Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.mft
File: 78NCM-2WQkpRbiv505Fxti5EtEE.mft (raw, json)
Hash identifier: zzlPT48HIOg1PFOO0zaoZTzlunGgoswu7zC+kyL1yw4=
Subject key identifier: A1:26:30:68:15:79:1A:4A:64:EF:71:3A:52:37:FF:75:11:3F:3E:71
Authority key identifier: EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
Certificate issuer: /CN=efc34233ed96424a516e2bf9d39171b62e44b441
Certificate serial: 0192218CD322D849C09E5C9AA2ABCC903C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.mft
Manifest number: 12D1
Signing time: Tue 24 Sep 2024 01:02:10 +0000
Manifest this update: Tue 24 Sep 2024 01:02:10 +0000
Manifest next update: Wed 25 Sep 2024 01:02:10 +0000
Files and hashes: 1: 78NCM-2WQkpRbiv505Fxti5EtEE.crl (hash: VeM+mQcvmUGEc10WkdT2b6I2oP2/bbaBb04mzhYnDjY=)
2: D3ATXzKxRXoyDNpgw6wHLFYEF6c.roa (hash: Fs6c4LR7rtqvPs80leVLoPn/4A9tUHXVIWo+DvGjAsk=)
3: qJV058WRAkDqPtu_E1lwqLHqenY.roa (hash: /PcNtxzMfccUMzkJMwJV/NbXCv3NCa89XserEQng4zQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:21:8c:d3:22:d8:49:c0:9e:5c:9a:a2:ab:cc:90:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc34233ed96424a516e2bf9d39171b62e44b441
Validity
Not Before: Sep 24 01:02:10 2024 GMT
Not After : Sep 25 01:02:10 2024 GMT
Subject: CN=a126306815791a4a64ef713a5237ff75113f3e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:98:53:40:0c:d2:ea:0e:35:86:7c:a4:e3:
69:2d:6e:95:3e:b1:d0:77:d7:b6:8c:6b:58:72:91:
1c:e0:05:f7:c9:cb:02:69:18:81:37:49:1a:8f:da:
f3:83:65:fb:f8:35:03:90:ba:96:75:10:d8:f5:64:
13:50:9a:ea:f8:28:b9:8d:96:03:b0:30:85:b3:4d:
3a:86:1e:a4:8b:92:2d:bb:b7:42:9e:2d:8f:19:8d:
c0:4f:c5:e1:78:0d:f2:c7:94:c3:fc:d3:de:ff:76:
11:40:f5:2c:44:63:2e:1c:b2:d0:9d:19:9c:74:7e:
ba:c3:6a:7c:5f:49:55:6c:65:1b:c7:f3:93:a4:59:
a3:de:95:05:90:43:24:5e:ae:b6:c4:6b:fe:7c:cf:
3b:33:94:61:9a:22:40:03:31:08:46:7a:74:1c:62:
e4:3f:af:10:69:86:74:c1:d3:1e:9e:3c:ba:44:dc:
d3:17:1b:df:6a:df:24:5f:ec:83:80:19:14:f9:60:
99:ee:2e:58:54:56:79:31:d9:bc:f9:2c:48:36:f7:
06:e6:b5:02:d7:ba:32:a8:85:a9:07:86:8e:2f:fe:
60:fe:e3:57:e3:a7:14:05:70:22:1a:1c:24:3d:15:
c1:75:da:05:e1:09:5a:14:0a:fe:d4:9e:1f:83:3f:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:26:30:68:15:79:1A:4A:64:EF:71:3A:52:37:FF:75:11:3F:3E:71
X509v3 Authority Key Identifier:
keyid:EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:a2:8a:43:34:26:cc:dc:e3:24:fc:8f:2e:1b:a9:16:cc:
18:c2:35:93:e9:00:44:f1:77:8f:21:0e:9a:4b:5c:99:c4:75:
4a:93:41:45:77:20:c0:5f:eb:44:82:1c:d8:7d:20:9f:ad:b4:
42:86:dd:b4:a0:03:6b:84:10:2b:b8:69:48:8b:ea:0f:55:fd:
f0:cb:f2:89:7c:49:da:c5:ca:04:d3:02:65:05:e3:1e:45:c0:
b0:00:d2:27:5d:c8:00:de:0a:f9:d7:55:12:3c:b1:d5:4a:c3:
95:f8:0c:17:b3:15:3a:28:7c:ba:3c:dd:81:ea:cb:b2:37:96:
c2:0e:98:43:94:c4:9e:dc:d0:d9:d9:32:7d:8a:16:5c:ef:e8:
cf:72:90:d0:65:32:9c:54:f7:6b:d0:87:95:5f:66:ba:84:05:
b3:6d:51:eb:0f:83:98:04:06:66:f8:01:0e:ab:ee:b9:ab:d4:
d0:18:a8:71:14:f9:66:59:f6:49:62:fc:8b:88:51:50:f3:0c:
24:3c:a7:90:4e:2a:9f:68:23:9d:66:28:92:38:a0:0d:76:99:
29:8c:c0:87:b3:7e:33:0a:5a:aa:4a:4b:c2:d1:f2:94:a2:fd:
52:4b:47:5f:8b:20:6b:c0:4c:d4:6f:1a:08:23:3e:62:fb:aa:
bf:0a:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:56:28 2025 by rpki-client