Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: 2YG4I/c7jFhcRkijlhCaBKvWYQ/bnEeqWU3fgt45zvk=
Subject key identifier: 58:9C:5F:BC:37:C2:96:D1:2E:11:FB:2B:6C:B0:89:D6:2D:62:19:19
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 0194BCE0EE40A7846E9B2801908BCEEF380E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 01C4
Signing time: Fri 31 Jan 2025 15:00:45 +0000
Manifest this update: Fri 31 Jan 2025 15:00:45 +0000
Manifest next update: Sat 01 Feb 2025 15:00:45 +0000
Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=)
2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: +u4dXOzzrK9AvcacXcaA/s5fzfaB+a4acEmu8II/tbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ee:40:a7:84:6e:9b:28:01:90:8b:ce:ef:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Jan 31 15:00:45 2025 GMT
Not After : Feb 1 15:00:45 2025 GMT
Subject: CN=589c5fbc37c296d12e11fb2b6cb089d62d621919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:73:8c:27:c6:37:4d:67:07:23:c2:b7:5c:
0d:b1:9a:97:b6:fb:ac:b3:63:21:ff:28:1b:1a:c5:
9c:e3:3a:04:20:76:18:a5:51:fc:e9:ee:04:64:d5:
76:65:9b:fa:d0:ea:b8:89:f9:c2:bb:e6:b8:dc:d0:
6d:fd:af:09:04:8c:06:76:ca:f1:3f:1b:c7:6d:e6:
c3:6c:42:15:31:e1:e1:b8:4d:82:a7:17:77:79:66:
23:ff:bc:1e:2f:80:a3:99:06:7f:bb:ae:30:cf:6c:
36:94:e2:a9:f2:43:f2:18:1e:0d:79:d9:6c:10:8c:
54:3b:af:a2:6d:96:7c:b0:54:88:b2:e1:0f:87:c5:
0b:89:cb:b8:d9:56:f8:c8:df:07:e0:c4:1f:ea:2e:
df:4b:7f:9c:4c:3f:b6:49:bd:d6:16:19:16:6f:6d:
17:94:ec:9a:9b:db:1f:c5:86:a8:3f:76:fd:4a:f2:
d6:c1:4a:4e:43:15:50:2f:c0:4b:eb:fa:69:e0:74:
b5:65:8d:e5:a9:92:8b:7b:ff:fd:61:44:f1:1f:6c:
d0:5b:69:b7:02:8e:2d:9d:ba:71:85:a1:64:a2:dd:
dc:be:c5:78:c5:f6:57:2d:05:1a:7d:6d:07:d9:d4:
0e:c2:99:55:8c:e7:f5:b2:d0:61:13:63:1b:c0:06:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:5F:BC:37:C2:96:D1:2E:11:FB:2B:6C:B0:89:D6:2D:62:19:19
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:29:97:bd:93:9e:1c:2b:55:14:03:1e:e4:c2:c4:59:57:bb:
0c:0e:a0:e7:7c:9f:48:b8:81:12:6e:6c:1e:34:d6:b6:c7:23:
a7:62:09:a1:3a:aa:1c:97:c1:1b:ac:a3:5c:c0:70:44:5c:3d:
41:cd:f8:2f:a3:1f:29:10:88:98:fc:54:17:c0:9b:e1:a9:57:
8f:9d:f0:d1:de:be:45:8c:38:5f:b6:95:bd:e9:d4:27:65:86:
75:68:0b:3d:a8:40:2d:88:0b:76:fd:0e:5c:5e:b2:3d:1d:30:
ce:a8:95:1e:58:66:10:a5:44:e3:11:d1:af:7b:3a:a9:d5:df:
39:47:6a:d9:de:5c:b5:bf:78:3e:af:1a:9d:aa:af:01:93:8e:
32:2e:8e:17:78:23:af:81:39:5d:d3:5e:5e:4e:bd:a1:5d:56:
80:6c:d4:04:4a:32:6c:78:ca:43:a8:94:e3:34:8b:0d:2f:c2:
74:fe:29:2a:2d:02:e7:9c:1a:6b:f8:8d:f0:2d:0a:59:ca:31:
f4:f1:2f:25:31:5d:f1:46:2b:fe:cb:68:55:60:27:bb:d0:11:
51:22:62:f4:6f:28:ff:43:f0:2a:f7:df:da:4b:ed:d3:fd:50:
46:f8:4f:0a:92:da:51:f4:d4:2c:22:15:fe:97:fb:f7:d8:53:
0a:e2:44:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:02 2025 by rpki-client