e:e4:f7:b6:c7:a2:34:0f:f7:40:ba:2b:8d:a7:62:78:
0c:6e:24:50:2b:36:7b:28:dc:87:1a:c6:36:b1:64:a5:b3:b8:
ee:b3:b1:8b:37:27:03:48:f3:3e:25:2a:4f:23:41:4a:08:99:
da:fa:c6:c9:98:e0:fd:71:db:5e:c4:b7:24:96:5b:74:68:b8:
2f:42:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:46 2025 by rpki-client