Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: vdycOrX+2OqBb0t87chTylZrmgckzUWJ03+JcLrBipU=
Subject key identifier: 74:0B:B4:A5:87:0B:29:2F:79:71:66:7F:B1:CD:7D:04:7F:E3:94:F3
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 0195E19077DDB2D56322A97BD558CC34D3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 14BE
Signing time: Sat 29 Mar 2025 11:01:36 +0000
Manifest this update: Sat 29 Mar 2025 11:01:36 +0000
Manifest next update: Sun 30 Mar 2025 11:01:36 +0000
Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: yn+Q5osXIcF9g6OFatxPB1bqYQcg0GgO7DpVDC6AXAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:77:dd:b2:d5:63:22:a9:7b:d5:58:cc:34:d3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Mar 29 11:01:36 2025 GMT
Not After : Mar 30 11:01:36 2025 GMT
Subject: CN=740bb4a5870b292f7971667fb1cd7d047fe394f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:37:ff:d1:02:14:f6:fc:e5:28:f8:7a:93:
ee:9a:3b:6d:b1:ef:38:36:dd:8f:a2:53:3e:b1:37:
e7:c1:e4:c4:ac:5e:9d:cb:cf:76:4e:e5:16:fc:20:
ae:f4:f2:39:45:4a:f6:80:d7:46:cb:88:dd:08:49:
41:cc:52:27:43:49:31:e0:1f:f8:6b:82:da:20:b1:
ed:97:7a:40:89:2e:8b:5a:f1:ef:af:6b:d9:ab:20:
53:f4:0a:17:c2:ab:32:b6:0a:84:99:e2:08:fe:bf:
03:ed:c6:ee:7e:2d:ea:bf:37:7a:cc:9f:9c:2c:b1:
f4:38:63:86:2b:74:85:29:22:bb:2d:2e:de:f6:89:
0d:77:3b:29:04:e3:f2:38:11:10:c8:a2:76:1d:5a:
88:bf:3b:6c:81:68:a9:0a:ba:b1:ee:e1:df:62:e1:
3a:fe:22:8a:b6:aa:c0:53:f3:61:ae:aa:76:b7:f9:
73:56:c0:59:7e:05:a2:77:ea:92:b5:41:c5:83:2b:
8d:48:d8:66:66:17:5a:af:75:3f:4a:b6:ad:f8:ff:
1f:ec:00:0b:14:73:fd:b5:6f:c0:de:71:9c:fb:23:
71:eb:6d:ca:81:b9:82:dd:f0:ad:8d:4c:fe:93:3b:
51:4d:5f:6e:8a:a7:fe:c7:3c:3e:31:00:e0:7f:fc:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0B:B4:A5:87:0B:29:2F:79:71:66:7F:B1:CD:7D:04:7F:E3:94:F3
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f1:e6:cf:f0:90:bc:ec:a2:36:72:82:67:da:17:dd:86:7b:
75:a9:b5:3d:13:2b:7f:62:37:8c:38:a9:53:08:e7:2a:85:05:
32:3e:f2:3e:2d:ca:e7:17:c0:fd:32:18:c3:f3:65:94:16:e6:
57:40:06:96:a0:36:af:15:37:83:53:72:b6:5b:e2:38:a8:df:
9d:1b:18:9a:64:a2:2e:25:43:a5:51:01:8b:41:1d:58:d1:bd:
80:d3:ea:d9:51:34:50:dc:cc:bd:10:af:5d:38:22:0c:5e:e5:
3c:f3:b2:16:f2:c3:62:7e:68:9f:b1:51:c8:fa:02:00:81:ca:
9f:a3:2d:6e:0a:b9:6b:00:ea:2d:5b:55:b7:52:2d:86:e9:07:
f4:74:b4:d9:0c:92:28:ad:f3:e3:00:55:0e:13:32:72:85:24:
4c:e2:07:fc:e4:1b:9c:4a:f1:95:f0:df:b3:47:ff:04:0c:76:
92:de:fd:67:b8:79:88:ea:00:18:fd:d6:47:fd:a8:cb:5d:d0:
27:ca:9c:f2:f7:aa:d7:d3:64:ef:0a:c1:3f:97:3d:75:6e:93:
2f:aa:74:64:58:f1:13:37:4a:35:47:3b:cf:4c:5c:c4:eb:5a:
16:86:8c:3d:88:c3:70:ac:3e:55:a7:91:97:67:24:85:5e:12:
92:a7:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:07:28 2025 by rpki-client