Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
File: NNTev4f2fLtEI3OBfn1i91ilms0.mft (raw, json)
Hash identifier: 7ntsZtwmu7brmZuFpSxTykQnh9ElIz5EQs9qzfvzPBw=
Subject key identifier: A6:98:A5:D1:BE:F5:93:33:D9:A6:CE:C2:3E:63:D7:ED:A9:A8:D0:F7
Authority key identifier: 34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
Certificate issuer: /CN=34d4debf87f67cbb442373817e7d62f758a59acd
Certificate serial: 018D8CAAECA4BFC5178E9222987E50AF4E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
Manifest number: 085F
Signing time: Fri 09 Feb 2024 07:00:28 +0000
Manifest this update: Fri 09 Feb 2024 07:00:28 +0000
Manifest next update: Sat 10 Feb 2024 07:00:28 +0000
Files and hashes: 1: MyGPkACskWy7-5CvBoEuOKTBknU.roa (hash: py4bK8mc0WK/SG3BQK9xOE8sXhHJUWNhnU33XYtYB9I=)
2: NNTev4f2fLtEI3OBfn1i91ilms0.crl (hash: opBzeQ28EZG3WHc2FFiFHZo4HCyCeHAsvvAEtrf64v0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:aa:ec:a4:bf:c5:17:8e:92:22:98:7e:50:af:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d4debf87f67cbb442373817e7d62f758a59acd
Validity
Not Before: Feb 9 07:00:28 2024 GMT
Not After : Feb 10 07:00:28 2024 GMT
Subject: CN=a698a5d1bef59333d9a6cec23e63d7eda9a8d0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:c7:ac:0d:b4:c1:10:bf:37:46:93:b7:56:
57:24:ce:7b:db:be:c6:24:84:7d:1d:a6:f8:97:ea:
9b:47:e1:ea:bb:d7:07:34:c3:50:c6:84:0c:e9:d1:
51:b0:90:5d:a7:99:40:36:8f:04:a3:31:ca:82:70:
6c:c2:7f:c8:98:00:3b:d2:9c:35:18:f2:d0:fb:11:
64:f8:21:c1:a3:a9:29:84:de:25:a8:e4:c3:8b:34:
44:84:d2:48:41:ef:cb:26:2c:43:23:9a:d0:6e:7f:
c6:c4:45:e7:55:c4:ca:b8:15:da:c4:84:3b:83:2e:
d3:14:43:f1:6e:55:fa:4c:88:77:3e:62:a7:76:64:
39:2a:7f:fe:28:01:74:c8:4b:98:a0:ce:6b:f6:67:
b8:44:9d:5e:37:f9:66:26:4d:8c:24:0b:d6:2b:c5:
f6:17:32:20:2c:4f:4f:2c:e9:4e:dc:b1:95:8b:e3:
f0:c0:ed:9a:9a:45:3a:7a:ed:c2:12:3a:1d:8f:b6:
3d:b2:c1:37:2d:8c:b7:f5:1d:ae:5c:5d:c2:47:b9:
04:2e:ab:fa:42:12:4d:96:84:74:55:a2:7a:84:c7:
c3:6e:77:18:1d:a8:3c:f5:45:4b:35:01:62:ec:4d:
84:8e:3b:30:f3:db:45:89:ed:b2:e3:3b:7e:82:81:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:A5:D1:BE:F5:93:33:D9:A6:CE:C2:3E:63:D7:ED:A9:A8:D0:F7
X509v3 Authority Key Identifier:
keyid:34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7f:3b:af:39:98:94:7f:74:cc:2f:ce:ca:ba:f5:4a:50:1d:
3b:aa:8a:3f:85:7e:3e:6f:b5:78:94:6a:75:d9:7e:53:0b:a8:
d1:a8:ad:ea:e9:58:c7:58:98:65:d4:84:ad:0a:42:60:46:8b:
88:6a:ba:a5:fe:b4:8e:65:74:86:6f:05:5c:50:12:1d:56:e8:
b0:7e:74:c6:58:d5:f1:1a:3d:50:eb:66:e1:c6:e7:48:5c:68:
0e:1b:4d:c5:ea:f4:ff:51:d2:60:52:fc:85:d1:97:99:0f:80:
6d:fa:46:10:b3:95:db:08:fc:0a:b3:2e:2d:d8:84:7b:7c:6f:
50:02:d6:78:55:5a:b5:5d:22:9d:3c:be:9b:ab:fa:52:c5:d1:
43:5a:e7:36:d7:97:ed:c2:8f:9e:df:3d:a0:84:94:79:82:6d:
01:c1:a6:55:a9:0a:15:fe:cc:48:03:56:a5:8b:27:a2:f4:ba:
e2:03:f6:e8:97:c0:94:35:39:04:cc:3b:81:96:fb:e6:ef:40:
7e:f5:2f:97:50:3a:01:58:13:7b:9c:ad:8f:46:8f:a8:a6:e6:
87:ca:c6:a5:e3:c4:07:50:4e:02:96:7c:d4:dd:7e:50:be:c2:
65:4d:2a:32:1a:0e:f0:7e:3a:f1:9f:6b:8d:4f:25:19:de:4f:
01:28:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:19 2025 by rpki-client