Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d9afe7-cada-44b6-a5e7-0015ccc12cc7/1/NQ_iDr_HVFgnlXCHzHIcxvO22zU.mft
File: NQ_iDr_HVFgnlXCHzHIcxvO22zU.mft (raw, json)
Hash identifier: 78N0+ckkmBeagp6DMBEJg9zFLorb5B2ppbd7VQ2XIo4=
Subject key identifier: 40:D4:58:6D:D5:8F:A4:25:34:F9:F9:B4:B2:09:6E:7D:DA:1E:16:2B
Authority key identifier: 35:0F:E2:0E:BF:C7:54:58:27:95:70:87:CC:72:1C:C6:F3:B6:DB:35
Certificate issuer: /CN=350fe20ebfc7545827957087cc721cc6f3b6db35
Certificate serial: 018B5F335351E144F18A2E18DC758CBD1E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQ_iDr_HVFgnlXCHzHIcxvO22zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d9afe7-cada-44b6-a5e7-0015ccc12cc7/1/NQ_iDr_HVFgnlXCHzHIcxvO22zU.mft
Manifest number: 085C
Signing time: Tue 24 Oct 2023 01:01:20 +0000
Manifest this update: Tue 24 Oct 2023 01:01:20 +0000
Manifest next update: Wed 25 Oct 2023 01:01:20 +0000
Files and hashes: 1: BQf71Me-u5BSrqoZ6oVBIErXyUY.roa (hash: +srWlfTDyMJRfIuPI+vHs9PNS9vYOLPCuDF2U2gLSIg=)
2: NQ_iDr_HVFgnlXCHzHIcxvO22zU.crl (hash: /fQxz/qxOKtCHRznaACAarg+shDK3V/yfZd6y5hPFC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:33:53:51:e1:44:f1:8a:2e:18:dc:75:8c:bd:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350fe20ebfc7545827957087cc721cc6f3b6db35
Validity
Not Before: Oct 24 01:01:20 2023 GMT
Not After : Oct 25 01:01:20 2023 GMT
Subject: CN=40d4586dd58fa42534f9f9b4b2096e7dda1e162b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:f5:94:55:c6:7c:84:98:48:2c:a3:32:92:
d9:12:32:78:b9:c2:1d:ba:40:27:d7:86:06:2f:08:
b7:bc:c2:58:18:28:19:d6:c0:ec:eb:14:94:79:f0:
9e:96:07:4c:ae:5c:75:ca:dc:87:43:c8:4b:ec:28:
df:ee:8c:fb:e2:be:f5:6c:12:0a:fa:5d:c2:7f:97:
c7:20:de:9c:c3:c7:55:db:6e:a9:6b:3b:a3:5e:b6:
b6:db:30:5f:5a:fe:28:16:9e:4a:8f:d1:a9:bf:39:
4d:39:1c:72:b7:08:f6:e5:44:b2:d5:4e:d6:1e:5d:
c2:9c:54:2e:da:0e:2d:35:40:51:42:4a:be:eb:6d:
e0:57:1b:ad:a2:35:a5:d4:80:75:53:3b:5c:28:29:
40:7f:b2:66:22:35:cf:70:a3:23:09:6b:d0:b7:2a:
17:a0:4e:7c:29:13:11:2f:d5:e4:c6:bd:45:db:be:
34:15:ab:4f:40:03:98:87:36:08:c6:92:9f:aa:9a:
d8:94:6a:bd:e6:8f:c9:12:af:c6:87:61:6a:8e:3f:
be:97:38:26:15:48:ca:53:e3:2b:d1:3b:14:77:1e:
c3:2d:9a:71:94:f3:a1:96:ae:7a:60:b1:15:dd:30:
db:fa:7a:b4:94:7a:47:e3:89:a6:7f:30:5f:5b:e8:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D4:58:6D:D5:8F:A4:25:34:F9:F9:B4:B2:09:6E:7D:DA:1E:16:2B
X509v3 Authority Key Identifier:
keyid:35:0F:E2:0E:BF:C7:54:58:27:95:70:87:CC:72:1C:C6:F3:B6:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQ_iDr_HVFgnlXCHzHIcxvO22zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d9afe7-cada-44b6-a5e7-0015ccc12cc7/1/NQ_iDr_HVFgnlXCHzHIcxvO22zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d9afe7-cada-44b6-a5e7-0015ccc12cc7/1/NQ_iDr_HVFgnlXCHzHIcxvO22zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:93:e8:98:f0:ef:e3:46:62:80:32:35:97:8e:53:9b:18:16:
ae:e4:e8:0f:e0:5e:1c:54:ab:45:59:39:ab:eb:98:c3:c5:ff:
84:46:b3:c7:4b:6f:08:fc:7f:6d:e3:4e:3c:e3:b0:5b:9d:54:
5d:dd:b8:ff:4b:14:fa:12:ef:cb:e0:40:3c:b3:2a:8d:28:4a:
a9:ca:6b:0d:ca:65:d6:54:78:32:67:64:b4:6b:e9:d1:52:a6:
76:53:b2:d8:f3:fb:31:1d:1a:a3:c7:5b:20:c8:65:7f:bc:72:
4a:5b:3d:73:c3:14:f5:e4:08:26:62:a1:78:f7:ca:fb:2c:1d:
42:37:e5:6f:7b:7f:74:4d:31:e8:3d:c6:5a:1c:61:a5:71:7b:
2a:39:f9:53:90:a9:3c:66:cd:76:8b:78:ab:54:5f:cc:c4:fb:
9f:ce:fb:17:bd:5a:4e:34:d3:e8:dc:bc:3a:fc:e0:d3:da:6d:
04:9c:36:22:61:2b:0e:f1:72:69:46:3d:79:9e:61:11:f0:cf:
7e:96:0b:a9:2b:ff:ca:27:27:18:68:77:f1:e2:cf:79:b8:25:
28:88:3e:2f:0f:01:87:9a:3a:58:85:ea:78:a2:5a:0c:4a:88:
b3:71:1e:44:9e:b1:4e:49:91:34:08:3b:3e:fe:da:1e:1f:2d:
c1:81:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:55 2025 by rpki-client