Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: axeQPiFbl5uOoc/uF5OdzAx5ipFiqmJ/i5NyY5V77pg=
Subject key identifier: 5E:09:2F:68:79:3E:C5:EC:F9:58:C0:E9:16:C9:A1:F8:4E:01:65:1C
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 0194BC728ACB8139C6A1BE5DF16D9574DAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: yKMWbpVd9Al0Bnj+z1SI1jx2Zon7Ij6jRvTm1GT4MyA=)
2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8a:cb:81:39:c6:a1:be:5d:f1:6d:95:74:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=5e092f68793ec5ecf958c0e916c9a1f84e01651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:48:29:56:1b:55:3a:f5:3c:24:7f:ef:c3:
88:a4:22:d6:f5:40:5a:78:f8:29:46:6f:49:90:80:
2c:3c:23:e0:0a:68:82:32:2f:7d:3d:c9:7e:04:8b:
4b:44:f7:68:43:3d:45:87:38:84:04:4b:db:c2:77:
ba:c3:4c:f2:2a:40:25:da:c9:32:e5:81:ec:1e:06:
08:43:02:a6:6c:c0:06:67:ee:f9:bb:9a:e0:42:79:
6e:3c:8d:d4:b1:f7:82:09:2b:a4:1b:b9:84:6e:7b:
d8:b0:0a:4c:23:b3:01:24:14:b3:40:ca:03:95:23:
d7:40:13:45:83:51:23:45:ab:e3:76:b4:4a:12:37:
c2:88:79:53:f8:e3:1a:ae:fc:a6:93:f6:1d:0f:77:
6a:b1:fd:13:33:ee:af:4b:71:af:c8:4a:e9:e8:c6:
b8:5c:b5:ff:ac:14:86:d5:8f:55:00:6b:2e:0b:46:
f7:97:22:5f:39:8d:30:d2:df:10:27:a5:89:83:fb:
5f:05:05:c8:0c:a7:d3:37:0d:4b:7e:c1:ee:7d:4f:
07:17:70:80:42:e8:54:3f:c0:15:52:ab:02:32:64:
5f:a3:a1:9a:1f:a8:67:f1:d5:1f:0b:72:94:ea:6f:
e4:38:b2:6d:b7:85:ea:24:0f:6a:8a:79:56:fb:94:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:09:2F:68:79:3E:C5:EC:F9:58:C0:E9:16:C9:A1:F8:4E:01:65:1C
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f2:dd:c6:41:71:55:3b:5d:a5:41:7b:5e:3c:b4:19:8f:db:
bd:e4:72:00:00:39:78:f0:1b:93:57:24:d4:3a:83:f7:42:af:
f2:da:ea:fe:ca:0a:ad:1f:eb:09:d6:8b:4c:04:4a:f8:6f:9e:
4b:6d:a8:59:86:55:87:76:d9:27:17:bf:5e:5f:ab:73:35:cd:
dd:6e:10:8a:85:f8:19:89:71:e5:ca:45:c1:de:02:48:41:14:
83:b8:7a:3f:10:21:40:04:5f:14:0d:1b:9f:89:de:b7:36:4a:
d8:a2:7b:24:7b:a1:f9:4a:25:44:65:5b:f2:00:5d:b8:cc:35:
e2:dc:ad:ac:f1:89:89:92:38:3f:3b:d9:9c:7b:3a:ce:7e:07:
58:00:3d:17:bf:a7:c2:49:6f:ba:e8:eb:62:54:7a:de:75:2d:
6d:cf:ff:cd:2c:b0:96:91:12:0d:3c:b6:71:94:54:46:a4:5e:
b0:24:1a:af:e8:3f:a9:b7:ca:07:76:0e:da:4a:16:aa:6b:10:
c5:bc:99:37:12:c3:e5:56:aa:07:6f:01:94:6c:0a:de:04:ab:
5a:22:95:ad:84:81:cb:8a:f9:02:ca:06:f9:ba:4c:c0:5f:69:
2c:79:84:92:30:b2:8c:b4:16:40:a9:18:4a:3a:ca:ed:1a:71:
ff:08:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:45 2025 by rpki-client