Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier: OXvGLMyI/wrl4JhBsLoHG0V9YbKpQ+KftCNqoKyzO3Y=
Subject key identifier: 3B:B3:44:F9:B8:04:5D:0E:B5:8C:84:F4:D5:8E:60:35:E8:74:A5:9F
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 0194BD4E7DF069F2811B4E0E0F8335F0A6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number: 0EC0
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: JscmxGl_L2E7JnV0mfv32RHUpNw.roa (hash: 8j6EFW05T3ckFd0k6CAkZlDvS05KieVcVNbYKlWGlos=)
2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: K76rEgaSkl0Qyqrhgoa9mCnLDR1uRHaAK4+MpW3bdSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:f0:69:f2:81:1b:4e:0e:0f:83:35:f0:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=3bb344f9b8045d0eb58c84f4d58e6035e874a59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:22:bf:06:54:6f:33:b7:6f:cd:f1:9e:0b:
89:86:54:f5:7d:28:47:a8:84:6c:84:af:6f:26:e3:
86:66:8e:9d:16:be:e5:ef:74:f2:27:ed:56:b0:97:
84:48:88:fd:c3:90:34:74:c2:11:50:a4:4a:e1:46:
e1:7d:7a:d1:42:8c:c7:ad:92:e5:9e:6d:15:8f:9a:
a4:8e:88:91:43:6f:c6:e8:ea:92:58:e5:e5:54:0a:
ff:58:26:b1:43:da:3e:28:9c:06:ab:9b:f5:1e:74:
fb:e0:e2:3b:c7:11:b8:e1:4a:69:79:88:ef:e4:57:
ec:e6:d3:2c:a3:dd:ad:a6:4e:fa:32:2a:ff:cb:07:
08:af:50:b7:22:15:1c:d0:7a:cc:a9:e2:8c:9e:9b:
77:5c:99:bf:5f:31:6e:07:91:7a:d0:a8:1e:2c:f0:
d1:0f:59:ce:6b:8f:bb:3a:d5:12:a6:a6:7f:a9:7c:
19:9e:b3:41:14:cc:39:cb:47:71:95:2e:ae:3c:16:
9e:4e:81:dc:e2:74:81:23:b4:1b:8a:fd:7e:41:53:
55:c0:9a:35:f5:0c:c6:d5:98:f7:46:ca:12:01:23:
15:12:76:a2:1a:ff:d1:71:c1:a0:38:90:6f:ee:8e:
c0:6a:44:63:04:6a:31:3b:14:0a:9d:b6:1b:77:3a:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:44:F9:B8:04:5D:0E:B5:8C:84:F4:D5:8E:60:35:E8:74:A5:9F
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:27:25:30:54:dd:3d:46:55:37:a0:50:d2:fa:b2:25:7c:a7:
c8:1d:ab:22:8e:37:e9:b0:ba:14:f2:32:f3:15:c8:0f:5e:99:
eb:26:fb:51:1c:40:e1:5c:e4:3f:1c:49:9f:8b:ef:14:31:2c:
f7:23:bb:3f:cf:c6:81:34:50:2b:0f:df:6a:ef:33:2e:dd:e7:
85:85:cd:06:4c:2d:99:2d:91:fe:38:bd:7e:05:e2:d9:12:31:
a8:db:8e:10:69:08:37:bc:62:bc:e8:8f:f8:e2:cc:39:d8:20:
6a:55:c4:e8:e9:30:72:96:3b:7a:c3:72:a2:e9:ed:b2:39:fd:
59:f7:4e:41:cf:07:a0:ec:d4:71:90:a8:29:60:8b:2f:40:21:
d1:b7:7c:70:f7:af:1f:8a:89:c3:2d:98:bb:c2:05:1e:86:9b:
d8:63:1c:99:e5:24:ba:bc:67:84:49:43:d3:ab:d0:4e:43:2c:
af:75:49:3d:94:f5:79:d9:68:e0:48:22:36:6c:b3:16:66:a2:
99:ad:83:2b:01:6a:b8:ba:b1:ea:64:d4:cb:66:f0:18:18:15:
e9:7b:80:97:10:1b:41:c1:f7:ab:cb:8d:eb:8d:c1:5b:27:4f:
0d:64:1a:d6:eb:24:90:20:4b:01:30:4e:6f:a3:d6:66:a0:3d:
13:99:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:39 2025 by rpki-client