Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: uB/w3l21s7dYZOR6BEAbncXQEmKPS0uUmx3acuhMxCY=
Subject key identifier: 56:C6:46:35:6B:61:DF:40:69:95:FF:37:70:93:E9:9E:C5:9E:89:48
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 0194BD17CDF178E390098DB37F86963FFB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: 3eIiTplZacXG8ItnTzkM1GHsTfBRzYS2DEYV3QatfUs=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cd:f1:78:e3:90:09:8d:b3:7f:86:96:3f:fb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=56c646356b61df406995ff377093e99ec59e8948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:3c:fd:bc:10:ad:a0:9a:bf:c5:71:28:92:
cb:b0:93:d8:6d:72:8a:91:c8:3b:d5:38:d7:a2:54:
75:1d:58:91:5b:38:29:f5:46:8c:41:55:12:42:43:
ac:04:d2:bb:68:5f:2d:7a:54:ec:9e:20:06:a5:cc:
62:0e:3e:9b:22:21:e9:75:82:41:05:b8:49:46:9e:
76:31:1b:93:f2:ae:29:a2:82:24:1f:ba:b6:36:9e:
37:10:53:2b:db:af:9b:81:24:21:e4:d9:33:88:a7:
66:fc:1c:49:39:4c:95:a8:b9:e5:30:cb:c4:f4:1b:
16:d0:20:eb:be:af:33:41:f5:d7:73:cb:4a:a3:28:
c3:b4:8b:7c:28:27:40:92:6e:c0:5a:37:c1:54:b2:
47:7a:5a:39:c7:46:c9:7f:48:7d:da:41:f6:cf:54:
27:9a:70:29:c3:ea:90:b4:5b:2e:ee:e3:5e:dc:f3:
c7:30:1f:56:c2:e7:42:0c:ac:a2:fc:73:de:84:cd:
2e:c6:4c:94:1b:e0:05:f9:7a:af:21:9a:4d:21:0b:
a1:eb:72:51:9e:58:86:10:1e:30:c7:8d:1b:ce:8a:
3b:f6:80:72:b0:3c:0f:0f:07:fe:05:cd:d7:4e:65:
8a:25:d5:a3:be:54:5b:50:f6:78:63:d9:00:ea:0e:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C6:46:35:6B:61:DF:40:69:95:FF:37:70:93:E9:9E:C5:9E:89:48
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:ba:14:fd:b9:b6:54:74:22:24:37:6b:f4:50:30:be:32:
26:7e:b8:58:2f:40:67:77:89:1d:54:2f:91:f8:5c:8c:ba:bc:
1c:9e:1f:33:6d:4d:d7:6c:d0:98:a6:94:a2:3e:ef:22:be:e9:
06:c4:fe:b9:fa:42:58:d0:88:8e:a5:09:38:18:38:a4:bd:5a:
be:0c:ca:4f:3b:0e:be:cc:15:30:8c:f1:17:c0:fc:fd:46:a2:
db:b0:e0:72:10:b3:b7:75:f1:2f:71:b0:4f:e7:be:a3:b8:ff:
4d:fc:b6:52:56:a3:5a:b3:d6:97:9c:39:d1:c0:12:ae:5c:8b:
4e:ce:07:1f:88:a4:1b:25:45:f7:ec:dc:2a:97:37:71:03:a4:
10:f0:58:4b:4d:a7:21:e5:50:66:e2:32:3d:35:eb:50:ca:7a:
21:42:f8:16:2e:f8:e2:c8:f4:6e:60:1f:f2:82:46:89:9a:f1:
a2:e9:21:9e:bb:43:44:cf:81:dd:90:59:83:4f:b0:4f:52:e7:
52:1d:f2:22:c9:13:24:f5:e1:e7:85:d2:ce:3f:84:88:e1:ee:
e2:f3:1a:53:95:8f:13:d6:35:d0:4a:af:bb:ed:74:1e:74:73:
9f:c5:45:00:28:14:be:b8:c0:e6:8b:fc:45:d0:54:b3:ce:86:
e5:35:cb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:38 2025 by rpki-client