Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: oO8ZnmIB742q4D4SzCWczDXhQ83By3hzGuH79JkQ8KY=
Subject key identifier: 37:23:C7:F5:12:8A:B5:F9:62:E2:26:28:0B:2C:18:88:D3:65:FD:C2
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 0195E1227EC6BB2DBDC7F6832F48621BA633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0A36
Signing time: Sat 29 Mar 2025 09:01:28 +0000
Manifest this update: Sat 29 Mar 2025 09:01:28 +0000
Manifest next update: Sun 30 Mar 2025 09:01:28 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: Pr6zXNPsop3FCV9YaWYQA1j8K11s8EDeI71cYYyBixs=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:7e:c6:bb:2d:bd:c7:f6:83:2f:48:62:1b:a6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Mar 29 09:01:28 2025 GMT
Not After : Mar 30 09:01:28 2025 GMT
Subject: CN=3723c7f5128ab5f962e226280b2c1888d365fdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:13:5c:52:a5:4c:72:85:d0:10:3f:b3:1d:
30:59:b3:81:1e:33:36:07:9d:2b:7f:e1:f9:35:4d:
1a:aa:58:ea:a3:c9:5e:26:ba:e2:ac:f1:1a:5c:ef:
db:66:be:c5:72:ef:2c:0f:1c:5e:97:ac:a6:c3:7b:
09:2f:aa:a2:44:7c:68:77:44:af:9d:5d:18:a0:b8:
af:a7:79:5d:df:e9:ab:e7:f2:55:89:34:50:f9:2e:
05:77:1b:19:1a:2f:51:74:d2:91:b9:85:ec:91:23:
93:e9:e9:11:aa:c2:35:d1:ba:d7:4a:af:8b:70:d2:
70:4c:44:3a:75:1d:97:4f:51:7e:eb:15:75:f7:24:
8d:a9:81:bb:d2:48:3f:4c:26:73:81:9b:6c:32:30:
30:3b:73:cf:a6:1a:7a:9d:3f:26:1d:e6:7b:2d:ec:
c8:e9:b1:d0:ba:7e:13:77:7a:d1:74:b1:92:4b:33:
81:58:af:3d:08:c6:e7:22:db:0c:cf:3e:00:4a:a1:
c4:fc:08:81:71:8e:78:3e:2f:19:00:30:2e:b5:bc:
ed:be:0c:7a:a9:b3:6f:a7:35:b7:a7:e6:a7:94:ea:
91:fa:a3:15:5a:1f:b6:e6:e8:33:d7:55:4d:96:49:
c8:f2:0d:83:6e:aa:b6:d3:d9:3e:ff:15:46:22:6c:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:C7:F5:12:8A:B5:F9:62:E2:26:28:0B:2C:18:88:D3:65:FD:C2
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2a:7b:83:c4:95:69:7d:f5:7c:ad:f9:ad:c6:73:bd:60:33:
67:4b:4a:79:58:67:7d:37:58:c6:ad:e3:2f:5a:fb:8c:90:f0:
6a:56:8b:72:24:dc:c5:8f:ab:0b:50:fd:4d:e9:32:3b:64:43:
a0:35:f9:ce:c3:5a:c2:a2:a7:72:e0:76:3b:8b:1e:b9:a4:11:
82:09:61:20:6e:7a:cb:d2:d1:ee:33:94:3b:b4:8f:cd:ac:d3:
e2:46:27:bc:28:46:4d:4d:76:6f:01:1c:ae:23:28:b6:1f:ff:
30:d1:8c:1d:9b:ec:48:4d:4a:be:27:bb:53:f7:94:6f:df:1b:
06:46:59:bf:3d:51:b2:44:bb:48:ca:50:3a:eb:70:30:0b:2d:
86:10:2c:d0:1a:5c:1a:74:b9:df:23:bd:d0:25:b3:bc:26:4d:
9d:52:b4:b3:96:98:b2:a0:bc:72:e5:d6:d5:92:da:e8:2a:3d:
33:dc:14:c4:f3:4b:e8:e9:b1:d6:1a:a8:e6:43:6f:dd:f3:a2:
db:a7:fd:94:3b:0f:c3:fe:45:13:b9:c3:64:04:58:6a:50:5b:
e2:08:38:ac:9a:4d:1a:08:4c:72:b9:eb:9f:d6:e1:3a:b3:7d:
5a:23:07:04:71:46:3f:c6:05:a9:af:7a:2d:7e:20:05:00:d9:
57:3c:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:24 2025 by rpki-client