Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: 066tN3N9kUwGGNHEMzHgwgZM9Fh5240LbQTmDCHVo58=
Subject key identifier: CB:3A:BE:67:14:CB:68:AB:B0:04:D8:F3:E0:44:75:8E:3A:14:3E:8E
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 0194BD17DC3591F6CDF486C3B651BF3DDB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: cFYrXVZyXNHr0pFRxHfyxswWoQ3QGpFpm+ogoGG40UM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:35:91:f6:cd:f4:86:c3:b6:51:bf:3d:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=cb3abe6714cb68abb004d8f3e044758e3a143e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:29:42:95:fb:7a:c6:ee:9d:78:1e:62:cd:
87:9c:d7:e7:62:b2:c2:36:9d:c4:8a:c4:45:10:ce:
b0:b5:83:eb:94:8c:3f:d3:69:2d:46:d0:7a:13:a4:
9d:89:be:a6:93:2c:43:87:62:43:38:49:86:ad:13:
bb:f8:e7:fa:e7:c1:af:6b:04:53:a1:10:3a:f4:93:
cc:4a:da:0c:72:eb:fd:bd:12:0e:26:dd:95:04:2a:
30:df:9c:8d:9f:68:a4:75:34:ac:41:1c:76:f9:bb:
73:5d:af:b5:6f:f8:4c:4e:0e:df:f5:64:8d:2d:b1:
71:94:36:43:94:83:d8:dd:33:28:c0:45:db:02:dc:
00:06:35:21:17:d5:2e:49:85:41:d8:9b:4d:e4:03:
99:1c:3f:c9:92:a9:fc:7f:a3:4d:14:9f:27:54:ac:
62:d6:ad:b4:09:01:dc:4e:70:64:45:67:ee:ea:85:
80:ff:be:7f:af:12:df:df:0d:73:6e:d0:4d:c2:53:
6d:5c:09:0a:e6:b2:4d:d5:4c:e5:d1:3a:31:72:a8:
c9:3d:56:7d:17:e7:7a:80:fb:58:3b:bd:ba:19:c4:
1c:97:1d:91:61:4c:c0:43:fa:71:d9:a8:9c:8a:5f:
85:1b:b6:bd:cf:b2:fe:fc:99:7c:e8:b6:02:e5:80:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:BE:67:14:CB:68:AB:B0:04:D8:F3:E0:44:75:8E:3A:14:3E:8E
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:a5:8b:88:23:ef:93:84:23:eb:51:25:46:9c:ad:f2:a4:
6b:85:6d:cf:b5:e4:ac:13:f2:f7:46:58:09:5e:c3:6b:58:48:
62:f8:fc:b3:e0:b5:af:1e:5e:7b:73:92:85:ce:7b:cb:47:33:
29:cb:5a:97:a6:2a:1f:22:54:a2:49:a5:44:e7:eb:30:8d:db:
9f:7a:d0:0d:9f:51:f8:86:77:71:c5:6f:e2:2e:dd:fa:f0:58:
b2:60:04:42:a0:c5:18:3c:2c:28:e2:a7:91:f7:d9:82:78:ec:
e6:1e:2a:43:fe:2b:f2:e6:ea:b8:28:01:be:0b:34:70:dc:f8:
27:79:f0:28:e3:87:3a:e1:89:a5:6d:e6:d0:c7:4f:9f:2c:07:
ad:e0:6a:b0:90:7d:32:9f:44:cd:01:26:54:b7:ec:08:06:06:
46:ca:a1:b2:85:0a:e5:f0:8a:58:96:c0:1d:39:90:f5:a9:84:
87:09:e4:54:22:d9:3e:6d:c9:ab:0d:62:3e:5b:a1:ec:7b:54:
af:7f:15:b4:2b:63:8e:b2:6d:79:b4:6b:88:97:cf:5c:53:d8:
e5:be:b3:cf:65:8f:1a:cc:0a:c1:c2:1f:94:d7:f8:72:a7:b2:
16:4d:ec:8a:68:14:c9:0c:81:96:83:57:0d:81:0c:41:a5:7d:
47:7a:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:53:29 2025 by rpki-client