Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: x/pZ2k4CCbbTIMxai8STq0ialEIEnJKB1Fx6th0XyDU=
Subject key identifier: E6:BE:44:60:B6:50:6D:F2:C4:C9:64:F9:6B:DB:CF:2B:09:EA:4C:18
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 0194BBCE871F0304016291916539CFB5430D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: NxdKtn25bGmZfijtqE4cMYJsQkwBaEF237q0N0406Xs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:87:1f:03:04:01:62:91:91:65:39:cf:b5:43:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=e6be4460b6506df2c4c964f96bdbcf2b09ea4c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:89:93:32:b6:af:96:f5:b9:b3:d5:bd:5c:
0a:5d:3d:df:ed:a9:f0:3e:c0:23:e4:c1:db:44:bc:
22:49:99:2e:5e:b6:c6:5a:2c:3e:b7:7e:64:0a:6f:
aa:d5:50:ce:f5:a1:9d:0b:9e:22:2d:50:bc:98:c4:
f0:f6:9b:18:51:5b:c5:9a:2a:37:52:74:6c:4e:73:
9c:ed:cf:44:8a:fb:c5:0e:e5:ef:8c:e9:33:3d:f8:
25:b5:1d:12:4e:9c:4c:12:4c:a3:d6:69:3a:7b:d6:
d0:c6:1d:0a:c6:e6:5b:1f:71:ff:a8:51:eb:b1:5d:
b5:a2:df:ed:46:ef:c7:06:0d:be:e8:5a:3c:1b:68:
67:68:d0:06:d2:78:65:cb:8c:7d:fe:82:38:ab:20:
51:b2:a3:aa:07:56:8a:2f:e0:45:f5:81:95:e7:fc:
97:75:01:f6:e9:ba:ba:9f:f6:48:27:72:5e:96:d6:
1f:dd:65:5a:17:0a:45:fc:c4:cf:a8:ea:42:18:ba:
8d:fb:0b:4d:cd:77:36:92:79:36:95:3d:26:a4:89:
81:6c:ac:59:6b:9b:64:6e:ae:4f:a3:ce:03:cc:57:
3b:6a:d1:00:f9:28:86:56:4f:71:f4:78:86:b4:24:
1a:03:ce:a0:ce:8c:56:5e:3c:ab:af:84:71:05:4e:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BE:44:60:B6:50:6D:F2:C4:C9:64:F9:6B:DB:CF:2B:09:EA:4C:18
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:66:57:36:ff:ef:35:05:95:54:94:e6:8c:9f:94:6a:4f:ec:
25:58:1a:1b:d2:ea:4d:2f:35:5e:26:c2:c5:d0:77:54:05:0e:
32:d1:a4:d9:58:5f:24:db:cc:16:5e:ad:09:97:fd:3a:a6:1d:
fc:b5:1d:7a:fa:19:22:af:c3:dc:e8:d3:11:1a:58:1a:a5:74:
c8:d5:1e:b1:0a:f7:84:c4:8b:a1:cc:49:48:07:ad:e0:c0:ca:
87:51:3a:6e:be:56:47:2a:6b:f5:fe:73:8b:fb:65:07:85:db:
0e:5f:27:dd:26:c8:d4:cb:46:10:39:30:5b:3f:67:17:1e:98:
11:24:88:a0:9d:25:90:aa:8d:c5:3e:61:37:cd:a8:5b:ac:5f:
b1:03:66:1e:1b:ae:73:e3:e8:17:d0:f3:85:c3:27:ce:86:46:
a4:39:37:3c:e4:12:f6:c5:44:39:b6:91:af:3a:36:f5:14:b8:
6a:c7:f4:dc:5d:81:5f:32:2a:30:78:30:a4:47:79:46:d0:14:
97:7e:dd:c3:89:0e:66:17:4d:e7:83:4a:3c:c4:58:20:9b:88:
c8:51:5f:7b:a6:2a:5f:3a:24:d3:96:ff:02:fc:cf:8a:6d:2b:
46:2b:5b:e2:6d:6e:29:12:3e:9f:01:0d:8c:63:c4:77:10:38:
71:7d:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client