Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: S3gMXLMWvkqMG8D2pNA3SN9ChSppydEJBxeKI3/yB0g=
Subject key identifier: 73:B3:46:37:EA:19:40:26:40:F5:23:66:9C:D7:7E:C9:45:61:75:08
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 0194BD1781ABDDA0828179C7264B9607C316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 0F26
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 44fsOPhLBto54i38jO9Qp6LcR34.roa (hash: q6FqWEqTwKl4W57zhlt+bCI2esmopnN71WRYkbStb/o=)
2: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: t06aLsUe/MDmt9adpKhUsiQaj3K9L1AN51AaXNxGM0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:81:ab:dd:a0:82:81:79:c7:26:4b:96:07:c3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=73b34637ea19402640f523669cd77ec945617508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:30:b2:66:5d:6f:46:2d:31:ed:01:22:df:
98:b3:fd:77:f2:1e:91:1a:a1:8e:8f:f5:c2:8d:c5:
50:19:b6:78:24:5a:19:ef:6c:df:bb:91:5f:12:07:
53:e3:e6:fe:5c:29:fa:c1:68:b9:5d:0b:44:cc:d2:
12:34:20:cc:4f:20:81:15:56:8a:2f:ee:8c:2b:fc:
a8:58:67:b9:0f:f2:c3:b6:42:b1:1e:10:fe:a7:31:
39:36:a6:9b:7d:36:80:70:b7:ba:36:56:55:7d:76:
c4:75:22:5e:a0:42:d8:4a:28:1b:e8:b8:0d:1b:9e:
30:6b:11:a6:c7:bf:52:13:31:22:8c:24:aa:be:f9:
c2:b2:98:13:86:e6:46:cb:51:4e:50:dc:dc:49:33:
d8:68:4f:69:0c:5d:31:78:aa:a9:b3:32:e7:4e:f8:
31:5e:a5:4b:56:76:2b:2a:bb:24:30:1d:9a:df:de:
c2:9f:ad:52:57:63:3a:92:67:2a:13:31:87:65:f5:
c4:8d:ee:62:a7:e8:85:43:2f:39:8a:e8:a3:32:89:
0d:4f:79:bc:68:1c:60:6d:58:76:c3:40:ce:85:64:
da:fb:4f:7f:6c:f0:6c:77:15:55:26:a2:db:1d:18:
6a:9f:15:8b:d3:92:94:27:fc:86:41:75:9d:09:c0:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:46:37:EA:19:40:26:40:F5:23:66:9C:D7:7E:C9:45:61:75:08
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:e2:2e:36:a1:be:2f:14:e1:6c:09:32:47:66:b7:50:c3:
5e:95:9e:76:73:52:50:78:84:de:6c:54:84:5d:68:39:bd:9b:
c8:b6:ed:c3:ee:f6:b0:02:e8:7e:dd:0e:dd:e5:c8:1e:26:8f:
b0:a9:cc:ed:e6:46:43:5e:54:2f:68:8a:75:63:e9:8f:20:d5:
81:f2:c1:b0:4b:ac:9f:c1:29:bc:d2:08:52:bb:4b:b6:4e:56:
78:60:34:ca:48:b9:4b:5e:a7:b3:36:ae:cb:e1:c8:af:c0:48:
b6:f7:3e:7c:e1:3e:e4:eb:98:70:3b:61:61:6f:86:48:67:91:
30:ea:d7:91:06:86:51:52:a1:3a:c3:4f:72:94:e0:2c:9d:6c:
c4:4c:c4:08:ec:da:f5:75:98:18:d2:f3:58:21:78:82:de:95:
8b:a7:10:2b:6a:b8:26:f6:d4:f9:32:0d:9b:e3:24:b8:a8:1d:
07:6e:ab:1d:3b:aa:cc:44:9f:52:5c:70:e7:fa:15:b1:86:91:
3a:c3:67:db:e3:10:a8:87:0c:92:bb:16:e9:97:00:1e:ea:15:
af:0c:20:31:cd:30:48:20:12:df:c0:bb:12:c4:66:c5:a3:ca:
04:56:d4:dc:7d:e0:a5:3d:4d:82:ab:ae:b8:2f:95:a0:49:08:
f0:a5:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:26:06 2025 by rpki-client