Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: K+XRgDwRnQzJ126YRTNBoW3qrjVHjVZ6lCLw65Vx7uA=
Subject key identifier: 5E:B8:10:7E:51:47:BE:DD:73:20:D3:B4:B3:56:AC:2C:9D:43:77:E9
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 0195E15A206AECB8A01F5F2B6955A9FE27F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 07
Signing time: Sat 29 Mar 2025 10:02:14 +0000
Manifest this update: Sat 29 Mar 2025 10:02:14 +0000
Manifest next update: Sun 30 Mar 2025 10:02:14 +0000
Files and hashes: 1: 5HrGsXGpXPGTggrYI32PqK2khbw.roa (hash: 03NS1LF/7zpFWo7wQubB17sub76Yvqg3XO75dLmad6I=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: nd0qcgCt2gWZOtMINKhE44bBNk3sTLx+35HMydB5R/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:20:6a:ec:b8:a0:1f:5f:2b:69:55:a9:fe:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Mar 29 10:02:14 2025 GMT
Not After : Mar 30 10:02:14 2025 GMT
Subject: CN=5eb8107e5147bedd7320d3b4b356ac2c9d4377e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:43:f0:1e:2e:94:e6:a2:ea:bf:a4:ec:3e:
2a:06:b4:af:8f:ea:d1:2c:74:68:6b:25:d9:13:ff:
6e:3d:7b:01:63:01:88:17:e0:32:9f:b4:31:fc:d6:
d1:cf:99:24:7f:94:db:ab:e7:4d:f0:51:c3:aa:62:
0e:a1:72:fb:02:ed:8e:38:62:04:ad:e1:0d:0d:49:
e2:79:d2:be:39:d6:8d:f4:6e:75:04:3c:51:db:4e:
ee:ed:23:1a:3e:bb:65:6b:0a:6c:41:fa:d8:19:4e:
c9:e1:2a:33:d0:e5:49:1d:1e:39:f6:8a:54:e7:d5:
53:33:d2:34:5d:92:39:f5:f1:17:d0:a1:0b:60:36:
b2:f6:78:7f:fc:e7:b3:0f:a6:5a:e6:26:69:56:c7:
4c:4e:7d:e6:63:d8:90:8a:45:bd:1e:cc:d4:27:af:
f3:51:d8:5f:c2:f6:3f:ef:ee:f8:6e:00:a9:d3:0e:
f1:45:ba:ef:9c:b1:7f:60:44:b5:2a:a1:6b:5d:82:
d5:f9:45:b9:9b:08:c7:cc:db:a7:e4:87:01:d6:3e:
b4:61:cc:1c:59:52:cc:10:d5:4c:69:99:b5:69:e0:
fa:c4:a8:34:63:ad:24:da:f3:e4:14:57:ed:cb:30:
dc:fe:9b:30:e0:e5:5b:60:9f:70:98:3b:8a:6a:ab:
7d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:10:7E:51:47:BE:DD:73:20:D3:B4:B3:56:AC:2C:9D:43:77:E9
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b2:e8:23:0a:34:c3:aa:fd:50:84:f6:2a:e3:eb:bd:5b:5b:
7d:46:61:4b:0d:b1:53:f1:1c:2c:65:93:ac:f9:e5:36:9b:7e:
2a:91:8c:ff:89:d1:9c:c4:66:13:8b:58:14:8f:4a:d7:33:b8:
23:77:f7:54:a1:24:37:1c:c1:56:1d:1b:a0:7b:e4:85:a9:42:
c5:78:70:e4:f8:bc:37:30:27:08:2f:a3:45:9b:c7:1f:a0:eb:
39:2c:c1:07:a7:78:0c:68:9b:0c:b8:a2:af:ce:50:85:7b:b3:
48:91:04:38:c5:a9:80:a6:d6:df:2d:e6:b4:62:d8:cb:f1:f6:
3b:d4:29:8a:55:69:10:9c:2d:a4:14:a5:f5:ec:d0:93:0b:d0:
77:87:de:4a:f9:cf:6b:2b:40:a2:ed:23:e6:45:44:28:cb:4c:
46:b9:2d:cd:af:aa:c9:62:53:e1:30:96:c9:96:65:1e:03:55:
c5:21:20:24:b7:05:b9:9a:a7:14:ee:8d:9c:1d:8c:08:94:b0:
91:36:1d:d3:83:a6:7a:73:b0:84:73:d9:e1:39:9b:79:4c:cc:
2b:d3:20:63:c8:91:fa:07:8c:ce:e2:8d:2b:54:67:c8:b7:40:
8f:9e:c7:3f:dc:91:0c:1f:c6:64:ea:26:49:1e:70:e2:01:75:
d7:5f:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:40 2025 by rpki-client