Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: goAQpu9VY5LoxNvHI1gcgebZfoeLaOPLsph0n/h7nI8=
Subject key identifier: 03:E9:71:B0:61:45:75:27:A1:46:9B:06:B5:BD:5D:6A:9D:A1:D1:D1
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 0194BCE0B90BB55EFAC6CAD0224CC77BE007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: K/Fz2Hg8BpwpBwwSnpbz0R8RXYGi3Wf55JjXmWvUnbo=)
3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b9:0b:b5:5e:fa:c6:ca:d0:22:4c:c7:7b:e0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=03e971b061457527a1469b06b5bd5d6a9da1d1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:7a:43:ec:f3:ba:c9:cf:46:6d:79:ad:5d:
2b:4a:8d:68:08:fe:8d:f2:60:ef:ec:63:6e:f2:5d:
23:69:ed:3b:35:8b:07:8f:5b:e0:45:ef:07:f3:64:
1a:fd:2c:97:15:a2:f9:65:18:3a:aa:81:0a:2f:77:
08:6d:d8:2e:aa:df:10:dd:03:a8:1a:1f:c6:5e:92:
74:81:d0:88:c1:63:32:24:49:cb:4a:e6:80:54:e8:
0a:1b:d3:08:c1:85:96:df:45:57:af:97:2c:c2:e7:
38:67:e1:b9:15:9f:aa:7f:e3:c1:9b:b7:d9:25:8a:
ee:34:17:e9:c1:01:f5:0a:9a:5f:ec:e4:30:98:80:
8f:ab:de:65:f9:1c:62:1c:b2:19:75:45:83:41:48:
ae:a2:8f:aa:a6:31:a8:0e:41:a9:57:35:15:88:6b:
98:70:54:43:b4:6d:0d:53:26:db:11:9e:9f:4f:c0:
0a:1f:a8:14:52:cc:72:ef:3a:da:7c:ce:02:92:ab:
48:da:ff:44:ae:bd:cc:a4:c2:42:10:20:fc:4d:e0:
2b:ea:ee:a0:ab:1c:18:9f:b4:40:05:0d:b9:aa:52:
e4:96:18:7b:54:05:44:c1:01:b5:c9:90:c7:d2:a5:
e0:fe:d9:3d:14:5a:9b:51:f9:24:19:14:63:a7:57:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:71:B0:61:45:75:27:A1:46:9B:06:B5:BD:5D:6A:9D:A1:D1:D1
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ec:b0:10:11:76:d4:bf:aa:bc:d9:41:be:e8:6c:60:e2:d9:
bc:99:a1:d7:d2:b4:a8:9c:c3:a4:a1:2d:b3:44:38:54:43:8a:
38:6f:10:20:43:f7:d8:c7:09:b1:b9:07:44:1d:16:74:f2:c7:
a1:4b:06:76:84:c6:f7:b1:65:16:e9:79:66:62:da:22:58:f6:
eb:b9:35:fe:28:30:6e:c1:c3:ee:93:fb:43:b7:d6:d4:dc:a3:
12:d0:46:38:26:ab:b7:6d:b7:06:22:f6:0c:51:40:6f:0d:b1:
cd:9d:fd:21:42:61:a6:df:2b:6c:64:a9:f6:b6:ec:e7:32:27:
de:e5:0f:ab:b0:98:1f:16:30:1c:c2:7e:89:0a:7e:c6:13:f3:
ea:19:f9:08:3d:a6:eb:64:75:95:57:7b:7b:f2:44:3a:de:01:
91:71:a9:ab:21:22:5d:dd:af:10:b5:25:be:bb:96:8b:14:5f:
94:97:00:33:10:f2:bd:d5:cc:94:70:cc:c1:cc:ef:b7:61:a1:
9b:cf:d2:82:24:96:d2:48:7c:55:1e:c2:e2:ae:c6:5b:47:27:
1f:cd:15:9b:15:6a:ef:a4:ca:d7:71:d6:45:ed:85:60:57:fe:
bc:b4:4b:02:24:cc:aa:ef:54:08:93:16:1a:8f:98:9d:f9:e9:
25:cb:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:34 2025 by rpki-client