Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier: AGc3KXFwkzaT2FHyShOn+DUhRouFj7+5dnJ7waus/mU=
Subject key identifier: C2:2B:90:EF:AA:10:C7:E8:5F:DF:B6:E1:9C:73:46:05:59:88:8D:52
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 0194BBCE3D0B09EEA46FDA32881DE0D74437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: xFiS2EFEPnQy2qUBgKtEM18XXMZnnxwwXO2XnD0RnvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3d:0b:09:ee:a4:6f:da:32:88:1d:e0:d7:44:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=c22b90efaa10c7e85fdfb6e19c73460559888d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:c7:00:7b:fc:26:ce:ce:53:58:1e:70:81:
c1:e4:65:fe:9c:35:5d:ab:4d:49:83:40:e7:47:22:
78:25:2b:36:b4:64:ff:1a:de:92:73:24:b2:93:f0:
b9:47:84:a2:e2:61:82:bf:9b:5a:c4:2e:d5:68:47:
5c:10:ce:85:ff:ff:0a:9a:0f:69:6e:1d:f5:88:6f:
2d:a9:c0:58:2e:e7:70:df:8e:b2:dd:fe:3c:8c:ac:
26:2c:0a:16:bd:92:bf:39:b0:a2:c1:42:26:c2:f7:
4b:c9:2b:2a:41:c7:74:fa:47:53:7c:c0:d4:fa:5e:
0e:3d:21:4c:e8:30:6e:b4:22:89:a8:a8:27:9f:07:
0b:73:46:98:21:88:f2:97:f9:ef:0b:64:d8:1f:10:
30:47:3d:a0:9a:ee:bc:d4:e1:2f:bd:6e:94:7a:c0:
25:71:8e:92:ec:12:e2:5f:b9:32:dc:2b:3f:fc:51:
8e:73:0a:de:53:be:cb:9d:68:37:a0:14:df:a8:6b:
14:fe:5e:d5:1f:bf:3c:c7:8c:21:c6:c2:5c:00:02:
cc:72:2e:e3:09:73:be:17:27:b8:80:3f:9c:30:e6:
7e:bf:03:8c:e9:dd:2d:c2:3d:ef:1e:27:6d:20:90:
0c:55:b4:e1:cc:01:fb:d4:d1:af:f4:e0:0e:09:81:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2B:90:EF:AA:10:C7:E8:5F:DF:B6:E1:9C:73:46:05:59:88:8D:52
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:33:68:e7:cc:6f:89:b0:68:37:21:eb:b8:75:b7:94:b6:a3:
07:cd:fb:eb:b9:c2:bc:cf:9a:56:ec:df:70:a1:08:46:21:00:
2e:4d:dc:17:0f:5d:a4:a9:c2:58:c9:55:01:59:5c:2f:ef:1f:
8f:c4:17:28:a8:59:e3:d8:40:ef:2e:bb:56:37:5d:2b:66:3d:
15:ea:9b:fb:d3:66:a1:2f:31:4e:5c:d0:b5:8e:1f:f2:a3:ad:
87:f1:c7:c7:ad:7d:1e:24:04:8e:8c:3b:18:33:c5:05:02:a1:
96:de:92:6d:69:0e:bd:3f:b6:47:e7:c1:46:a9:44:2e:59:59:
6e:e6:ea:b5:0b:80:90:8d:78:8b:b3:ba:54:4e:9e:4e:38:78:
f5:4e:5c:1d:00:5c:ec:f0:db:83:60:9f:ba:08:69:63:2e:83:
48:ad:f5:f9:03:b8:9a:28:9c:ba:f1:ea:c8:da:27:26:de:9f:
8e:7d:1b:7e:11:68:bf:b8:9d:64:e3:95:ca:fb:c1:6a:36:df:
fe:d7:30:9b:a2:cb:1c:81:a9:00:bc:fe:95:1a:9b:1a:f5:ed:
86:78:91:00:e0:d7:7f:09:dd:93:86:7c:5e:32:e6:20:ce:96:
47:d8:3d:67:5d:05:cc:14:92:80:31:c3:38:68:19:0f:21:b2:
83:99:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:19 2025 by rpki-client