Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: pOju+YPCn+HKaLtTtCB51dWmSUIruIe0/wMdTCw/aO8=
Subject key identifier: 4A:DB:8A:41:B3:4A:A4:A9:7F:AE:E8:AB:98:C0:6D:C1:5C:E8:02:EF
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 0194BCA9805D4269CEF5A9889F484EC30B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: UlIbTSR3liorONJen8OQeZhleK1zRUCIdR0KEinLpGY=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:5d:42:69:ce:f5:a9:88:9f:48:4e:c3:0b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=4adb8a41b34aa4a97faee8ab98c06dc15ce802ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:1e:e5:9a:a5:4e:f8:46:06:76:1f:d6:fa:
d1:41:9b:46:0e:a4:3d:c8:da:44:42:46:1d:0e:41:
3a:ca:a5:f3:e6:d4:97:9a:02:20:b3:98:aa:77:1a:
87:37:d3:c2:50:8b:d2:f6:00:a4:82:19:20:0d:8d:
06:12:86:76:f2:6b:3c:d7:df:11:65:f0:e4:00:b4:
80:2b:fd:40:29:79:86:db:34:69:1e:ad:b5:02:1c:
dd:da:9d:30:5a:2b:3e:0a:b3:8b:4b:c0:ea:43:10:
b6:8e:1a:9e:12:c4:8d:9c:e3:ea:cc:8f:6b:08:23:
2c:aa:f6:f7:bc:6f:88:ca:44:e6:cf:91:bf:d0:3d:
97:6d:4d:f9:2c:0d:42:ff:9c:04:a5:3d:7f:ca:d4:
89:9a:94:ae:13:6c:19:77:58:f2:11:e5:df:e4:97:
7f:d4:fe:e1:1b:d8:d7:f9:c5:54:aa:f7:da:3b:54:
b2:34:52:16:0c:8b:ee:8a:c0:87:05:e4:8f:93:02:
44:48:02:5c:13:30:02:8e:44:b0:c6:f5:53:fd:b7:
88:ab:0b:7b:ec:aa:c8:e6:52:f8:cd:8a:42:d9:ce:
1c:21:7c:63:63:e2:84:cf:ff:68:38:79:29:7a:a6:
69:b3:d0:ce:8b:8c:d4:52:da:4d:ea:9f:23:dc:97:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:8A:41:B3:4A:A4:A9:7F:AE:E8:AB:98:C0:6D:C1:5C:E8:02:EF
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ea:63:d0:00:2e:08:c2:75:11:70:62:af:71:85:5a:78:53:
38:fd:c3:99:ac:e5:1c:5d:46:06:f7:53:c2:e2:3b:e0:dc:17:
e3:67:5f:a9:44:d4:bb:25:a5:6a:a4:41:ca:ee:61:04:6b:1b:
c9:3d:d2:7f:45:35:57:8f:b8:5c:5b:cd:9a:23:f4:28:73:8f:
a8:0d:63:a4:f0:b8:ab:6e:2a:00:8d:69:2d:92:4a:f2:db:72:
df:23:fa:b4:dd:6e:98:f7:b4:65:a4:29:5d:2b:b5:1d:9a:4a:
18:f6:ed:ed:6c:4c:ad:08:a3:9c:4d:30:28:06:f8:59:0c:3a:
8e:bb:b7:86:99:b6:18:5b:8b:e9:74:6a:37:2d:ae:92:34:85:
d2:7d:89:b0:23:1a:5b:76:d2:f8:63:94:db:86:11:8e:3d:16:
0a:09:65:13:1b:3e:28:ae:45:fb:c7:f2:d8:96:98:8b:5b:8b:
31:c1:3f:1c:c5:c9:5c:1f:4f:46:dc:0a:b4:3a:62:da:59:b5:
41:81:0b:d5:15:e2:12:b9:37:98:1a:29:33:72:9e:4d:f1:1f:
37:cb:b4:9a:6e:df:d7:4f:91:a3:2c:90:9a:00:66:b1:25:86:
1e:87:91:57:8b:27:57:d1:70:6a:c3:8f:93:27:b4:ea:ed:00:
bc:10:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:27 2025 by rpki-client