Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: nAfFWkA0BhjLo5D0iZXJ8jjlgOWOyJxVz5d9SWuPPXM=
Subject key identifier: 47:68:43:78:24:49:73:24:DF:35:DF:BD:A6:CD:EF:C1:82:5C:77:75
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 0195E046AB42922F73E690B6795AEB007706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 0E88
Signing time: Sat 29 Mar 2025 05:01:22 +0000
Manifest this update: Sat 29 Mar 2025 05:01:22 +0000
Manifest next update: Sun 30 Mar 2025 05:01:22 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: I/QC/dGn2ph8aYe+wQd1FMzh26aiYkQNwE6XixsYP+g=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:ab:42:92:2f:73:e6:90:b6:79:5a:eb:00:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Mar 29 05:01:22 2025 GMT
Not After : Mar 30 05:01:22 2025 GMT
Subject: CN=4768437824497324df35dfbda6cdefc1825c7775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:b7:6c:3e:e5:36:fc:92:62:2b:4a:0d:ca:
d9:98:d7:59:35:67:f3:9d:0e:0a:ba:a5:1f:49:f2:
91:8e:00:e4:33:58:78:76:1e:9e:9f:95:e7:8c:b0:
7b:6a:01:17:a5:b1:e1:4e:d2:de:74:db:ef:9b:f9:
71:13:7a:a9:1b:bf:22:8a:3f:4c:77:f1:86:7b:39:
35:60:a1:20:dd:3f:34:00:96:e7:c6:7d:be:70:f8:
f3:12:1c:87:29:78:20:4e:47:7c:76:90:b0:2a:d1:
50:22:cc:7c:bd:9a:b1:93:14:de:14:6b:f1:b7:e1:
9f:2f:26:40:e5:97:55:64:52:0e:65:52:ea:79:ce:
cf:c1:5d:84:fd:d7:45:26:17:aa:93:05:20:ef:37:
0a:2e:1f:f5:82:ea:80:3d:4e:86:19:a8:91:71:00:
1d:fe:06:23:a1:ea:96:b1:81:6c:39:34:31:21:d4:
9b:e8:c6:4b:74:4d:e9:00:21:00:67:37:b6:03:95:
1e:79:d0:e3:b1:b5:31:c2:38:f2:e7:db:e4:bd:ce:
7a:ed:89:96:21:27:24:26:83:23:85:65:a5:20:ed:
7d:e0:1a:13:41:49:76:97:56:53:5d:36:bf:7d:e5:
ec:0f:af:1b:e2:8d:23:02:12:84:e5:0e:85:fa:d7:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:68:43:78:24:49:73:24:DF:35:DF:BD:A6:CD:EF:C1:82:5C:77:75
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:3b:45:0d:77:a7:52:e5:21:62:76:f9:bb:b7:3a:a9:b0:
ad:19:7e:28:da:ce:ea:00:d0:88:b3:91:02:be:87:ff:9e:45:
fd:9a:42:70:15:b9:7b:7e:d7:28:b1:06:87:74:ca:3f:c4:7b:
fc:2a:43:45:2d:26:72:4a:da:58:f0:cf:92:fe:53:7f:de:78:
b9:a9:3d:fd:91:18:0a:55:ce:6f:79:bd:ec:b2:1d:6a:4a:b7:
42:e8:c8:92:ab:51:40:b7:21:5e:dc:05:21:3e:78:fd:a6:9a:
7c:62:69:5d:f0:ea:d3:99:9a:ae:ae:ee:cf:c8:9f:9e:1a:78:
5e:4e:2c:f3:de:ab:2f:da:36:3a:da:2e:ed:f4:fa:8b:35:27:
a9:70:09:af:ec:0e:04:b4:42:4e:31:17:69:f5:8b:34:05:14:
c7:a9:8a:0a:9f:9f:ee:86:ef:d2:2f:cd:61:c5:d7:e2:be:5e:
24:3b:0c:7c:4c:15:a0:ad:64:6c:5f:c1:f6:1b:cb:c0:15:eb:
60:3f:2a:b3:e5:cd:a7:18:3c:c5:68:a5:35:a4:98:2f:88:88:
de:b1:8c:7c:8f:8a:23:45:b0:8a:bc:c8:e7:dc:ca:91:ce:b7:
d5:0a:44:17:a0:22:6c:73:e8:af:67:f8:d2:3d:a1:af:d7:33:
ab:e0:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:43:19 2025 by rpki-client