Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/NANb92Ycu1JJACZPQyKH_Q97n7E.mft
File: NANb92Ycu1JJACZPQyKH_Q97n7E.mft (raw, json)
Hash identifier: phfie59mCp7OHV0zvm7XgED/iWBE6Bffh8pSlAghJjg=
Subject key identifier: DF:0B:C9:A2:05:C1:3D:ED:39:E1:B0:1E:E4:01:22:5C:59:8B:D6:FF
Authority key identifier: 34:03:5B:F7:66:1C:BB:52:49:00:26:4F:43:22:87:FD:0F:7B:9F:B1
Certificate issuer: /CN=34035bf7661cbb524900264f432287fd0f7b9fb1
Certificate serial: 0498C503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NANb92Ycu1JJACZPQyKH_Q97n7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/NANb92Ycu1JJACZPQyKH_Q97n7E.mft
Manifest number: 05F5
Signing time: Wed 06 Apr 2022 22:19:43 +0000
Manifest this update: Wed 06 Apr 2022 22:19:43 +0000
Manifest next update: Thu 07 Apr 2022 22:19:43 +0000
Files and hashes: 1: NANb92Ycu1JJACZPQyKH_Q97n7E.crl (hash: wWl86c/j4MpVD+2mFWI3REpFAN4YSpvnJxCnTGUrJnM=)
2: lz5WGT-HSAH31n8Ise78k0AsYVs.roa (hash: qwmPynDWTBJUhKrxZKFwW3csiK2PAeaS9CbpeGKFdiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77120771 (0x498c503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34035bf7661cbb524900264f432287fd0f7b9fb1
Validity
Not Before: Apr 6 22:19:43 2022 GMT
Not After : Apr 7 22:19:43 2022 GMT
Subject: CN=df0bc9a205c13ded39e1b01ee401225c598bd6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:99:7f:57:bd:16:6c:9f:aa:bc:35:47:16:
ff:e7:26:b3:0b:7c:d3:30:80:0b:59:70:e8:e3:c6:
cd:5a:ba:51:38:df:4a:6b:5f:30:59:d0:d3:41:1c:
da:f3:8a:34:bc:61:36:7f:6e:36:ff:37:28:61:d6:
74:ab:81:49:d2:ed:2a:ca:de:c1:49:4c:44:d0:a0:
b2:fd:f9:b3:1d:c5:57:cb:47:7d:f3:53:31:3e:2b:
24:2d:de:1d:d0:17:77:5e:42:9d:57:82:73:f3:a5:
bd:d1:78:be:12:53:57:64:42:27:56:14:0f:59:cb:
72:b1:60:5e:08:61:dd:01:a7:25:b3:59:47:c6:ef:
9a:ce:55:75:f3:7d:d7:a3:90:a0:0a:0b:bc:dd:76:
c3:54:3b:60:38:d1:10:65:a4:b9:4e:3a:da:f4:b4:
70:ad:0e:6b:0d:2a:61:b3:55:dc:41:62:36:12:b5:
00:12:c1:76:f7:35:04:fb:aa:45:0b:90:b8:22:61:
65:af:a2:c7:af:fc:d3:6e:10:37:26:e0:28:0d:53:
42:2f:6f:35:ee:4c:13:4c:26:14:cb:19:fc:43:c7:
5f:ff:60:89:ad:d0:1f:00:b8:33:49:b2:b1:d0:f0:
2d:0e:6e:fe:67:d8:53:e3:ce:65:6a:e7:2b:c4:57:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:C9:A2:05:C1:3D:ED:39:E1:B0:1E:E4:01:22:5C:59:8B:D6:FF
X509v3 Authority Key Identifier:
keyid:34:03:5B:F7:66:1C:BB:52:49:00:26:4F:43:22:87:FD:0F:7B:9F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NANb92Ycu1JJACZPQyKH_Q97n7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/NANb92Ycu1JJACZPQyKH_Q97n7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/NANb92Ycu1JJACZPQyKH_Q97n7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7c:61:f4:06:bf:98:1a:e7:9d:7b:07:c2:3c:c6:4a:12:d9:
38:e2:17:08:5c:b9:8e:c3:ab:5b:ae:3a:21:62:5d:15:a8:ed:
8d:d6:ae:06:5e:da:6b:42:05:33:22:6e:55:bb:d7:bd:a8:a2:
5c:7e:a7:2b:ea:91:8f:29:29:87:84:51:20:32:95:97:36:51:
af:0d:17:21:af:ac:ca:c5:07:77:21:4a:54:44:56:e2:a7:a4:
c3:a7:f5:3f:93:d1:11:6e:1c:04:71:a4:5b:58:f3:5b:c5:d5:
d0:68:c4:e5:54:3f:cf:dd:39:d1:31:0b:1b:b9:19:3e:82:66:
dc:89:67:c6:93:6c:e0:df:f1:e9:23:96:63:38:7d:df:9e:4e:
e7:c9:76:55:ec:b8:98:1c:fe:bc:26:91:55:20:dc:00:e9:7c:
81:e6:ce:f1:6a:6a:48:59:de:25:42:38:b1:db:84:f6:f5:be:
cc:c6:60:3e:55:3b:ec:8a:7d:35:1c:9c:6d:89:08:de:f5:d3:
b0:7d:e6:ec:07:76:b1:39:47:bb:94:16:02:4b:62:90:36:fe:
ef:a3:18:97:89:c2:e2:c6:64:78:8b:a1:6a:f3:6d:22:8d:5b:
e3:0f:79:b9:9e:04:d5:f7:e3:9a:07:08:ca:0d:25:7b:40:7a:
d3:80:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:45 2025 by rpki-client