Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: i7s1Xp1FbmpBMWez20OdnA75Y3GGJ5JmSjqMe9hjkjo=
Subject key identifier: 17:C9:35:39:CF:68:17:DC:A6:E5:75:1D:0C:66:38:7A:61:49:16:1D
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 0194BBCDBE9EDDF3BDCD2F805EC5D16BBDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: 1X0s9OpNlnEy+YOU9Gpx1+lMlJ+1ZFYZkeTnl4YNspo=)
2: VMysSyLNDVGWd0vcTeYPwlMA5rc.roa (hash: 6+DEgCnpiKyTQCIOlcuNMISjTH2qj/1LJFyn3yXus8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:be:9e:dd:f3:bd:cd:2f:80:5e:c5:d1:6b:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=17c93539cf6817dca6e5751d0c66387a6149161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:21:86:fe:73:b5:00:1d:38:6a:b3:13:06:
7a:cd:f9:97:8d:63:b7:57:c6:5b:a2:be:ad:73:4b:
97:cd:15:f7:6a:49:d4:d7:ef:e5:0f:1e:56:9d:a9:
7b:fe:64:d2:d2:3d:ef:be:ec:0e:5f:e4:26:42:1d:
4d:6b:b1:86:9e:62:d4:2d:15:01:d8:d9:22:28:78:
20:8b:3a:39:68:73:24:d0:55:6f:d9:c4:ad:c8:ad:
69:b6:1f:4f:8d:4d:f8:78:c6:83:de:24:b7:e9:5d:
77:7e:d3:a8:d1:54:27:f0:03:b3:6b:58:92:ce:61:
f6:ef:11:e1:1a:f0:ba:c2:8c:54:80:c8:a4:0e:8b:
ac:cf:a0:45:f6:19:aa:5c:57:dd:52:28:59:71:66:
96:cd:d0:c7:48:cf:78:39:bc:a2:f4:d2:09:78:fd:
4a:c6:95:ae:40:2d:be:84:3d:f8:a0:eb:1e:f7:cd:
08:2d:cd:a6:d4:c9:7d:47:25:05:f7:a4:eb:a7:80:
e1:a2:a3:80:ac:cc:e3:90:04:5d:f6:8f:f6:00:3d:
b8:4a:dd:e6:97:b1:68:83:3b:e8:b3:01:ec:18:74:
40:d8:f5:45:19:1e:7f:08:51:c3:98:8b:7a:36:86:
ad:7f:01:a1:5c:98:cb:e2:8e:00:a3:2c:61:c7:e5:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:35:39:CF:68:17:DC:A6:E5:75:1D:0C:66:38:7A:61:49:16:1D
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f3:a4:4a:89:36:ba:c3:26:be:6c:1b:4b:1f:5c:bb:26:2e:
d5:9b:49:9e:df:11:84:25:46:db:59:66:98:34:10:f1:71:01:
72:5e:bf:a9:bc:69:bc:28:80:c7:e4:fc:10:43:14:46:60:d9:
d2:3b:dd:34:3d:2d:c5:78:5b:f6:b7:8f:70:71:22:2e:23:99:
97:7d:85:42:37:12:66:ff:ef:bd:cb:53:42:c8:da:97:72:23:
3e:b0:25:b1:db:35:54:23:3a:a5:9f:51:d3:16:7f:68:aa:62:
76:c2:b2:c3:78:d1:8a:1a:19:35:b6:a2:13:51:87:f2:1a:c0:
60:22:55:dc:8a:95:29:96:a9:2c:55:3e:e3:57:78:24:9b:20:
87:3d:40:70:b6:33:f3:02:b1:dd:d4:20:65:5e:7d:6c:52:8d:
b3:6d:04:46:b5:99:34:cf:70:e2:9a:0a:7f:d9:fa:2c:ec:f5:
ad:47:49:4a:e9:e2:ef:7d:13:91:ba:c0:fa:06:ca:c7:ed:04:
8a:cd:33:49:94:bf:d9:9b:a0:7d:5c:5b:05:5d:f5:cd:5b:9a:
26:2a:c2:36:8e:45:55:d0:db:cb:3a:ab:90:0d:f3:db:3b:cb:
21:dc:eb:c7:3e:d1:d7:4b:da:49:9f:2f:94:6e:ae:71:80:bf:
18:05:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:03 2025 by rpki-client