Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft
File: NO7jne0Dsqb9XijIisckTO1DKdg.mft (raw, json)
Hash identifier: jaliQ6TG8JZD2IxjkgoU6lENrIR37V2osN84In4+WXo=
Subject key identifier: 02:E3:86:C4:CF:2C:36:D3:FE:E3:B6:47:06:DA:0A:69:BF:38:8B:71
Authority key identifier: 34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
Certificate issuer: /CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
Certificate serial: 01932F0DB81B651AA170B96EDC2626375E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft
Manifest number: 135A
Signing time: Fri 15 Nov 2024 09:00:48 +0000
Manifest this update: Fri 15 Nov 2024 09:00:48 +0000
Manifest next update: Sat 16 Nov 2024 09:00:48 +0000
Files and hashes: 1: A5koqhUzR29ZC6P2TVJc98EW0tw.roa (hash: lngzSIFkfWoMQ5qdyzzDdZhOfv+pSp9UEIU2tQYCtQw=)
2: NO7jne0Dsqb9XijIisckTO1DKdg.crl (hash: hZlemiWIZgNwIFic89dL8XbNUx6tcO+JwEYB3rqSEig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:0d:b8:1b:65:1a:a1:70:b9:6e:dc:26:26:37:5e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
Validity
Not Before: Nov 15 09:00:48 2024 GMT
Not After : Nov 16 09:00:48 2024 GMT
Subject: CN=02e386c4cf2c36d3fee3b64706da0a69bf388b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0d:56:af:ab:e4:19:d1:90:9b:58:83:05:ed:
d3:56:81:73:07:69:2a:4a:e3:62:16:cb:98:28:71:
02:fa:3f:e6:ce:80:e9:c5:eb:99:e6:be:0d:e3:6a:
cd:45:e7:aa:f2:91:08:7a:0c:34:ad:52:0f:eb:b0:
af:e1:dd:01:b2:68:ca:f0:27:b5:b9:81:18:f5:9d:
b0:73:08:f5:c9:0e:54:db:07:cd:c8:fb:8e:21:c8:
1d:01:02:99:dc:44:62:bc:92:3e:e3:ca:41:ed:30:
46:5d:52:2e:dc:68:0a:19:07:58:db:23:99:ee:d0:
6e:47:b4:28:2d:a8:71:95:75:2e:1a:d7:3d:fb:78:
75:09:ef:2c:7a:98:7d:28:76:64:05:d1:85:95:f2:
c7:3a:da:0e:d2:91:97:50:18:cc:5f:14:27:b9:63:
bc:70:87:4f:26:5d:9b:55:9d:98:54:da:e1:71:bc:
f2:5e:38:4c:83:c4:3e:b3:d2:42:e9:39:cf:11:93:
b9:69:22:d3:f5:ef:c7:1a:94:ed:da:fb:e0:ab:45:
39:d0:3e:47:6f:2e:3f:ee:67:48:11:cb:b0:9b:63:
a1:1b:f4:2d:f7:b1:88:ae:64:8b:4e:28:bb:3c:e6:
9f:21:e6:8d:72:4b:df:de:b1:d2:da:6e:90:b0:20:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:86:C4:CF:2C:36:D3:FE:E3:B6:47:06:DA:0A:69:BF:38:8B:71
X509v3 Authority Key Identifier:
keyid:34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:07:d3:b4:be:3e:b3:d0:db:d7:ef:a0:e8:9f:eb:91:f2:e3:
32:49:cc:b1:bc:6a:31:32:65:c1:54:d3:fd:e7:08:45:14:27:
62:13:e3:33:3e:30:36:2d:b2:91:47:eb:95:6e:a3:e9:d9:21:
26:1a:3b:73:8d:e1:e5:28:ef:d2:b7:47:f1:15:23:50:fb:da:
62:80:60:d5:00:06:65:52:4f:db:42:43:29:89:b2:10:62:c7:
81:f2:18:98:73:a2:ff:8c:9f:d8:13:e6:fc:49:60:db:10:5a:
e2:2b:43:31:0c:15:3b:de:6b:86:ce:2b:f4:a9:31:e4:85:b8:
2d:e3:b3:ba:bd:8d:87:96:75:15:74:52:02:37:d9:6c:58:df:
e3:98:43:bc:de:b9:dc:b4:b0:7f:d4:97:44:1f:58:8a:69:0f:
57:3a:2f:46:d7:25:ab:f6:47:91:31:c1:02:ea:6a:f1:8d:0f:
8d:77:3a:9d:e7:8c:71:ff:9e:76:67:6a:25:28:b2:9a:45:1b:
f7:c8:64:3e:31:b9:f6:07:95:e3:98:a8:34:c3:98:00:97:b8:
ba:54:66:17:23:20:a1:10:9b:51:39:43:cd:46:2f:e2:61:d7:
ec:fb:89:19:f1:23:13:79:3f:36:e6:80:77:bd:1c:55:95:f9:
1c:c8:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:03 2025 by rpki-client