Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: fL50OEplEbJHYZl0+thQ516IFyQjtd+JRZkmYhZyatU=
Subject key identifier: D3:D9:19:4E:94:96:E2:5F:8A:F6:D7:00:3A:77:CB:24:B8:55:56:92
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 0194BCA9D35026E06A6D510C3E176AEBFCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 102C
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: stFOBwDyuhkhHKR2k7LvX3uLv1EeuJnjK6Xq3tKRHSA=)
2: xbEhFMe96Lq98oM2kaTSxYoflQo.roa (hash: TG0r6adK5rxJjOXHHJZ61hb/iZXi4XWRAs1u1uQ8odg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d3:50:26:e0:6a:6d:51:0c:3e:17:6a:eb:fc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=d3d9194e9496e25f8af6d7003a77cb24b8555692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:dd:42:c3:33:7c:39:e2:57:a0:3d:83:40:
a8:44:99:e5:74:4f:bf:9a:54:60:47:14:08:c2:00:
71:05:66:10:7d:a6:d0:0f:3f:8c:4f:53:fe:e3:dc:
fd:9b:9b:fd:48:63:df:06:ba:af:00:46:76:52:28:
ef:b0:33:f1:00:c3:d0:aa:39:58:7a:1d:e0:fa:d0:
11:93:d0:75:67:5c:11:b2:93:de:48:80:c1:6c:b5:
71:c4:11:db:15:f6:7c:78:df:b0:45:17:d1:fe:e5:
4d:27:e5:ce:66:71:79:fc:7e:a5:e5:0b:0a:90:23:
a7:f5:b2:d0:d7:d7:99:2e:49:d2:6c:dd:c0:4d:64:
91:e2:78:ac:ce:d2:45:0d:16:d3:47:2e:5b:b3:79:
f0:dc:0f:dc:3d:95:03:0e:9e:71:ca:c1:44:ef:73:
a6:1c:7f:60:ea:a6:68:c9:9b:5f:7e:6b:19:b6:2a:
4d:7c:69:ce:26:24:b5:78:d1:53:55:89:50:ef:17:
bf:c9:3c:cd:46:f6:59:3f:c7:96:42:7a:a8:06:95:
02:27:ab:b8:88:20:48:e7:b8:54:15:14:62:48:29:
54:c8:1f:52:c5:27:41:8d:34:93:97:fc:2e:bc:26:
02:ba:9e:ae:f8:c1:77:de:6c:c3:ef:51:a3:cd:7f:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D9:19:4E:94:96:E2:5F:8A:F6:D7:00:3A:77:CB:24:B8:55:56:92
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fb:d4:bf:d5:08:36:ef:f4:47:2b:92:d8:06:26:92:8a:0f:
b6:69:71:74:39:c4:35:cf:aa:aa:e0:3e:23:ae:4a:5e:17:d3:
bb:ac:34:36:7d:31:dd:e1:4f:25:42:e3:03:cb:23:f0:e3:40:
81:6c:e3:72:0e:09:c4:0b:99:0f:a8:2e:89:e9:94:af:1b:65:
50:94:32:b5:f4:e8:86:42:88:87:e4:73:1f:02:8d:e3:ec:93:
64:88:82:b5:d8:89:6b:1b:c1:ef:15:dc:f2:7b:01:28:cf:91:
c6:08:6a:c4:0c:d0:97:8d:aa:e6:9c:b5:13:fe:83:df:d5:8a:
4f:c1:e7:99:ed:4e:91:3e:ba:55:d8:79:f1:15:c0:5f:e7:3f:
f0:ed:b5:5a:24:69:88:d7:90:45:ee:3c:57:58:cd:dd:b9:a6:
5b:28:f7:5c:b4:a3:19:d4:bb:79:5c:a1:0c:85:84:47:de:4a:
b0:b0:a3:47:1b:46:3b:68:2b:45:a8:54:22:74:3b:51:f5:f0:
72:0b:10:32:57:f5:9c:39:92:db:45:65:0f:5f:c0:55:54:93:
81:b1:13:7d:94:4c:70:dd:49:38:cb:28:9d:bd:38:3f:a9:af:
6e:a9:08:2d:a3:8d:0e:11:56:fc:0d:65:93:fd:2c:b3:68:e4:
30:26:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:26 2025 by rpki-client