Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: FhTNMgio/L189OjZL21vcarmxTvDFD7ei4p/jVUu9Ko=
Subject key identifier: 8E:18:BE:4B:9E:37:30:85:19:CD:EB:76:25:A5:41:C4:DB:57:DD:53
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 0194BC0510B06ED8F8E9059E008775FC20DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: w3jXTayVHKEERc5MFcfdBbzik24BQGGGPe2VsxeVc64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:10:b0:6e:d8:f8:e9:05:9e:00:87:75:fc:20:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=8e18be4b9e37308519cdeb7625a541c4db57dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9e:bb:3c:2a:16:db:c6:6a:23:b0:1d:85:d7:
1e:a5:06:12:82:e5:40:3b:1e:9d:e4:e8:78:98:ca:
2c:5e:fb:0c:5a:17:19:8a:de:e8:60:e5:cf:32:9f:
e0:0a:d8:20:85:a3:db:ea:ea:fe:58:56:41:73:33:
27:7e:2a:38:dc:48:1e:4d:7d:a0:d3:29:9c:b0:18:
3a:45:23:32:5b:fc:63:99:02:0a:c7:77:af:95:60:
ec:bb:e7:7b:24:48:a4:d6:b7:01:e2:49:38:39:7c:
59:54:78:90:41:4f:69:4a:30:b8:17:9d:da:e5:21:
4d:c0:77:c5:6a:3b:54:a2:c8:8c:bc:ae:29:8b:f9:
d9:7c:4b:fd:e8:db:f8:26:69:b6:43:0a:df:1f:e6:
e2:96:77:d8:fc:0c:de:2a:1b:10:91:6f:6f:93:40:
89:40:2e:aa:b3:f4:8c:73:50:39:6f:dd:7d:44:1a:
4c:37:b0:6b:52:dc:b9:a8:ee:09:0d:b1:ba:8f:ee:
6e:85:25:68:c1:54:46:14:4f:7f:a6:4d:9c:01:2f:
44:8a:e6:bf:30:3c:a7:4c:ac:08:d6:92:c2:6d:6d:
6e:1c:5c:9b:cc:f0:60:db:cb:a2:5a:81:c9:26:91:
bc:c1:b0:7c:1a:a9:cd:5c:7d:6d:9e:58:d0:01:ef:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:BE:4B:9E:37:30:85:19:CD:EB:76:25:A5:41:C4:DB:57:DD:53
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:c7:1b:e3:ec:82:0c:72:1c:2e:39:b9:de:dc:fd:e2:d8:
74:92:09:75:2a:91:2b:49:af:97:9e:44:1b:71:fe:d3:f4:5f:
1e:b6:bf:e8:52:e9:8c:c7:ee:81:00:93:3a:82:51:0a:de:94:
ed:2a:e7:42:e9:53:87:df:70:0e:72:47:cc:1a:e0:74:3b:0f:
89:b0:fc:f9:19:3c:85:23:f1:c3:35:de:d0:be:97:dd:e6:6f:
0d:eb:2d:11:e2:35:a8:61:88:31:57:2f:93:cb:88:16:db:cc:
44:f8:8e:65:ae:12:85:b2:28:c7:ba:1c:b8:35:45:d0:c4:fb:
18:e4:6f:71:34:8f:4a:16:c2:d6:40:8d:e6:61:ea:da:df:2c:
e1:d7:2e:c9:ff:30:80:f5:1f:0e:f3:55:50:a2:0d:0c:a2:89:
c8:92:6d:a0:df:3e:b8:02:29:97:80:79:e0:c2:4d:e1:00:5a:
bd:c6:29:71:55:40:ea:83:f3:8f:7f:3f:89:0a:c5:5a:10:b1:
40:ab:c8:6a:24:8e:2f:ae:77:a5:a4:2f:e2:60:5f:21:50:f7:
43:93:43:8c:f9:48:70:26:89:85:ff:55:2c:ff:67:a7:bc:2f:
99:db:54:c7:e6:be:25:94:16:9e:04:0b:86:7d:89:52:a7:57:
84:de:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:05:00 2025 by rpki-client