Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.mft
File: NnsRT6xrxd4zWw7PRg74vro6UEk.mft (raw, json)
Hash identifier: LhqV72njYaoKnB2ZR+XaYTaLa1m+XnoPZd2eNjYROag=
Subject key identifier: D8:94:23:03:BC:2A:F8:8B:2F:D4:52:33:92:86:77:DD:C3:7C:36:D8
Authority key identifier: 36:7B:11:4F:AC:6B:C5:DE:33:5B:0E:CF:46:0E:F8:BE:BA:3A:50:49
Certificate issuer: /CN=367b114fac6bc5de335b0ecf460ef8beba3a5049
Certificate serial: 0191F8FDB8E29A81B12280806A7F26A234C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.mft
Manifest number: 0AC4
Signing time: Mon 16 Sep 2024 04:01:03 +0000
Manifest this update: Mon 16 Sep 2024 04:01:03 +0000
Manifest next update: Tue 17 Sep 2024 04:01:03 +0000
Files and hashes: 1: 82zaSDZdnnBDvlOCC-u-V4fSZtI.roa (hash: 0ZUojsMmtcEvjD29I6q/Iuc2481VGOno2XjRG2SGyB4=)
2: NnsRT6xrxd4zWw7PRg74vro6UEk.crl (hash: rD8K/7QseyXbf92N3p7VJdkNDNFRtCXtUta8XusnQ4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f8:fd:b8:e2:9a:81:b1:22:80:80:6a:7f:26:a2:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367b114fac6bc5de335b0ecf460ef8beba3a5049
Validity
Not Before: Sep 16 04:01:03 2024 GMT
Not After : Sep 17 04:01:03 2024 GMT
Subject: CN=d8942303bc2af88b2fd45233928677ddc37c36d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:9e:47:62:2b:86:bc:8e:dc:80:72:e8:ea:
d1:57:03:16:94:d9:4a:fe:37:68:27:9f:48:72:30:
eb:ef:bf:83:7b:b7:0a:9a:fa:14:f4:9b:02:31:40:
36:c1:e5:fa:42:28:6d:56:06:f0:b6:f8:66:ca:43:
2e:66:19:6f:68:12:53:e1:25:fa:9c:3b:03:93:a0:
1a:92:86:77:76:22:75:84:fa:a5:81:05:a4:15:9b:
5f:00:04:d0:31:4b:75:7d:b7:2a:38:e3:fc:e4:ac:
c7:63:4c:23:3d:d9:0f:a6:a9:17:c4:25:31:71:a7:
c8:60:86:a0:00:90:03:73:8f:a1:25:ec:a2:6c:43:
cf:73:a4:87:09:0e:a7:df:0e:f9:75:9e:b3:49:06:
9a:68:0b:fc:32:ac:0c:ed:20:46:5a:88:21:24:56:
52:de:a1:fe:f4:9f:99:f9:20:6c:ec:5f:97:a8:78:
7c:64:a9:d4:79:91:21:14:78:20:0c:30:4c:78:fa:
27:c0:13:dd:c2:fc:23:2f:f0:4a:a6:e3:96:a5:d0:
3e:af:cd:6a:73:5d:7c:7e:08:a6:34:44:1a:52:72:
2f:3c:66:14:68:10:b1:d7:f2:c4:fb:e5:3f:05:9f:
0b:df:27:48:01:6a:45:35:a8:f5:c6:dc:5d:38:aa:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:94:23:03:BC:2A:F8:8B:2F:D4:52:33:92:86:77:DD:C3:7C:36:D8
X509v3 Authority Key Identifier:
keyid:36:7B:11:4F:AC:6B:C5:DE:33:5B:0E:CF:46:0E:F8:BE:BA:3A:50:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2b:2d:48:2b:c8:0e:6e:05:82:10:de:ed:6d:e1:d4:66:cb:
2b:17:29:f0:fd:8d:94:6b:b1:3b:ca:43:22:01:48:d9:8d:75:
74:eb:74:ff:97:06:af:c2:98:0e:44:40:31:59:62:5f:1e:e4:
21:78:91:0a:a2:50:df:eb:a9:07:df:3d:71:ea:dc:2f:fa:79:
9f:bc:5f:d3:7a:fb:0a:78:35:7e:31:cf:2e:50:c7:10:c9:41:
f7:0d:a0:bb:3b:f1:d8:4b:fa:16:06:62:ba:0b:9d:df:12:15:
2d:2f:53:eb:23:7e:7a:8e:6a:b7:67:63:68:5f:c0:80:95:20:
e8:56:92:e0:bf:55:70:3f:83:70:57:91:c8:15:be:ba:dc:b6:
4f:bf:5a:e2:f1:46:7c:f6:19:fe:97:7c:5c:b9:ce:c0:b1:d8:
9a:f1:e7:bc:12:ec:89:08:b8:16:5c:ae:76:77:21:b2:e8:31:
2c:8c:03:8a:30:26:9d:d3:c5:e8:20:cd:5e:ad:ac:7b:ea:16:
a4:e6:67:01:0f:7a:b8:67:f6:7e:d6:22:43:96:8d:82:72:e7:
d4:40:15:7d:5b:80:73:54:f5:8e:6c:df:48:4c:45:ba:18:b4:
ce:83:fd:53:f4:80:06:9f:8c:d7:8c:4a:e6:50:18:67:d0:49:
9d:b8:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:11:51 2025 by rpki-client