Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/NTjwt9in4tMTzKFHFMsxajDS6NM.mft
File: NTjwt9in4tMTzKFHFMsxajDS6NM.mft (raw, json)
Hash identifier: Zw/Cxpe2auxLdVhm8lxNdYvCK4Zt5dSrasb6WMFAwyI=
Subject key identifier: 74:56:DF:0F:84:48:9F:FC:7F:C2:7F:E0:3F:29:77:89:87:1A:7A:3B
Authority key identifier: 35:38:F0:B7:D8:A7:E2:D3:13:CC:A1:47:14:CB:31:6A:30:D2:E8:D3
Certificate issuer: /CN=3538f0b7d8a7e2d313cca14714cb316a30d2e8d3
Certificate serial: 018C00589AFB43BAA9262E044AE8399664C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTjwt9in4tMTzKFHFMsxajDS6NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/NTjwt9in4tMTzKFHFMsxajDS6NM.mft
Manifest number: 0866
Signing time: Fri 24 Nov 2023 08:00:55 +0000
Manifest this update: Fri 24 Nov 2023 08:00:55 +0000
Manifest next update: Sat 25 Nov 2023 08:00:55 +0000
Files and hashes: 1: 52mxs9TFUwaSHcqkL2oBW9kAz4c.roa (hash: 42DS7Mig4tEl/oNlo3ZE1yUeaDbU3S5uydVPtSgHvWk=)
2: NTjwt9in4tMTzKFHFMsxajDS6NM.crl (hash: 5p6RjNUu3d7MAT6FeIw6M5xZUSQ0VIisjCT0qYYMWos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:58:9a:fb:43:ba:a9:26:2e:04:4a:e8:39:96:64:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3538f0b7d8a7e2d313cca14714cb316a30d2e8d3
Validity
Not Before: Nov 24 08:00:55 2023 GMT
Not After : Nov 25 08:00:55 2023 GMT
Subject: CN=7456df0f84489ffc7fc27fe03f297789871a7a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:c1:af:58:18:cf:1d:b7:06:66:8c:0c:0b:
91:06:21:9d:e7:55:32:20:de:82:fa:44:aa:6d:64:
c2:d7:74:09:45:84:c2:f0:a9:1c:37:97:57:1f:94:
36:79:d9:e9:29:e5:31:58:91:0d:75:73:e8:89:50:
51:26:c3:3e:4e:87:15:28:ce:20:14:eb:85:37:7d:
3f:e6:cf:75:5d:f8:60:ac:a9:bf:48:3a:a1:e8:62:
ac:e5:ed:8b:8b:31:63:2b:a1:93:83:6d:6d:e9:2a:
9f:3f:95:70:2e:6a:20:6d:0f:40:0d:b7:bb:33:70:
bf:63:73:31:61:75:cf:1d:44:c8:4c:af:c9:99:fc:
6d:4b:89:9d:10:d1:55:5b:67:c1:22:c6:61:4d:30:
24:ce:93:5e:36:1b:cb:a0:94:a0:11:fe:2f:70:15:
37:3d:2a:68:df:e0:c6:3a:22:11:26:0a:06:51:f6:
b1:66:58:f1:a8:01:f1:43:44:03:c2:87:f9:ff:b2:
0e:c3:97:f4:9f:d3:ab:88:d3:c2:44:bf:6f:37:b0:
31:e5:c8:10:3f:e0:0f:ba:dc:d5:1c:14:18:3d:6d:
cd:88:46:64:8d:76:f4:11:15:2e:2a:6d:a3:44:8d:
5a:49:10:1c:bc:d8:4a:b8:a0:fc:21:c6:9a:d4:7a:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:DF:0F:84:48:9F:FC:7F:C2:7F:E0:3F:29:77:89:87:1A:7A:3B
X509v3 Authority Key Identifier:
keyid:35:38:F0:B7:D8:A7:E2:D3:13:CC:A1:47:14:CB:31:6A:30:D2:E8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTjwt9in4tMTzKFHFMsxajDS6NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/NTjwt9in4tMTzKFHFMsxajDS6NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/NTjwt9in4tMTzKFHFMsxajDS6NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0a:b0:04:f4:9a:d4:97:05:fa:af:00:ea:36:41:71:09:10:
be:59:38:8b:d6:60:ea:9b:a7:ed:12:e7:d6:34:7d:f1:9a:51:
78:eb:55:84:57:4a:00:f9:8b:0c:c8:11:bb:b9:0e:79:cf:ec:
6d:fa:c9:c0:e8:91:8c:67:22:3a:25:16:81:e8:dd:e2:cc:67:
df:1c:34:f2:8a:98:88:a9:ea:01:3e:5b:15:bf:a9:77:d5:4f:
2b:6b:05:a3:94:36:9a:f7:ce:af:52:ed:64:be:fa:b6:ec:53:
35:56:42:a1:6b:68:f4:73:77:f6:66:16:e6:18:2b:4e:ea:de:
56:64:0b:4a:73:89:00:3e:7f:87:70:2b:75:c6:51:0e:72:ed:
4d:00:db:ab:96:08:40:6a:1f:69:91:fd:7a:55:4a:b1:10:f4:
77:c6:01:ef:df:97:d2:d3:ef:ba:ea:de:7e:ba:c2:29:c3:b2:
13:4e:75:03:04:f8:3a:b8:6f:23:43:48:21:ed:b6:7a:56:d7:
9e:35:83:bc:4d:05:53:6b:94:88:5a:06:fc:5f:44:c1:3d:cc:
12:5d:be:a2:79:1b:05:da:62:63:e8:b7:46:45:e7:71:18:c3:
86:2a:58:e1:5b:79:b1:5b:e4:1a:03:d1:c0:fc:6a:25:5e:ea:
66:44:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:06 2025 by rpki-client