Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 7sr2kNAo/gSTAZSb3rfGurYDJcNmMKJ7GvoMtpIp8YY=
Subject key identifier: 0A:C8:FE:0F:80:26:65:B3:BB:BD:E9:C9:3B:02:4D:11:EB:BA:FB:5A
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 0194BBCE12AB768BD33CA9902CADA9F851C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1369
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: 1Majt+NrxAErjNIf8UxeUaa7RIWb344RduwYqVxaB88=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:12:ab:76:8b:d3:3c:a9:90:2c:ad:a9:f8:51:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=0ac8fe0f802665b3bbbde9c93b024d11ebbafb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:48:8c:94:4b:ee:8d:ce:cc:be:1e:a6:ff:
86:8e:89:16:7d:0a:b6:8d:91:a4:fd:cb:4b:e5:5e:
56:97:ca:ef:d4:b4:55:5b:36:9c:03:ea:d9:a3:a3:
12:20:a7:85:0c:16:7c:ae:a7:53:05:06:88:06:d1:
9b:34:34:01:6d:da:0a:9e:17:4a:95:b5:75:51:03:
92:ca:06:9d:66:ba:df:3b:ee:8c:24:e2:c8:c5:a0:
e9:3d:5c:e8:39:92:82:87:c2:6a:85:29:e9:45:42:
a7:75:1f:42:9d:8a:3b:d4:fc:22:c3:a7:16:03:1d:
8a:51:d8:a8:13:5a:6c:26:f3:c3:cf:47:02:10:9d:
e8:88:f1:41:63:2c:29:9c:fa:99:88:53:e5:b6:31:
56:77:e4:8e:57:b3:77:f6:e7:90:8d:f7:33:83:a1:
ba:ed:1a:a2:5c:7e:af:aa:64:74:8c:42:14:d2:02:
74:cf:da:9a:b5:3e:a8:f3:dc:3b:24:5b:9b:9d:db:
88:bc:39:4f:5f:40:d1:dd:d5:08:37:40:8b:77:31:
a8:10:d3:8f:b3:57:54:f3:17:ab:5d:90:ca:dd:01:
8c:16:81:80:fc:c4:2d:c8:ec:ac:4a:ce:9d:9b:85:
de:8e:37:21:dd:db:cc:f9:c2:da:d5:36:65:70:16:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:FE:0F:80:26:65:B3:BB:BD:E9:C9:3B:02:4D:11:EB:BA:FB:5A
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2c:2a:dc:ff:fb:ad:0c:c3:61:c7:30:d5:40:9d:6f:84:c7:
a5:c1:c6:d9:6e:de:6e:b2:f8:75:69:fc:62:c9:5a:ac:37:e4:
f9:c0:de:bb:06:ac:5d:c4:c2:86:35:76:d3:fb:1b:e9:e1:7d:
22:7f:c1:31:e6:d0:0f:f5:e0:75:fb:cb:bc:10:84:3c:14:48:
cd:3e:d9:1c:10:39:96:c0:b9:15:c7:96:13:28:fb:cd:c4:19:
a8:d2:88:eb:b6:09:c5:7c:70:57:10:98:f3:ca:14:16:a1:9e:
99:24:61:68:9e:02:c3:bc:ce:3d:82:05:52:a1:72:8c:7a:29:
3d:c8:49:92:d3:aa:06:8d:8d:40:05:69:2a:a6:fc:2f:7a:49:
74:99:ef:69:14:21:6b:ce:fc:95:92:1a:c3:29:32:00:6a:6f:
a0:6b:c9:c5:40:4e:db:bc:8e:14:08:ad:92:c8:54:4b:e2:0b:
99:51:29:93:cd:54:17:7e:38:b9:59:63:92:6e:6d:ee:f2:0d:
a2:9e:bd:3e:8c:b7:ef:c2:32:62:11:02:a8:cc:f3:96:bd:d0:
89:dc:e4:79:8d:0a:64:80:c6:b3:8e:d6:4f:2e:54:76:e0:b9:
d6:e6:58:a9:04:91:58:1d:d6:f0:3b:1b:f7:13:fa:f4:19:92:
26:5f:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:42 2025 by rpki-client