Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
File: ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json)
Hash identifier: jNpzuofEFxmjYI4H79b2IhwAYFPar00+7z6OcuHpLlo=
Subject key identifier: 0C:BE:15:16:6B:7C:89:18:D1:CD:2D:D6:E8:9F:EF:DF:38:0C:67:7B
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial: 0194BCE0985D82012DF9D09C911BAB7571C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=)
2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: qtfFCtgpqQiaAR1SjDh/nrq50hBF31OBTkulCnQLq80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:5d:82:01:2d:f9:d0:9c:91:1b:ab:75:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=0cbe15166b7c8918d1cd2dd6e89fefdf380c677b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:89:01:96:29:51:8f:5f:41:0f:58:8f:a0:
b7:46:d2:14:b3:c7:05:5e:94:99:a7:52:9f:a5:d0:
20:d5:2d:68:7a:0c:d8:d6:46:d2:d0:78:85:e1:8a:
bb:25:c1:86:00:dc:bf:11:24:6c:3c:f7:65:54:fe:
e6:18:53:7e:d1:6b:cb:b5:4f:d0:a5:df:35:71:ac:
3d:d7:4d:80:2d:b7:d3:e6:1d:85:0f:d9:cc:15:51:
12:20:42:ea:ff:77:33:41:bc:4a:10:1f:26:53:32:
f4:05:60:99:be:66:8f:6c:64:b8:60:b0:2e:af:a7:
f7:0f:e9:c7:ff:16:85:c9:1f:fc:aa:c3:f7:32:f2:
41:e5:21:89:73:49:7c:d4:f0:26:6c:bc:ca:dc:2b:
5a:31:2e:a2:7b:c4:35:f8:52:ab:3f:0c:c2:5a:e6:
63:fe:03:f0:4f:5f:85:79:ce:b8:d9:67:57:b9:8a:
5d:dd:bf:eb:a0:1a:7f:a8:5e:9f:0f:6d:02:de:65:
52:99:77:d1:b4:4a:dd:b2:88:2e:e5:f1:b4:99:6d:
b8:38:5d:f2:de:52:1b:de:17:43:91:67:14:af:66:
6d:a1:b8:33:16:65:da:70:6f:c1:e3:8b:ec:1d:9a:
aa:a2:11:5b:a1:31:5a:64:d6:7e:ab:b8:be:ac:ad:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:15:16:6B:7C:89:18:D1:CD:2D:D6:E8:9F:EF:DF:38:0C:67:7B
X509v3 Authority Key Identifier:
keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bb:c3:36:37:0f:00:6e:7c:01:6e:37:8b:e4:7a:f4:66:bd:
84:8c:be:dd:2d:c9:8f:d8:49:fa:ed:00:db:35:29:85:a2:71:
d5:16:92:a0:a8:c4:45:c8:ef:00:8c:16:fb:c9:60:57:58:8c:
0e:94:62:e6:ae:d8:77:57:37:d3:c3:6c:70:fb:b9:58:5f:9e:
08:ed:8c:d8:ae:2c:39:0d:c1:22:c6:88:b0:f7:7a:66:04:ad:
e4:ac:6c:79:ff:44:e7:55:10:40:5f:71:a3:ea:a1:6c:98:25:
19:65:74:c0:9c:94:c9:77:7b:ad:38:55:f8:f0:12:24:61:c3:
b2:00:25:d4:80:e9:73:78:6f:29:bc:b7:d4:ce:0b:cc:8a:c4:
51:c8:1e:bb:51:9c:dc:5c:de:34:54:95:e4:1b:73:c2:79:1b:
fc:a5:be:df:99:e8:52:a4:00:f1:aa:cf:cd:32:6d:29:dd:c1:
d8:5f:51:3c:2d:0b:84:da:77:5d:94:02:5f:97:48:61:93:7c:
30:34:91:b2:24:5f:28:b4:a5:4b:f2:ac:8d:85:12:1e:57:59:
8b:c4:b2:40:c2:90:ba:c2:f6:d8:d3:83:16:dc:c2:c9:70:41:
13:60:4d:44:0c:c2:39:5e:60:f8:f0:d0:38:b6:c3:df:10:b0:
0a:d1:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:00:19 2025 by rpki-client