Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
File: NpABg88IpuW8gHhGKUpGBi4ZDjs.mft (raw, json)
Hash identifier: j2LJUCCg1MoiFbH2km/pHXX1lnWT3LAtPCdvG0UtIiU=
Subject key identifier: 25:4B:D4:F8:9F:71:A9:BA:CB:8C:48:85:FC:9C:42:1C:63:F4:53:E9
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 0194AC91DB5121521A3F47759B097F5A7475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
Manifest number: 0CA6
Signing time: Tue 28 Jan 2025 11:00:27 +0000
Manifest this update: Tue 28 Jan 2025 11:00:27 +0000
Manifest next update: Wed 29 Jan 2025 11:00:27 +0000
Files and hashes: 1: NpABg88IpuW8gHhGKUpGBi4ZDjs.crl (hash: Fhu7L8NF8EQrJYHRSBZ5K9bllonZZy2sUK0skmexku0=)
2: fmzabX1wC9LzCnDTVmQlla1G-ik.roa (hash: 5edD7nsA4go10ucsw6zlFnHtoaEROs34laMuf3Q628U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:91:db:51:21:52:1a:3f:47:75:9b:09:7f:5a:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 28 11:00:27 2025 GMT
Not After : Jan 29 11:00:27 2025 GMT
Subject: CN=254bd4f89f71a9bacb8c4885fc9c421c63f453e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:23:bf:15:82:0c:63:01:cd:5e:9f:7c:d9:
47:a5:4f:77:39:49:7b:e4:9c:39:c6:2f:ce:2d:b8:
92:7a:ba:6e:c9:4c:ae:0e:67:ec:3e:56:c5:1b:cb:
5e:dd:8b:f2:6a:ef:87:ab:31:04:f5:4f:91:5d:0d:
71:56:f1:ab:17:74:10:bc:7e:b6:bb:8c:f9:3c:71:
39:69:a7:a6:29:e7:0e:44:cc:b9:7d:c1:7c:bd:d1:
0f:18:f6:55:41:81:fc:a4:2c:1d:45:e7:03:ac:b4:
87:5b:d3:fc:f9:39:03:6f:c3:5f:54:f5:12:f0:28:
78:c8:a5:09:17:b8:ba:e3:33:8e:96:2b:f1:c5:95:
21:84:3c:ba:66:8d:f2:ac:65:a8:ba:86:7e:25:b1:
d7:bb:aa:be:cf:10:c0:6b:ab:3b:94:19:34:9f:c6:
72:29:be:6c:6b:3f:81:87:12:e8:48:f4:a8:63:1e:
75:53:a1:ce:5d:84:61:64:7c:ff:63:64:bd:cf:59:
23:43:b1:78:2a:38:01:92:db:11:83:6c:b6:a3:f3:
e1:24:b8:7c:46:c9:22:36:9d:5a:b2:b4:e8:a0:4f:
e5:e7:9d:23:4f:d1:b5:73:e4:43:5f:9e:30:ee:7f:
5d:88:cf:15:83:c3:2d:1b:dc:55:6b:dd:d1:54:f0:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:D4:F8:9F:71:A9:BA:CB:8C:48:85:FC:9C:42:1C:63:F4:53:E9
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a8:3d:b6:e3:a3:9d:1e:36:7d:a1:2e:f9:0a:96:37:51:68:
74:2a:89:78:9f:e2:b5:32:32:04:02:ae:24:41:d0:c2:e8:e1:
72:59:f3:2e:7d:fd:8f:57:40:6d:01:c9:16:05:cf:c4:c4:63:
67:43:d3:9a:f4:a0:2f:90:4b:d4:4c:fa:3e:2c:67:ca:fe:fc:
c1:67:ef:9b:8d:9e:0f:77:b9:31:30:c6:e6:5a:6e:7c:c1:ff:
ff:62:44:03:bc:26:88:01:ae:2c:bc:d3:34:fd:ea:35:99:01:
44:50:dd:32:ae:57:a1:9e:4f:05:c3:cb:d3:40:49:a0:3a:e4:
c3:9c:9d:a7:75:39:4c:12:04:93:a9:3e:86:df:70:6d:c4:81:
17:05:2f:96:0f:73:f4:60:8a:a2:40:3c:a7:a3:31:ac:3e:ab:
a7:ad:38:71:37:a5:64:9b:12:b3:2a:c3:42:9a:6b:b0:e6:25:
6b:92:0a:6f:da:68:90:89:ba:7b:be:48:97:f3:8b:47:eb:f4:
1a:4c:53:47:2e:96:1b:35:48:ce:58:a9:94:42:d2:22:2c:9e:
e4:55:fc:03:de:b0:54:28:48:a1:f5:5e:94:ce:ed:dc:67:61:
c7:cc:22:79:2c:12:a4:7d:20:fe:cf:74:52:44:b9:54:96:de:
ee:a5:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:29 2025 by rpki-client