Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: nC1iJghc9sg19yAL1Z1BWTCsjwBl2eJFY9AaTcdVDkg=
Subject key identifier: F5:08:E4:7F:05:4D:3C:41:39:7B:3A:0C:70:8A:56:FE:46:C5:F3:BE
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 0194BBCE6800A66BF106790AB828EDC78A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 0DEB
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: kCV44FPWZs6Vc+i23w0cIk43eYZdNLEcvQ/v4oZVb1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:68:00:a6:6b:f1:06:79:0a:b8:28:ed:c7:8a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=f508e47f054d3c41397b3a0c708a56fe46c5f3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:62:4f:41:f2:27:ab:e3:ef:12:23:4c:c3:
ea:09:f7:c5:2d:07:eb:63:df:d1:df:8f:ac:77:a8:
e6:35:32:e7:5c:29:b9:0d:b8:71:8f:3f:50:75:08:
ce:a0:d6:77:62:0d:3f:41:59:d0:f9:8e:8b:c9:d1:
10:48:ec:de:95:c8:4a:df:eb:f4:13:f3:05:b4:89:
3e:62:c5:5f:ca:5b:72:39:9c:cc:1b:33:d0:76:98:
58:19:95:5d:4c:1d:e4:45:2f:37:e8:0e:cd:3c:f8:
85:37:50:dc:c5:28:08:f8:99:d5:5d:15:45:93:45:
14:83:5c:02:21:8d:3c:53:5f:70:42:49:47:5d:e0:
7a:5d:04:46:cc:2a:5c:02:1c:67:33:81:8a:3b:31:
1b:69:cf:23:55:b2:df:b9:92:3d:fc:30:c5:39:4a:
db:67:85:71:36:18:a3:6e:5f:01:be:26:cb:e6:4f:
ed:5e:a0:3f:ef:58:2d:a3:c4:ca:41:e7:0a:e7:d8:
65:a8:1c:10:54:a3:18:68:20:df:bf:77:df:e0:7e:
cc:17:12:65:f9:26:9b:8f:6f:a3:ca:f4:3b:d6:a9:
32:45:5f:37:12:0c:61:87:e3:5d:73:65:a5:86:8c:
8a:1c:13:da:ac:4e:ac:77:d9:8e:71:9b:2f:b5:74:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:E4:7F:05:4D:3C:41:39:7B:3A:0C:70:8A:56:FE:46:C5:F3:BE
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:75:e6:41:a9:a7:a1:82:85:74:95:1c:40:07:5d:1a:e2:96:
be:6f:58:a5:4d:74:30:e0:92:3d:02:ab:2f:0c:8d:64:97:6c:
e2:25:2f:0c:d2:51:eb:5d:38:8d:5b:82:08:bc:26:36:b2:1f:
47:f3:e9:27:41:4c:aa:f6:27:3b:29:22:8d:89:de:45:1e:00:
b0:29:ee:b5:f1:84:ee:b0:3f:b7:79:de:5d:35:71:ad:42:08:
ac:36:b9:1b:6e:d4:9e:0e:d2:c0:26:c3:d9:c8:98:34:d7:51:
e0:08:12:c0:5a:78:26:7c:99:31:57:a3:ed:7e:4d:35:80:90:
cc:d5:67:01:17:7c:66:6d:25:cc:d7:d0:d2:b0:bf:a7:1c:f6:
2c:b8:b6:88:7b:7a:8a:1b:2b:01:a9:61:64:cb:69:5f:46:b2:
03:56:04:2c:00:3d:58:a4:42:6f:cc:06:b1:43:35:04:04:fc:
ee:4e:59:77:07:7b:c1:e9:c1:69:8f:36:85:4a:5f:a9:d6:d8:
40:03:98:4f:d9:02:fd:b8:03:e5:99:4e:4d:8f:1a:20:f4:97:
98:29:8a:50:44:21:0c:86:96:e6:04:2e:a5:ea:48:bb:d1:38:
9c:53:2c:77:fa:d9:ec:cc:94:c8:88:ee:0e:6d:76:9a:04:4f:
31:e4:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:53 2025 by rpki-client