Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: 2hNFepUjeHIF+abFElOTqSUWNfFlszZeYxmvbs/yTiI=
Subject key identifier: 07:7A:E3:7D:61:A0:F4:6D:B6:70:80:DD:CB:4A:40:BF:67:E9:2F:BA
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 0194BCA9B0767175C88B30B18F9D39BB2194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 1164
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: 40Ea5z+0eIf0jPkhdDXe8OPvY22Pet1XQ+5a5BaXNEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b0:76:71:75:c8:8b:30:b1:8f:9d:39:bb:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=077ae37d61a0f46db67080ddcb4a40bf67e92fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:40:04:86:2b:f2:a8:e5:c8:f5:7f:9d:f3:
d0:da:d2:b4:7b:03:1f:01:85:2a:d8:e8:7b:64:a9:
34:eb:dc:91:a9:f0:bb:0f:d5:91:f5:20:5f:47:3e:
43:42:82:b3:ff:cc:1b:c9:a8:52:76:5c:d5:b7:6b:
ba:e4:77:06:ca:8f:56:a6:e3:da:6a:48:c3:99:ac:
98:6d:5b:9f:be:cb:9b:fe:01:ec:3f:ab:e8:ce:c9:
85:f4:22:cd:ad:77:b8:2c:f9:1a:72:8c:2f:8e:1f:
3a:91:43:73:ac:80:df:c8:c9:e2:60:0c:5e:d3:33:
03:a9:cc:7b:dc:e2:56:b1:c0:fe:01:60:db:e3:77:
36:a4:76:39:43:94:c9:38:19:93:7c:e7:1f:be:6e:
c7:b4:fb:e6:2d:22:ac:fc:45:c4:b4:d2:14:34:f0:
4e:6e:5c:14:59:11:ab:5a:a6:24:f9:35:c4:b8:d8:
28:55:ad:e9:e1:b4:55:ed:d0:0d:46:d7:1c:c5:e2:
43:cf:42:6c:86:59:ab:1f:28:d5:96:ed:6d:05:a8:
47:86:cc:e5:a3:28:8e:47:ca:b1:27:c6:30:28:e5:
4c:f5:00:a2:5b:16:23:5e:5e:59:ba:5f:e2:b3:92:
3e:d3:42:c7:9a:0c:14:7c:c4:c6:6b:c2:2f:97:bb:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:E3:7D:61:A0:F4:6D:B6:70:80:DD:CB:4A:40:BF:67:E9:2F:BA
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:09:a1:d7:36:2c:54:75:ee:12:a7:19:a3:5a:0d:bc:73:15:
56:52:83:22:23:7e:fb:d0:08:bf:49:45:94:2d:3c:fa:6e:8a:
87:c5:4b:76:54:14:8c:8e:97:fe:96:aa:b9:48:f1:1a:8d:8d:
0f:20:b8:3e:30:fd:ad:12:fd:48:49:f6:25:95:3a:ad:f8:76:
30:27:9b:31:2a:f0:54:0d:71:d5:44:0e:b3:99:42:3c:a5:03:
96:ec:da:07:b4:85:3d:24:27:ee:d7:b7:e5:10:1f:dc:6a:57:
02:0c:fc:c1:0e:3f:da:32:ec:73:ab:4b:6f:6a:c6:f0:ba:f1:
4d:12:34:e1:10:b8:ba:a4:ba:45:a9:f0:1b:80:32:94:8c:c5:
ad:d6:f6:59:18:07:3e:d9:ec:a5:58:03:76:ab:42:c7:ce:e4:
47:56:8b:45:ae:79:7d:51:17:bb:33:db:7f:e2:fa:5f:fe:2f:
ee:49:4b:a1:b0:85:9e:9a:57:d8:44:0a:e4:26:d4:0b:78:ab:
5e:65:e4:0c:5f:3a:5a:85:69:ca:ba:ed:ec:5b:95:bd:eb:d0:
86:85:03:9e:f3:54:28:53:3f:a1:53:a8:f0:b6:e4:cb:d4:94:
ef:f8:e3:3b:bf:8f:09:82:36:25:35:79:ab:b2:b3:08:6d:cd:
93:93:d1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client