Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: kvp9apkm2J12EPavtmdZB8Vjgso5uK9lzsWKjVIRgc8=
Subject key identifier: 3F:ED:0A:2A:11:D0:10:85:95:C3:F2:20:A8:20:9B:E0:9A:30:0C:04
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 0194BC3C505C496009B00504E53AB965161F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 66
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: IBXHm48FuMNh9kY2W5Yuvd+DrLWLW5F6RK/H4FzCU9U=)
2: cr95DzEVhWtLA_b8PXKOtJAUld0.roa (hash: hVWUfMq7GUDS1WFoj/BlW6uwrsRcoF2yZGnDVDwJpMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:5c:49:60:09:b0:05:04:e5:3a:b9:65:16:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=3fed0a2a11d0108595c3f220a8209be09a300c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:54:2e:4c:76:ec:98:a8:1e:dc:29:ae:d0:
c6:20:a8:5b:ca:a5:f0:93:59:40:48:5b:ac:cf:66:
1e:29:eb:10:99:9e:a1:2a:8a:68:7b:7c:05:f9:64:
1c:2b:28:ae:c4:77:cd:3d:ae:7e:69:9d:d3:e1:f3:
c9:ed:75:87:ce:94:18:ab:4b:f1:11:2f:d5:3a:3f:
c2:55:72:0c:2e:2b:b0:df:11:b0:e9:2c:71:78:10:
f4:6a:ea:ae:c5:d4:08:58:ad:0d:35:6e:f5:18:36:
cd:d5:9d:34:2f:cf:1a:d0:d6:51:3e:30:26:a2:27:
ee:df:08:c3:af:56:9a:ab:45:e0:a7:15:3c:15:a6:
d6:bb:cf:af:4a:e6:c2:b0:87:c0:1a:06:ff:c7:eb:
3a:4f:01:38:25:5f:e0:d3:53:bb:3b:47:89:6c:35:
33:57:f5:e5:4b:73:9a:6b:3f:5f:1a:45:7a:08:47:
58:dc:57:98:da:da:51:f0:8b:ad:f8:9e:0e:4b:fa:
9c:19:97:c7:25:1a:5f:ed:bf:ab:55:e9:fd:09:b7:
69:f4:f2:a8:91:6e:78:78:ad:ed:f1:c0:38:fd:12:
61:62:5d:51:bf:ea:52:e6:db:97:a9:15:3e:bc:d4:
fa:a4:ca:d9:15:c2:04:b3:d4:86:32:84:f0:d2:b2:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:0A:2A:11:D0:10:85:95:C3:F2:20:A8:20:9B:E0:9A:30:0C:04
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:66:60:e2:39:25:bd:29:6d:6a:1b:79:5f:97:75:24:f4:7b:
02:d5:61:42:81:8f:ec:fe:35:17:a3:0b:1c:4c:59:8b:57:d1:
da:1c:32:d5:84:eb:7b:f6:ce:51:4a:94:3f:81:9f:1c:6d:25:
c2:21:83:0d:60:d9:43:c4:b5:77:6f:7b:27:10:c8:7f:33:8b:
1c:b5:67:7f:3a:9a:e7:ff:9d:12:f9:04:b0:d6:1f:07:8b:0e:
bd:9e:8e:7c:e1:ee:ce:82:d9:e3:de:72:d7:b1:6d:c1:4c:d8:
38:17:28:29:6e:17:67:87:fa:dc:1a:15:fa:bc:71:7e:4b:f9:
c2:3c:06:07:eb:24:0e:5c:02:c5:b6:3b:38:1d:9a:1e:bb:d6:
20:96:db:33:6d:20:01:e6:d0:a9:d6:2c:66:56:7c:c7:ec:1f:
13:bd:45:8a:06:71:2f:b4:51:89:b9:ce:d7:f1:a6:bd:c9:79:
dd:ca:16:84:00:3c:4c:55:db:88:57:6d:c8:cc:af:12:f7:77:
b8:88:18:be:00:e3:7f:ae:fb:59:b3:be:21:24:6e:57:6a:ac:
7b:dc:c7:11:f5:75:92:aa:31:88:d6:f2:45:96:93:65:8c:59:
84:a9:29:78:7e:f9:96:37:d4:54:3b:cc:bf:94:c8:a6:15:7f:
90:22:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:00 2025 by rpki-client