Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
File: NFuHElrLAlH6z9jAqVtIvCJSIUY.mft (raw, json)
Hash identifier: 9malOAdWj/VjNOInmqdAqqLUwHW4U6nxmtGuytuS9gY=
Subject key identifier: 03:DC:58:FA:E8:CF:E2:7E:AF:50:5B:4C:B9:E2:83:EF:F7:63:D5:53
Authority key identifier: 34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
Certificate issuer: /CN=345b87125acb0251facfd8c0a95b48bc22522146
Certificate serial: 01965C4C4DD7BE3CAB19DB39EFFE90F0D998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
Manifest number: 097C
Signing time: Tue 22 Apr 2025 07:00:26 +0000
Manifest this update: Tue 22 Apr 2025 07:00:26 +0000
Manifest next update: Wed 23 Apr 2025 07:00:26 +0000
Files and hashes: 1: CBXANdTAH6lHnoZ5K2StzbAV7NQ.roa (hash: PznuBPAbTWwdWPU+SDJg6l9STDdceLsRjWJ3izhl9/o=)
2: NFuHElrLAlH6z9jAqVtIvCJSIUY.crl (hash: Z2HkQnIpQu03bFkdpm+a3Co+eOApYistStmwNwn+jjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:4d:d7:be:3c:ab:19:db:39:ef:fe:90:f0:d9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b87125acb0251facfd8c0a95b48bc22522146
Validity
Not Before: Apr 22 07:00:26 2025 GMT
Not After : Apr 23 07:00:26 2025 GMT
Subject: CN=03dc58fae8cfe27eaf505b4cb9e283eff763d553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:8a:d0:6f:b3:1d:94:a0:5a:87:5f:9e:a9:
40:79:68:7f:df:8b:b3:a3:23:ad:b3:c6:42:13:d4:
5d:fd:72:9a:a3:cf:7b:9f:07:66:a2:94:75:2f:0a:
62:ef:41:1c:64:7e:88:c3:1f:e6:1a:ec:57:93:17:
75:0b:83:40:56:b2:08:76:83:56:e4:b5:2c:35:d3:
71:2e:0e:76:1a:10:e6:3c:76:a3:dc:45:72:72:02:
70:7a:31:f6:0e:51:13:48:61:48:4f:98:e4:ab:11:
ae:8d:3f:6f:28:13:fc:e5:8f:04:e9:38:81:89:2e:
5e:3d:01:dd:39:45:e5:38:54:94:95:aa:3e:3a:72:
a7:40:87:45:a2:1a:e5:60:e7:0e:39:3f:8d:f1:27:
61:1c:ad:f0:20:66:7d:3e:bd:d4:4e:36:13:54:2b:
ea:1e:3a:a1:c5:a4:6c:76:fc:cb:c4:8d:d7:36:db:
61:5a:9d:d0:52:29:6c:bd:fb:34:80:a7:c1:dc:59:
4e:c8:45:80:3d:bd:76:67:70:90:b7:31:b7:58:f5:
70:c5:6a:ff:27:d4:e7:2c:ac:8d:88:2c:54:3a:83:
32:b8:85:98:ee:a3:bd:2f:be:e8:e9:a9:91:0f:0d:
22:9a:24:dc:69:c6:3b:ca:97:f9:82:20:6a:64:31:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:58:FA:E8:CF:E2:7E:AF:50:5B:4C:B9:E2:83:EF:F7:63:D5:53
X509v3 Authority Key Identifier:
keyid:34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:14:4c:cc:37:f3:aa:9b:c5:75:ea:b9:c7:8e:dc:f5:33:d9:
fd:99:f1:c6:ba:26:7c:5d:3c:f8:08:4c:5d:81:3d:45:e5:63:
e9:91:ef:a3:78:9b:be:30:a0:91:db:81:15:1e:e3:03:df:26:
e4:7e:49:fa:f4:51:47:9c:23:f6:b5:19:1a:a1:f6:cc:77:fa:
4b:34:a4:91:3c:4a:db:19:a2:05:41:6d:06:56:de:7c:5c:2e:
70:32:dd:86:1c:ae:21:80:4a:1d:80:f9:fb:7a:8d:9c:c1:cc:
b2:f8:37:6f:f2:15:cd:f5:24:ff:74:4c:00:8f:7f:06:34:1a:
09:cc:c7:65:b0:87:ed:16:e1:82:ac:ba:1c:5b:5c:77:66:44:
e8:2f:63:90:95:ca:1a:5e:23:43:8a:05:4b:e4:c4:bd:71:82:
23:98:60:3c:11:23:17:90:d8:b0:d5:6e:b2:47:57:cb:b6:20:
d1:95:a1:50:c2:ee:60:ec:5d:fb:99:7a:e7:60:d3:03:d6:c5:
dc:6a:51:3d:8b:02:d6:ef:43:e8:ff:4a:ce:f3:c9:d6:9b:cf:
5f:cf:ca:a8:16:43:85:ac:a2:a3:52:0e:92:ff:2b:3b:3c:c3:
89:45:d5:8d:a0:3b:3d:0c:13:5f:31:b4:e0:bf:ef:f9:03:9f:
6c:36:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:06:09 2025 by rpki-client