Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: s7KpRhl5pSltYroN6BAhHDlmIUPcomaspe4tFKP2+w0=
Subject key identifier: BB:1F:56:62:E4:7E:06:5B:9D:5A:91:55:9C:E9:6F:79:A4:6B:3C:F2
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 0194BC3C8A1B01AC5736D27B81A8DF66B2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: hD5BGEg5lgX2n3OzkgaO0Ia53+wPlqPmk5vNB3TVj/A=)
2: rYKTx0nL3KpouO_aEG54Y81fax4.roa (hash: U8k6Z6wFvQxh2jmlJpmKkiKIDJ2daF7abfgpCSFD+Kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:1b:01:ac:57:36:d2:7b:81:a8:df:66:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=bb1f5662e47e065b9d5a91559ce96f79a46b3cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:72:34:90:c0:58:3c:7b:a7:a9:d3:c9:18:
2d:64:e8:85:6e:85:87:8a:fe:3b:59:5b:d8:a1:88:
7c:47:29:85:c3:7f:8f:31:05:66:e3:f0:86:22:38:
e3:ec:00:6e:8f:32:fc:34:a8:75:5a:1e:02:23:38:
54:88:0f:ed:59:15:3b:11:ec:e0:f8:70:5c:c5:81:
e7:fa:10:43:48:8d:5c:f1:01:18:b1:37:18:20:5c:
0c:d5:97:fb:2f:ec:1a:75:31:05:6e:de:3c:b5:09:
c8:23:17:17:bc:9e:86:c5:d9:97:98:ed:7d:28:9a:
d7:79:d1:18:11:52:8c:23:6c:88:c6:0d:0f:a0:8d:
1b:0c:fe:d6:ba:9e:ed:5c:41:ea:53:a6:99:8b:1a:
c5:cf:35:dd:ef:1e:54:c8:6b:dd:e7:a3:ed:32:3e:
31:05:98:12:27:8b:7d:4e:5e:e6:b3:f0:c5:de:32:
89:30:c7:bd:6d:e4:4e:e5:e2:17:1a:52:7b:88:9d:
4d:77:42:50:9d:a7:c6:87:f2:d1:5d:1b:65:b5:82:
c7:e8:a6:92:61:47:cf:f8:57:b7:13:80:56:41:be:
a3:92:2f:80:48:e9:d0:bc:ef:88:83:b3:1d:9c:2c:
42:f1:b0:dd:fe:6a:a3:80:5d:1b:79:5c:07:53:d5:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1F:56:62:E4:7E:06:5B:9D:5A:91:55:9C:E9:6F:79:A4:6B:3C:F2
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e1:17:f6:bb:5f:51:7b:70:36:73:93:de:51:75:ee:8d:62:
8c:8d:13:7b:62:10:db:0d:38:c0:7d:ef:65:3c:ac:59:8a:fd:
0b:66:bd:9f:a1:73:14:82:d0:05:84:ba:65:9b:dd:db:14:57:
0a:cf:40:41:e4:31:32:50:65:8b:fa:e6:01:03:1a:cc:bd:f4:
c2:2e:2a:b3:80:af:2b:76:c9:f1:4b:6a:dd:64:27:5e:c4:fb:
7b:f9:01:d6:57:3a:e0:5f:0e:b9:df:d7:94:67:54:60:92:37:
bb:29:22:7c:85:18:de:e5:a9:3f:dc:39:47:78:3e:ec:2a:48:
fc:b1:23:05:93:99:1e:57:d9:7d:61:62:c5:73:8f:08:51:32:
15:b8:a4:7c:76:bb:79:ec:7f:4e:30:93:c4:a9:6d:52:af:c0:
18:7b:7c:bd:3a:8e:1b:41:e3:df:ba:a5:f8:b8:33:13:e2:bd:
94:5d:05:f9:aa:b2:c4:b7:54:27:49:b6:9b:69:a2:6c:02:6b:
14:85:3e:5c:19:f8:b5:a9:7d:58:93:c6:78:74:99:b5:f9:2c:
79:b8:35:69:66:30:66:4d:ca:88:49:ee:69:74:d1:c3:2a:98:
2a:82:55:ea:21:00:e0:93:01:8a:54:be:a4:ed:2e:03:2e:63:
e8:f2:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:52 2025 by rpki-client