Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
File: NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft (raw, json)
Hash identifier: h/gWU1gGbmdPt7J0/zB+2Pq7A9xlUSr9RyP7Gl/4ByA=
Subject key identifier: DD:74:E8:57:70:C4:9A:5C:14:CA:F3:33:3D:84:D0:CD:E1:79:6E:B9
Authority key identifier: 34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
Certificate issuer: /CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Certificate serial: 0194BC3BC0B223CDE93E7C1DA7FB2703C73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: G75hDgiyd2LwDpJ76o2-U8H3uNQ.roa (hash: S5OSLsFsbCnXpNSoGI0qFyRFbDiGy+ql70CMoNWtluw=)
2: NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl (hash: G4EmkBVFG8H4Q7wovlNdeuLfWVyi/g/MvYGahZbzRhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c0:b2:23:cd:e9:3e:7c:1d:a7:fb:27:03:c7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=dd74e85770c49a5c14caf3333d84d0cde1796eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:b3:3a:58:ad:43:9c:c8:8f:40:3a:64:06:
7a:c4:fc:b2:26:f1:c7:0b:94:0f:47:95:8d:c6:8e:
97:85:bd:5b:47:28:4b:db:3a:b4:cf:be:5c:06:6b:
47:66:d8:77:b7:07:82:d0:a2:3f:cf:eb:94:97:eb:
22:43:3c:0e:4b:a2:d6:d2:3a:12:bc:fc:73:ff:33:
26:72:a6:c5:12:35:25:d9:58:cf:8e:31:c8:72:41:
8b:1f:34:70:4e:8a:fe:ad:34:2a:60:58:16:d2:ed:
a4:2f:de:14:b0:00:8d:d3:1c:41:2e:6f:83:fe:77:
d3:63:b9:bb:53:bb:69:0f:89:fe:87:de:c4:fc:8b:
c6:d2:c6:c8:1c:49:0e:c1:13:39:2c:fc:56:f6:3e:
ba:2e:47:9c:97:a6:a1:e6:19:df:d5:72:2f:dc:9b:
43:42:43:47:0d:6f:4d:62:c9:64:82:ab:c8:e8:1a:
40:a9:e2:46:cf:4b:4f:cd:23:cd:cc:f6:1b:62:69:
43:cf:22:ae:6d:87:de:77:f9:5a:27:cc:01:73:18:
2e:86:1a:41:b3:2f:de:f0:bb:11:cc:7d:91:3e:86:
97:95:74:77:92:f8:29:8a:7c:21:ae:74:39:d4:e0:
59:0a:13:f4:e4:6b:f5:14:19:e3:b3:53:71:8b:db:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:E8:57:70:C4:9A:5C:14:CA:F3:33:3D:84:D0:CD:E1:79:6E:B9
X509v3 Authority Key Identifier:
keyid:34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6c:23:83:d1:b2:65:d4:20:67:a9:ae:51:d4:d0:32:e4:a1:
3f:0b:b4:22:f2:da:90:32:91:ad:22:0c:e5:3d:ad:a1:e7:9c:
84:1c:e8:00:87:fd:42:49:de:e1:7e:f0:9c:6c:3d:24:0f:2a:
cc:5e:8c:1d:f4:8b:41:6e:e6:44:53:c3:f9:73:36:08:5d:a6:
e5:da:36:e9:7a:51:2d:b1:c6:9d:b3:c9:75:43:9f:81:7a:9e:
6f:27:b8:6f:11:e6:7f:1c:8c:c9:4c:51:69:f1:e7:91:60:be:
ae:4e:f4:96:4d:49:b9:63:60:8e:41:e5:18:15:22:50:5e:3a:
5f:d4:f9:a3:f1:3d:8a:5b:90:6a:57:81:37:85:2a:10:b1:37:
08:2c:01:24:6b:f5:11:f5:54:90:cf:a8:5b:47:67:8b:c3:6d:
d7:ed:f6:17:86:9d:b5:2d:3c:38:68:55:a2:d4:2f:f7:ad:e0:
dc:29:35:bc:49:eb:35:9d:cc:2e:29:c0:1d:89:28:30:81:f7:
d0:f9:df:f0:30:9e:b8:8e:64:0b:8a:8b:ac:ee:b1:79:d8:2c:
3c:75:fd:84:7c:e5:3e:f1:ed:4e:75:27:0c:d0:72:05:8a:f6:
50:d7:91:44:c6:37:26:49:98:f8:91:1e:b8:4d:14:cb:d6:7e:
68:57:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:47 2025 by rpki-client