
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
File: NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft (raw, json)
Hash identifier: TVlKW8TtY/1dFSg9obx8H2wFHmC3LK0GPQ//VeRmoZc=
Subject key identifier: A3:F0:19:7E:C0:29:C1:5D:E2:1F:49:BA:6E:82:9E:43:15:36:BF:07
Authority key identifier: 34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
Certificate issuer: /CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Certificate serial: 0192B751DDBFEEF2BEC3FC930F6D39EA6E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
Manifest number: 0802
Signing time: Wed 23 Oct 2024 03:00:48 +0000
Manifest this update: Wed 23 Oct 2024 03:00:48 +0000
Manifest next update: Thu 24 Oct 2024 03:00:48 +0000
Files and hashes: 1: AEC7cGOJMy9lVfnous4f1hekmCE.roa (hash: OmkWM/Ru9p6cXGmUz6KNbbeRmfwyx8i9BUzKyTxp2Hw=)
2: DKJzxVdxG4XR5l7FxXAAyx5I1Rk.roa (hash: 4ghl70yHJAoVjEKNWqwj051SvU2leduNg3iYVO+DazY=)
3: KWKUox9sOQ5-9_8WM4SyrLb8sqc.roa (hash: KX63hO3B5GE4PurZk/chalvF9oo17eptTPmHSE8hLLE=)
4: NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl (hash: U/yQk6QRw7hHkFK/h44xagSciskMw6exeCKIwj+yyOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b7:51:dd:bf:ee:f2:be:c3:fc:93:0f:6d:39:ea:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Validity
Not Before: Oct 23 03:00:48 2024 GMT
Not After : Oct 24 03:00:48 2024 GMT
Subject: CN=a3f0197ec029c15de21f49ba6e829e431536bf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:49:6d:88:0d:f8:92:b1:ee:62:d2:94:7d:
5c:23:36:af:cb:7f:29:00:02:8f:62:c0:3c:18:16:
fd:34:9d:03:ed:4b:26:25:fd:32:3f:32:10:8e:f5:
5b:dc:02:9f:cb:44:79:d7:22:ea:5b:78:55:30:42:
d8:bc:78:a2:dd:cc:46:44:45:35:ea:05:23:d2:db:
76:4f:0c:21:57:5a:ca:2f:59:3f:ff:85:43:24:b0:
6b:cc:40:b1:95:94:2c:8f:1d:2c:a2:f0:50:48:d6:
5c:c2:dc:89:a7:b7:24:6c:31:31:26:17:29:11:29:
78:5d:2b:a0:ed:d2:b5:36:dc:17:09:1d:6e:94:e5:
38:76:c9:31:40:7e:d3:56:68:79:aa:cd:fe:8b:f3:
51:99:68:7a:a4:12:67:4e:98:e4:7e:71:6c:41:33:
59:22:d4:2e:13:4e:03:06:b9:80:a9:aa:76:26:57:
f2:c9:9e:1d:d5:cc:c0:9f:92:6e:6b:07:a6:7e:8b:
ec:36:8f:de:c4:02:3e:a2:28:f7:20:18:83:73:c1:
f5:6a:4a:0e:6e:c1:55:73:dd:90:16:14:43:79:ef:
fd:e5:40:b0:62:c4:52:5c:a6:a0:a4:1c:76:0b:50:
3f:36:29:4c:31:63:aa:21:bb:2b:16:08:44:0a:42:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F0:19:7E:C0:29:C1:5D:E2:1F:49:BA:6E:82:9E:43:15:36:BF:07
X509v3 Authority Key Identifier:
keyid:34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f5:5c:48:8f:c4:fc:4d:db:69:e4:8c:88:56:b6:63:9c:ff:
d3:90:4e:86:c5:30:c4:0a:44:10:2c:39:ed:24:21:57:36:33:
f0:b1:2f:ae:87:0f:ed:af:2a:3b:f4:0d:fe:e5:80:af:e2:ee:
3b:4c:8c:d7:b3:89:81:ce:52:0f:cc:4f:57:cb:92:97:5e:7f:
6c:34:70:d9:c8:e3:a7:a9:a8:33:69:8c:7a:f0:06:55:d0:22:
88:92:c3:b8:28:c0:5d:1a:89:c6:aa:b3:3c:7d:b1:50:2a:c9:
8d:b1:94:3d:d0:a8:8b:25:51:22:09:6a:0a:09:f7:c9:27:c9:
1b:fc:2c:4f:e3:18:21:59:d5:ed:7f:a3:57:e3:44:4e:5f:62:
f3:ae:d6:88:ab:a1:0f:ec:17:e4:18:e6:79:43:66:a9:5e:4a:
4a:57:06:ac:a5:15:c1:c9:09:9b:93:50:b0:22:b2:03:40:d1:
3b:6c:ed:a3:3c:65:c0:b1:d4:ba:cf:06:4a:3c:5c:d4:6b:61:
1d:07:7c:41:c2:de:3c:81:23:ae:ad:22:68:a8:ed:01:d7:47:
ad:99:d9:c6:6b:2e:23:bc:c6:c6:5c:0a:e8:e0:57:61:15:0f:
c5:56:77:d3:f8:bf:7f:02:32:26:0b:ef:00:e1:cf:81:dd:5d:
58:1e:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:13 2025 by rpki-client