Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft
File: NXbf2byYxhO4QyfTQGIHWsxWJy8.mft (raw, json)
Hash identifier: Vmt/DE+iu7n44CfmCFo6e8K+A7dikBvUTvsbQh+P2ck=
Subject key identifier: F4:C4:F4:E7:97:EF:10:BD:B0:AC:E8:00:EC:FF:C3:F8:62:C3:BE:86
Authority key identifier: 35:76:DF:D9:BC:98:C6:13:B8:43:27:D3:40:62:07:5A:CC:56:27:2F
Certificate issuer: /CN=3576dfd9bc98c613b84327d34062075acc56272f
Certificate serial: 0191C6C8927152764A786D61D3E8A90898EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXbf2byYxhO4QyfTQGIHWsxWJy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft
Manifest number: 0BC8
Signing time: Fri 06 Sep 2024 10:01:59 +0000
Manifest this update: Fri 06 Sep 2024 10:01:59 +0000
Manifest next update: Sat 07 Sep 2024 10:01:59 +0000
Files and hashes: 1: NN74X72IwSUNR3yQFSH0hwYDSgc.roa (hash: SvCeizUp0Mkqnbsk2qjsnMi7MhnT60HuOJZnpKjboCU=)
2: NXbf2byYxhO4QyfTQGIHWsxWJy8.crl (hash: NWNsvSSoFITqJXzC+wXxmo+u4V1Pv29AHDktDAbkQnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:c8:92:71:52:76:4a:78:6d:61:d3:e8:a9:08:98:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3576dfd9bc98c613b84327d34062075acc56272f
Validity
Not Before: Sep 6 10:01:59 2024 GMT
Not After : Sep 7 10:01:59 2024 GMT
Subject: CN=f4c4f4e797ef10bdb0ace800ecffc3f862c3be86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:8f:07:f3:14:66:f9:5c:33:17:1a:17:82:
09:0d:aa:f3:0f:af:c8:80:99:a9:62:6b:32:b2:00:
87:41:33:a6:75:60:55:b9:bd:51:5f:b2:c3:66:7d:
c0:59:5a:6a:2e:91:1c:55:d9:b9:aa:87:5b:41:81:
29:72:1f:ec:43:13:f5:67:e3:8d:b9:7a:b9:76:4f:
86:5a:11:31:55:20:0a:74:3d:44:38:e8:ea:e3:a3:
31:64:42:62:c9:66:19:92:e8:e2:63:0a:36:89:9e:
03:30:87:4c:0e:a2:73:3d:d3:74:73:a0:a9:94:2e:
ce:f6:e6:2a:12:4c:16:c7:46:34:b0:02:f8:64:40:
0a:d4:21:3e:b2:34:84:1c:dc:b5:cf:79:55:e2:ba:
03:40:d8:81:97:48:14:0f:ba:77:d1:41:f9:0d:f3:
4f:ec:7c:86:f2:9d:a1:bd:c7:ec:03:c9:66:7f:47:
a3:fd:df:e4:c4:00:4d:6a:49:e1:de:18:c6:f8:8b:
3d:3c:64:50:9f:1b:a4:bd:0b:e4:ee:9d:d7:e4:a8:
e3:b9:50:42:7a:50:4d:2d:52:4f:c5:27:2b:db:be:
4e:7d:d4:2f:fc:f5:ba:a3:08:e8:3a:57:77:8f:43:
6e:bc:c1:12:48:11:55:fe:0f:8f:47:6b:49:fc:19:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C4:F4:E7:97:EF:10:BD:B0:AC:E8:00:EC:FF:C3:F8:62:C3:BE:86
X509v3 Authority Key Identifier:
keyid:35:76:DF:D9:BC:98:C6:13:B8:43:27:D3:40:62:07:5A:CC:56:27:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXbf2byYxhO4QyfTQGIHWsxWJy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:56:d6:c8:41:98:d2:f3:5b:35:00:3e:b4:18:d7:a9:17:0d:
56:e0:e8:2f:bb:69:bd:ab:5b:30:32:2f:6b:ef:e4:70:d0:1e:
9d:e5:d5:94:a7:7f:d0:ce:e4:89:f5:08:fc:31:ea:21:8f:7e:
6a:c3:14:c2:a0:1a:de:67:39:08:d6:15:b6:c0:45:56:e7:f6:
49:1d:cd:29:26:9d:db:65:ee:53:fa:3a:6a:f4:61:d6:27:4c:
ae:44:aa:d3:f1:c3:c8:b8:c1:f4:e4:b0:1d:e6:a1:42:5e:35:
7d:8f:55:36:b0:ed:9c:68:d1:b6:2b:43:fb:1c:a4:2a:50:45:
d2:26:52:f5:14:6b:72:25:ab:57:81:4c:77:ed:3f:f7:84:fd:
d5:28:fb:02:3d:b3:d3:64:78:13:14:1e:f3:28:ae:a2:a4:f9:
2c:4c:c5:eb:08:1a:1e:7d:0f:c8:b3:13:1f:7b:e8:24:e3:8c:
6d:f3:11:b5:b0:e2:a3:4b:45:a9:88:8a:0d:9f:e6:29:8d:0e:
51:87:0d:cd:df:28:ff:88:b4:c6:a4:4b:33:8e:11:03:4d:ac:
c4:d8:9e:a9:39:45:3a:de:ad:ab:e7:5e:46:51:7b:fa:b0:20:
1f:de:fc:49:c3:7a:65:3a:8e:1c:bb:a3:17:35:86:92:71:74:
20:9c:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:38 2025 by rpki-client