Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/NLs4SqnQqsAp8rL0AVwuMY64rKQ.mft
File: NLs4SqnQqsAp8rL0AVwuMY64rKQ.mft (raw, json)
Hash identifier: uDeAGMzqxsdXgfuybe531mUlwUsACaL40UaVkXmbZtI=
Subject key identifier: 14:70:57:D9:B5:00:2D:7A:28:75:04:6D:96:BF:83:66:CE:57:60:D4
Authority key identifier: 34:BB:38:4A:A9:D0:AA:C0:29:F2:B2:F4:01:5C:2E:31:8E:B8:AC:A4
Certificate issuer: /CN=34bb384aa9d0aac029f2b2f4015c2e318eb8aca4
Certificate serial: 018C8FE634F7A85B6B7ED0DA0664545AC8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLs4SqnQqsAp8rL0AVwuMY64rKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/NLs4SqnQqsAp8rL0AVwuMY64rKQ.mft
Manifest number: 03C4
Signing time: Fri 22 Dec 2023 05:01:17 +0000
Manifest this update: Fri 22 Dec 2023 05:01:17 +0000
Manifest next update: Sat 23 Dec 2023 05:01:17 +0000
Files and hashes: 1: J8_g8128AyIkI6_m8v7o6a3Ndjg.roa (hash: Ry3KmvIgYu0Xh1alYnwD8ZrLCPf4zDWe6ely8VjO7XU=)
2: NLs4SqnQqsAp8rL0AVwuMY64rKQ.crl (hash: IpSbmEj5ZdsFYV/7/v4byNKx9PVpfGxl7eA7jDYwsdo=)
3: VVKDOacrNUJf8nvn-gfXFWa7yJA.roa (hash: uKQpwgaqjofo2ddwNllusOW9rjCdBe5fc3CincgNbzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:e6:34:f7:a8:5b:6b:7e:d0:da:06:64:54:5a:c8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bb384aa9d0aac029f2b2f4015c2e318eb8aca4
Validity
Not Before: Dec 22 05:01:17 2023 GMT
Not After : Dec 23 05:01:17 2023 GMT
Subject: CN=147057d9b5002d7a2875046d96bf8366ce5760d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:90:a0:fe:28:56:45:e1:60:b6:00:c1:6e:93:
9b:31:46:24:15:41:b9:02:f8:f5:e5:69:28:50:37:
64:58:7f:7c:27:4a:db:cf:0f:39:66:2a:d5:c2:e4:
c5:9d:bf:77:23:99:e5:4e:08:ec:02:47:fa:17:29:
75:32:03:cd:d6:a5:75:6c:4b:4a:37:ba:c1:3f:48:
04:be:c2:a8:cb:0c:3e:dd:94:c3:ad:ab:f7:84:62:
80:f7:62:7f:50:41:92:30:52:6b:6a:78:3b:df:dc:
0c:2e:29:1c:21:1a:05:b5:b8:a9:0f:01:e6:bf:e3:
66:94:60:54:cd:4a:43:34:61:7c:49:67:b7:68:eb:
d7:8c:88:8f:fc:23:17:92:c7:e2:65:8c:51:62:57:
99:4e:d9:fb:1b:c0:33:89:92:62:04:a9:e2:c8:cf:
5c:53:56:ec:83:6c:e3:dc:8e:f4:53:32:c4:7c:7b:
7d:22:f8:38:07:43:67:9c:cc:1c:c8:fe:5e:b0:2d:
d9:e0:9c:12:df:56:51:70:86:55:a2:4e:97:ef:9d:
3a:79:69:65:e8:66:c0:dd:cc:fd:00:94:a6:91:51:
5d:96:e0:8c:cf:b8:87:e5:fe:ac:ee:a2:05:0a:a5:
42:06:48:3c:75:5d:18:75:fc:b0:70:33:ba:1c:5b:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:70:57:D9:B5:00:2D:7A:28:75:04:6D:96:BF:83:66:CE:57:60:D4
X509v3 Authority Key Identifier:
keyid:34:BB:38:4A:A9:D0:AA:C0:29:F2:B2:F4:01:5C:2E:31:8E:B8:AC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLs4SqnQqsAp8rL0AVwuMY64rKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/NLs4SqnQqsAp8rL0AVwuMY64rKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/NLs4SqnQqsAp8rL0AVwuMY64rKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7f:90:6c:db:bc:6a:be:ab:79:c1:45:ee:c3:e5:23:50:1f:
2e:c9:85:71:b5:24:b2:29:5f:55:18:fc:f7:d0:47:a0:72:00:
25:c5:a0:3f:29:ae:91:00:55:e4:23:5b:22:b5:38:b0:8b:ef:
11:71:78:cd:8e:04:f5:4b:a0:25:4e:f1:db:d1:86:7c:78:7d:
54:d2:28:3d:6c:b2:33:81:ad:cf:c6:2d:52:e4:b7:1c:a2:f9:
69:ad:ef:64:2d:dd:58:00:e6:51:ea:99:66:25:0c:e8:2c:79:
04:8d:71:c8:2c:89:aa:14:a0:81:03:47:4d:6c:f4:21:d6:f1:
dd:6b:27:a7:1a:ca:73:3d:bb:d8:7b:9f:b6:90:cc:e0:89:1b:
e7:c2:b2:d5:2a:eb:ff:65:08:c1:27:4d:d9:ae:01:47:b8:91:
37:21:9a:d9:5b:6c:bc:18:ce:3f:b4:1c:b1:91:33:d3:8f:5e:
ad:f3:78:3a:74:a9:69:83:4c:22:52:e4:a3:ea:56:d9:23:14:
ed:94:2e:08:70:b8:2e:e8:57:43:7c:b6:d4:75:5a:6f:d4:87:
ba:d4:8f:c3:f3:bf:40:bd:dd:a2:dd:55:41:55:a1:d6:28:96:
f3:f1:82:35:ab:df:a1:6a:cb:84:fd:47:3d:d5:83:53:15:c8:
34:4a:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:09 2025 by rpki-client