Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: mGYr9AkCh1DbCx0tkvDiDxLIHIADbZfCs310gwFapVY=
Subject key identifier: 13:4D:01:71:B5:ED:62:61:78:13:C8:D7:89:29:C4:C5:20:DA:58:E7
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 0194BD854283D823C189C321466C5FBF4F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 0E9A
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: tslXTsmKzhYEO9zP1UjQEPhilBMmOcAai4dJzBHRGfs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:83:d8:23:c1:89:c3:21:46:6c:5f:bf:4f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=134d0171b5ed62617813c8d78929c4c520da58e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:08:92:45:ec:34:30:17:c4:46:d1:b0:35:
33:16:37:6f:bb:6e:20:dd:c6:fe:bd:3d:f3:96:62:
01:d2:36:a8:a7:dc:c8:ee:a9:f5:ab:ef:c6:69:76:
bc:4d:23:04:cd:71:d9:17:9c:1d:1a:94:b2:46:75:
42:ca:72:da:75:52:85:8d:a0:15:15:ec:dd:c8:7c:
b4:60:98:27:9a:0e:69:ac:5f:4d:b1:53:98:ef:c0:
8f:ee:43:37:43:f6:31:d4:5f:7e:d4:19:35:d6:60:
fa:87:04:9c:db:d8:19:06:e0:cd:58:39:e4:52:f4:
e4:f0:8b:67:34:bb:da:ef:c9:a2:e8:23:f5:70:87:
81:42:16:5d:e3:d0:91:fa:28:dc:65:c2:d2:59:43:
26:60:17:2a:25:bb:70:80:3c:e0:21:62:3a:5c:7d:
75:4a:f6:ed:11:55:f2:60:86:76:17:83:6d:94:5f:
62:1d:19:4a:59:ad:12:4c:3b:43:ba:9a:c4:75:41:
e4:78:61:81:66:6d:87:61:06:31:f9:c5:27:68:a8:
51:ed:98:56:58:ee:54:30:25:71:53:7e:ff:73:3a:
e4:a3:d1:28:11:38:7a:27:7f:b8:27:a9:f9:f1:de:
ed:43:51:cd:fe:48:ce:df:ce:85:e7:00:5c:e8:7a:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4D:01:71:B5:ED:62:61:78:13:C8:D7:89:29:C4:C5:20:DA:58:E7
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:c3:41:30:c7:9d:4d:54:6e:c2:f4:e5:fe:59:c2:9f:8a:
90:08:9a:88:b0:8d:af:c2:e9:8b:c5:4b:c9:e8:19:f0:f4:91:
87:a5:87:fc:cf:11:bc:15:04:74:13:dd:67:f6:ba:08:46:61:
6b:9e:ef:f9:16:45:3f:a3:d5:08:1e:5b:68:b5:08:cf:66:ae:
ad:73:1e:6c:1c:9e:f9:bf:63:b6:08:d0:7e:da:ad:59:83:6d:
90:d3:db:00:51:7e:23:d8:00:9f:99:97:a4:45:8d:98:0f:94:
81:b7:ca:b8:6a:cb:e1:9c:12:48:38:1d:18:e0:43:5c:f2:26:
96:a1:2c:e1:04:ca:4d:c9:f9:d1:4b:26:5a:7c:b1:bc:7a:55:
1e:fe:fb:b5:42:d3:3f:8b:fb:05:03:34:89:14:68:59:6c:ce:
8c:39:60:bf:b5:89:4d:4e:d1:27:e0:6b:98:de:ed:50:e1:8f:
d8:86:30:18:5e:6b:d6:37:2e:15:23:fc:de:09:3e:48:f2:39:
8f:e6:6d:22:b1:68:c0:ba:52:75:23:90:81:05:8b:de:26:a0:
ae:64:da:f8:58:b4:6f:c3:5d:d1:1d:c1:a9:45:40:81:d1:bd:
67:45:e2:a0:49:d8:4d:bf:23:06:d6:9d:bf:65:a8:97:7c:3c:
3a:fe:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:30 2025 by rpki-client