Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft (raw, json)
Hash identifier: DJUTRbgQTHRekX4vUIasPslGU6EJzOv2OFquIdUXkUg=
Subject key identifier: BD:92:81:37:B0:B2:0C:F5:2B:48:CC:5A:D7:BF:F7:DF:3E:C3:3D:2D
Authority key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Certificate issuer: /CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Certificate serial: 0194BD859C98043CAD261DA6AB34DDCB9FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
Manifest number: 1106
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl (hash: y5dIV9tkoi23M19xg9G8uHXyn2DRtwWSsv7GfwJ5wBM=)
2: pJ8B6gtnj6CL56vYC6LrCO5oBmo.roa (hash: F88j9ZRyVWoqzEm3QsXJ4KW1kEET+j/VAKZytfrtK/M=)
3: zsR2hosRcU8M1KGjXd1_k-ktlfc.roa (hash: rTq5tN+JofEk5Za1xiOrbVhdFMOSTGjrPTYOHgXaK+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9c:98:04:3c:ad:26:1d:a6:ab:34:dd:cb:9f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=bd928137b0b20cf52b48cc5ad7bff7df3ec33d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:22:aa:c4:b0:87:72:7e:c1:8f:bc:cd:cf:e4:
48:dd:e3:9d:d1:7e:ee:30:6a:4f:ff:4c:74:5b:22:
1b:65:93:9b:f9:86:a6:31:2e:3d:f9:d4:ba:2d:9b:
b6:52:7e:3a:57:66:58:89:b1:67:2d:08:fe:5b:67:
07:aa:dd:17:df:17:d6:09:44:12:76:0a:5d:3a:32:
5d:10:df:4d:e2:d1:32:1f:68:09:ee:d9:73:7b:63:
7d:85:89:12:1c:81:53:51:f2:a0:73:2c:e6:f4:1c:
37:7e:b0:0f:09:ed:d7:a3:d4:08:2f:ac:42:b8:3a:
88:03:e7:d5:da:ea:92:5d:2d:f7:bf:6c:42:d6:27:
83:dc:a8:43:e6:b2:a0:8e:fc:81:e0:9a:26:56:70:
b8:05:d0:73:82:e5:d5:ee:73:61:f5:93:c8:f8:35:
7b:e2:6e:9b:7c:6c:cc:7d:61:19:77:23:aa:40:b9:
c2:fa:7e:50:f8:69:ff:2f:69:78:e5:41:4f:48:3f:
a8:e2:1d:7e:bf:8d:46:2f:59:65:5d:53:a6:bc:c4:
00:8b:34:57:2e:9c:b2:46:33:9e:64:0a:79:01:fe:
d2:e9:6e:89:48:d9:aa:73:5e:cf:31:b4:3a:5f:79:
01:37:2c:11:c6:05:e7:11:97:d4:c0:9a:68:7b:eb:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:81:37:B0:B2:0C:F5:2B:48:CC:5A:D7:BF:F7:DF:3E:C3:3D:2D
X509v3 Authority Key Identifier:
keyid:34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:02:6b:9d:86:a3:21:d7:5f:83:5c:af:c9:7d:a9:d1:36:86:
e1:8c:6c:df:80:89:6e:95:29:70:c4:ba:80:c2:a8:43:56:a8:
07:1d:00:b7:4e:43:1b:f6:b7:37:5b:21:88:5d:e0:21:e6:0d:
53:ca:0b:cb:5a:6a:22:81:e1:47:19:d6:d0:e9:ee:63:35:eb:
5d:59:f8:26:f3:12:ca:83:ed:81:18:7b:f4:01:92:f3:b0:29:
e3:de:97:7d:32:bf:c9:33:50:6a:83:62:2a:3b:d7:0c:7f:79:
16:0e:41:b2:4f:78:81:b0:e3:d5:24:e3:3e:5c:74:9d:da:e4:
99:d0:5a:df:07:12:25:0f:f2:1e:e9:83:f3:29:cc:4e:3a:c1:
39:32:c5:ca:ba:91:c4:84:37:bd:3b:68:fb:e9:b9:bf:40:76:
16:82:ea:8a:e1:d8:ba:c7:33:20:86:6d:31:8c:39:4d:13:2d:
61:07:3a:17:90:e9:81:86:df:55:38:c8:6a:34:84:3c:56:ed:
8e:53:bd:c5:d0:ad:25:ba:e0:cf:79:da:73:2c:b0:e8:83:dc:
5c:31:d4:20:4e:00:29:0f:8c:da:19:c1:c8:c8:7b:00:13:c5:
81:0f:56:a5:fb:50:5b:22:fb:da:56:e1:98:43:01:bd:73:3b:
83:e0:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:19 2025 by rpki-client