Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.mft
File: NAcp3GB7SGwyTZEU3kUkKhLktbo.mft (raw, json)
Hash identifier: 9qvdqnPlqlvXnVZOEuSGnexsC9a6TIwgMejf3TGHrSs=
Subject key identifier: 2B:9D:9E:8D:84:55:27:AE:07:4C:58:AE:7F:2E:3E:D5:C0:5E:72:67
Authority key identifier: 34:07:29:DC:60:7B:48:6C:32:4D:91:14:DE:45:24:2A:12:E4:B5:BA
Certificate issuer: /CN=340729dc607b486c324d9114de45242a12e4b5ba
Certificate serial: 018D690CC00434E76AC96370FC244DBC0A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAcp3GB7SGwyTZEU3kUkKhLktbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.mft
Manifest number: 0D14
Signing time: Fri 02 Feb 2024 09:00:59 +0000
Manifest this update: Fri 02 Feb 2024 09:00:59 +0000
Manifest next update: Sat 03 Feb 2024 09:00:59 +0000
Files and hashes: 1: NAcp3GB7SGwyTZEU3kUkKhLktbo.crl (hash: C2TLZ767dKYRTDsa8vLNpuCIfN0iveYjoZrG928qgOA=)
2: hD1AphFIn6fuV9gSTSrraqks_Sk.roa (hash: oBX9aRcDYNWZ0t6xKF0WdTEUvu7dgkLbf0ja/L0F1mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:0c:c0:04:34:e7:6a:c9:63:70:fc:24:4d:bc:0a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340729dc607b486c324d9114de45242a12e4b5ba
Validity
Not Before: Feb 2 09:00:59 2024 GMT
Not After : Feb 3 09:00:59 2024 GMT
Subject: CN=2b9d9e8d845527ae074c58ae7f2e3ed5c05e7267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:b6:5e:50:9d:a8:9f:6d:57:5e:14:57:05:
1e:68:eb:b6:ba:7e:54:68:d7:71:d9:01:75:db:4e:
68:a8:97:5a:ad:63:8c:a8:df:d5:c1:92:6a:65:fa:
f8:a8:4c:87:85:e2:37:03:01:5d:92:73:6e:cd:9e:
d8:10:92:1d:20:b4:9f:e5:d2:bf:a8:a0:03:8b:a6:
af:05:a3:b4:9b:9e:b6:fb:b7:01:c7:dc:c3:01:1c:
5f:d9:88:41:dc:d4:2f:91:27:cc:fb:75:fa:aa:15:
df:69:d4:a0:a3:35:bb:f6:7a:5d:75:bf:5b:cd:0b:
cc:31:f8:4b:87:83:c1:cd:af:5a:65:d3:03:16:cd:
34:3a:7a:21:66:19:1d:9e:c2:d0:98:10:68:9c:d4:
10:82:b7:7d:8c:25:17:2c:45:2d:e3:32:5f:99:31:
9f:07:d8:a3:5d:f0:e1:96:4c:cc:09:7b:61:7f:cd:
ac:ca:1f:d4:26:b3:8b:fb:70:78:8c:f0:24:00:80:
3e:08:af:ab:64:93:d6:bd:28:86:06:a5:0b:20:06:
7c:32:84:a0:ff:b8:93:3d:9a:f5:a5:63:74:81:cb:
99:80:fa:c4:6f:4f:16:91:cd:7c:62:d0:d5:f4:2b:
f1:46:70:da:03:eb:90:ef:50:9a:0a:58:d1:0f:95:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:9E:8D:84:55:27:AE:07:4C:58:AE:7F:2E:3E:D5:C0:5E:72:67
X509v3 Authority Key Identifier:
keyid:34:07:29:DC:60:7B:48:6C:32:4D:91:14:DE:45:24:2A:12:E4:B5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAcp3GB7SGwyTZEU3kUkKhLktbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e7:d7:f9:ba:e8:4f:62:0f:3e:0a:33:c9:d5:6a:67:53:31:
d4:26:03:6f:4a:5c:91:80:52:5a:e7:9c:e1:07:6a:ac:0c:53:
c3:bc:76:0b:6d:f6:bd:ae:d1:77:03:73:5f:28:38:a9:d1:05:
f9:21:f1:ef:48:df:55:34:49:c1:81:9e:10:d0:99:28:3e:f5:
4c:1d:eb:88:52:59:8a:ca:be:ab:37:70:b8:06:c6:57:64:aa:
d9:c5:af:60:1d:23:6d:c1:d8:2e:73:84:38:33:d1:26:f7:2c:
06:ef:4d:c6:93:12:39:ad:f2:85:12:3d:f0:8d:ff:75:a5:44:
e2:ec:fd:1e:27:28:b8:3f:44:55:47:b8:3a:bb:60:94:3a:4a:
09:2c:ea:86:36:02:57:76:29:a7:3f:2b:38:b8:5f:1c:55:b4:
9d:e1:35:e8:b0:5f:17:b7:1b:45:46:55:6d:11:69:bd:2f:0f:
31:05:b4:c1:c3:5d:cb:ab:ed:3d:ca:fa:97:20:f9:80:79:d2:
8d:6e:6a:f6:0c:e1:61:a0:c6:6a:e3:d3:63:29:2b:c0:25:b8:
cc:ab:d4:f1:72:aa:9d:02:bd:e7:b1:1d:af:ad:3e:cc:e2:1d:
7d:39:bc:3e:35:04:14:ab:3b:56:b2:0b:78:4d:99:c5:31:33:
e3:c9:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:16 2025 by rpki-client