Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: TqqtzgaNBcICmyClcAhgwrGXvSyPoVaz6ML/IyhlsvA=
Subject key identifier: 60:3A:A3:9F:22:1B:F2:83:85:3E:2D:3B:A8:0E:61:35:54:3A:76:77
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 0194BD17971E952F33226B74585E7B7CE7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 09A0
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: WytV88XQCukVMxiJvjHeHeJg1lVjOlQOSTNUAL1SCQw=)
2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:97:1e:95:2f:33:22:6b:74:58:5e:7b:7c:e7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=603aa39f221bf283853e2d3ba80e6135543a7677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:0b:99:cb:4b:e7:b3:a5:0f:fc:be:07:e0:
d7:9b:b4:d1:b5:2d:5e:30:b3:47:44:15:70:c3:50:
a2:58:b9:59:51:f3:e2:ec:0c:fb:b0:4f:41:17:84:
40:1f:a3:46:00:6c:4e:23:5c:17:62:c4:09:c8:df:
a4:61:b8:79:42:ba:9c:09:75:ef:a0:5a:a9:25:ba:
7e:f2:b8:64:e3:e8:5f:c1:0c:c1:23:6f:c3:e7:e5:
62:b9:e5:4e:9a:f8:27:68:c3:07:64:d9:5f:c3:d4:
37:f4:d6:df:d6:7c:87:55:10:62:2d:8e:2a:f7:94:
78:e4:4b:76:58:88:b7:c1:96:0b:ae:a5:49:65:ed:
98:28:6e:4f:70:0a:de:ef:1c:37:9d:ab:80:99:71:
72:aa:ec:f7:6c:8c:49:53:a9:7f:31:10:67:dc:d6:
b5:0d:83:3f:98:80:92:57:6f:d4:5a:c5:ab:7f:b8:
b8:96:93:c4:7b:99:aa:db:3d:a9:2f:16:74:11:6d:
a5:b8:ef:1e:90:0f:a4:a6:01:0a:23:38:7d:fc:ee:
df:b1:93:4c:ac:2b:78:cc:1a:77:15:b9:cc:43:a4:
2e:e1:9f:bc:0b:e0:a9:57:93:40:60:2c:59:18:aa:
b5:47:13:c4:6d:be:b7:b4:ee:58:cd:04:76:32:58:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:A3:9F:22:1B:F2:83:85:3E:2D:3B:A8:0E:61:35:54:3A:76:77
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:62:2d:95:66:ca:3f:d5:0d:29:b8:24:4d:fc:eb:01:8e:c8:
76:15:f8:20:50:1a:9e:f0:75:7c:3b:f8:7c:ab:8f:b4:91:06:
aa:f9:be:2b:06:de:d0:7c:21:c9:7f:ce:49:0f:3c:e4:89:dd:
4c:c1:bc:13:4b:1c:31:b0:16:c2:90:4d:ce:92:6e:ce:6c:f7:
d0:82:6d:42:5d:4e:fe:bf:87:98:7c:fd:5d:95:7b:54:83:41:
49:31:3e:c6:50:df:ae:14:62:ec:8d:d7:5f:65:b0:4b:b2:01:
26:da:cb:f0:db:53:b1:5c:33:56:d2:a0:5f:47:8a:9e:be:e6:
3a:6e:af:f0:e5:85:b6:33:85:58:db:21:c0:d1:de:e6:6d:fe:
e6:0a:c6:67:ea:ad:30:9e:0d:09:e2:77:64:55:55:83:38:6d:
24:df:34:38:c4:c9:33:2c:43:55:12:9a:3f:da:4e:f4:35:eb:
e9:73:94:c1:0c:bd:78:54:66:15:48:14:29:1a:04:b0:f9:db:
1f:0d:f2:8d:61:44:90:1c:76:e3:48:81:0f:6f:1e:85:b7:65:
09:f4:58:ac:17:94:99:2a:04:f9:62:3a:09:28:d5:0e:96:6e:
16:d0:e6:df:4f:f9:6b:cd:bc:5e:da:b7:00:ca:97:5c:7b:b1:
9c:ec:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:35 2025 by rpki-client