Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: zO5wftRikeCAcu/1AdIY+Qq20adXCRzqJBT4aGcQ+4M=
Subject key identifier: A9:B7:1C:DA:5C:B2:EE:E3:DA:E6:FF:26:F7:6D:AD:70:5C:D5:26:9E
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 0194BD85B42171972ACA52C8A8D16B123D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 104A
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: mSCZu4WmsV4xUN17Tvz22Hm8ZYK8CwNjUA/0pPT/GCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b4:21:71:97:2a:ca:52:c8:a8:d1:6b:12:3d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=a9b71cda5cb2eee3dae6ff26f76dad705cd5269e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:1f:62:19:7b:d5:6e:34:c9:c1:3f:35:c8:
ac:e5:76:a8:11:d6:c8:26:be:cb:b4:8c:e5:2e:71:
ca:76:3b:10:d6:07:a1:11:70:1b:1b:12:3f:0e:8a:
12:d6:4a:36:dc:39:60:69:bb:d6:da:6b:21:ac:c5:
eb:d7:e2:de:21:4a:97:8b:44:29:fd:02:53:40:76:
15:44:0d:61:9d:ac:f6:f3:ae:0f:9c:68:87:73:ef:
0f:cc:26:7f:29:4a:29:d4:7c:ce:28:d5:40:70:f6:
b2:fb:47:33:b4:b3:10:09:cc:92:df:29:05:cb:92:
6e:02:f1:02:a2:a2:69:29:4e:09:20:76:b0:cd:ac:
21:36:99:6a:10:8e:0e:02:5a:81:d4:4d:90:7f:0a:
cc:8a:13:d2:e6:3d:18:1b:ec:52:0d:b2:ff:9d:6c:
d5:98:f1:e5:4d:60:8e:71:59:0b:fe:4a:06:a8:b3:
45:56:8b:a4:1b:71:d9:08:32:ea:1e:f3:aa:2a:bb:
0d:54:91:ff:63:6f:68:5f:40:f0:1d:96:da:35:ac:
11:38:5d:03:2c:d8:24:98:cf:48:f9:8d:c3:63:ce:
12:5b:51:b8:0f:0d:66:01:5b:fe:da:5e:a7:a6:3f:
50:68:3a:8e:16:b8:57:e0:e1:d6:f4:17:88:91:d5:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B7:1C:DA:5C:B2:EE:E3:DA:E6:FF:26:F7:6D:AD:70:5C:D5:26:9E
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:58:9a:de:dc:f3:56:2b:f1:b2:0f:da:87:b7:03:cc:dd:55:
c1:16:b5:db:1e:03:54:ea:1b:74:99:62:73:b0:b6:91:4d:73:
2d:6f:95:a6:b5:28:53:ac:4c:ba:ed:12:67:16:29:29:61:5a:
4d:ec:90:58:fc:28:37:76:5e:51:7d:c0:6a:f6:50:c1:ba:2d:
2a:8e:be:87:96:68:6f:f9:eb:9f:a7:00:55:54:85:69:d1:16:
1f:97:c3:40:3d:14:a1:b8:87:e1:f4:98:9d:42:ab:86:0d:8c:
1c:0c:cf:3e:24:e2:f7:b4:5e:89:f9:95:35:32:f8:20:a1:50:
e9:b1:3c:e6:a6:50:45:2b:b6:48:9a:aa:79:9d:55:d2:d2:49:
96:7a:d6:59:20:7e:78:bd:e1:6c:13:a1:38:ae:77:b7:58:ea:
54:fa:bc:b7:1b:33:ff:35:81:12:0a:04:d4:b8:cd:ac:cd:a7:
b1:cc:93:19:29:d0:18:c6:fe:c1:0d:39:ef:6f:67:f7:ef:66:
3b:a9:35:a4:7e:75:34:e5:b7:d9:f4:24:6f:fa:4b:f9:3b:38:
61:8e:e3:45:7a:a2:3f:08:6d:da:9b:cb:cf:f7:a5:4d:55:94:
c2:58:51:a1:91:b6:c3:5b:7b:34:07:45:55:c2:3e:a4:3e:66:
71:8b:30:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:24 2025 by rpki-client