Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: cRVIddyeRXChIo85VU/pX83C5t4YzZwMqnqZSedsoVI=
Subject key identifier: 86:D2:3B:9D:67:9B:26:0A:42:FC:DA:6F:6D:48:B3:C2:CA:E1:93:09
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 0195E07D5D3F9D3EF5AC9F0AD068DE4D0815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 12CE
Signing time: Sat 29 Mar 2025 06:01:06 +0000
Manifest this update: Sat 29 Mar 2025 06:01:06 +0000
Manifest next update: Sun 30 Mar 2025 06:01:06 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: Y3QVp38FNZQYfnXgWwLWZQztkXLRazPGD4iRv33Icsw=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:5d:3f:9d:3e:f5:ac:9f:0a:d0:68:de:4d:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Mar 29 06:01:06 2025 GMT
Not After : Mar 30 06:01:06 2025 GMT
Subject: CN=86d23b9d679b260a42fcda6f6d48b3c2cae19309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:46:59:45:1a:d8:41:2c:37:9f:2e:ee:05:
19:86:eb:33:bb:55:76:c4:19:2e:56:af:d4:60:85:
d6:c8:c5:84:4d:1c:1b:0c:d1:dc:9a:88:ca:61:89:
14:70:07:3f:6a:35:fb:53:d8:6e:d6:b4:3f:41:a0:
b5:9a:1f:87:04:e4:00:52:3c:0d:cb:82:6c:70:fb:
31:f0:69:b4:7e:78:47:0e:78:3f:b7:f9:3d:3c:b6:
ff:0e:b8:d7:75:01:f8:14:05:6b:d8:03:06:88:c9:
c0:37:95:59:f8:b7:d3:45:1a:77:8b:8c:b8:35:b7:
18:5b:f4:4a:ec:b0:0d:5a:bc:17:b5:89:dd:15:fb:
68:09:89:81:92:b7:97:91:b0:68:d2:50:a1:cb:2d:
34:03:78:96:1c:88:ab:2c:21:b7:5f:0b:a5:52:54:
b5:d9:19:7f:24:2c:c9:64:ac:63:b6:50:39:08:82:
00:f5:c2:a2:d6:ee:0f:15:a0:97:57:cb:18:69:f5:
f2:b3:cf:72:50:0d:23:93:df:4f:0c:e5:dc:57:5b:
bd:ca:fa:11:2b:77:74:cf:c4:41:ef:7d:de:e1:64:
19:9f:c5:f4:35:b3:1b:60:88:72:d3:66:47:ed:93:
e2:df:88:bd:d1:45:b7:a3:a6:29:8b:cf:f2:c2:b7:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:3B:9D:67:9B:26:0A:42:FC:DA:6F:6D:48:B3:C2:CA:E1:93:09
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:aa:85:2c:94:2e:e3:a6:ef:3b:ac:4d:20:01:ce:1c:1c:85:
7e:31:ad:21:f1:c8:19:68:6d:46:78:35:24:a3:05:dc:21:1d:
08:c4:4d:07:30:a6:0a:45:1e:33:42:df:5b:c5:dd:0d:83:d3:
ce:35:3f:26:2d:09:87:eb:b7:bd:d7:37:60:2d:32:ec:c2:2b:
55:5d:fd:cc:3c:8e:89:84:fd:0b:24:10:da:c6:53:0e:79:57:
47:79:87:8d:6d:37:e5:7e:32:6c:14:7a:9f:35:41:51:83:a1:
2e:e8:27:e8:e9:a0:e1:e6:66:82:e2:ab:7e:d0:95:09:3e:b1:
7a:35:78:b8:82:34:61:8d:1f:5d:ed:27:e2:a5:d8:47:63:29:
f4:c4:72:c8:81:59:de:cf:b1:69:d1:63:02:3b:44:23:04:75:
f6:22:6d:3d:29:39:8d:07:35:a5:fe:76:41:6a:b3:15:d8:98:
09:a1:13:2c:29:15:49:fa:d0:26:c4:22:79:43:e2:0d:91:a4:
b0:b7:aa:fa:50:61:79:db:24:71:fa:e3:5b:55:d7:b2:e9:d8:
57:a2:82:ba:7d:90:62:df:28:73:cd:55:69:54:40:cd:17:1b:
aa:c2:b9:5c:e6:4e:35:a3:15:05:6f:63:73:04:cb:49:9f:a7:
ad:de:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:24 2025 by rpki-client