Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: NwGl5cVCkHA8Z3PRde+FBccjkC5axxARByMrSk2b83E=
Subject key identifier: EB:91:27:DA:0A:BD:6B:98:8A:42:CD:6D:9D:C3:D0:BF:D4:70:7A:87
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 01962E99221465F490B5E46D049731C65D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 2F
Signing time: Sun 13 Apr 2025 10:01:49 +0000
Manifest this update: Sun 13 Apr 2025 10:01:49 +0000
Manifest next update: Mon 14 Apr 2025 10:01:49 +0000
Files and hashes: 1: 5HrGsXGpXPGTggrYI32PqK2khbw.roa (hash: 03NS1LF/7zpFWo7wQubB17sub76Yvqg3XO75dLmad6I=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: O0zARNCscNVPXX3Fy1A+sPHvlbpT1DMd2jwB7DZpwyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:22:14:65:f4:90:b5:e4:6d:04:97:31:c6:5d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Apr 13 10:01:49 2025 GMT
Not After : Apr 14 10:01:49 2025 GMT
Subject: CN=eb9127da0abd6b988a42cd6d9dc3d0bfd4707a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:20:c1:99:9d:e7:09:b9:a6:48:ba:a9:28:
5c:5b:87:c3:77:80:94:61:30:3e:2f:aa:f5:00:a5:
72:6d:41:98:08:4b:fb:2a:a7:e3:e7:55:b6:d1:f6:
ba:28:37:87:da:e9:3a:3d:30:49:40:90:da:5e:7e:
d1:32:59:b8:ec:30:6f:2a:9b:85:80:ac:08:36:2b:
72:33:3d:c2:a9:b1:0a:97:3e:8d:9f:b0:ec:69:cc:
74:a0:3b:e2:bc:2c:f2:5d:4c:93:7f:ce:8a:b6:1c:
20:29:ab:08:f5:8f:4b:9c:99:d3:24:96:30:b0:6f:
9d:6c:b8:95:b3:7a:91:52:3b:87:ef:68:27:79:8c:
14:78:43:dc:38:29:18:05:69:cd:2a:eb:c4:6f:d1:
b8:f1:db:18:ba:f0:5b:2c:ea:50:f9:ec:a1:a1:eb:
a2:9f:0f:ce:01:a5:00:4f:83:3d:1e:78:95:9b:89:
78:a3:60:80:3c:24:a4:37:00:d8:5e:99:d2:9e:55:
5c:5e:21:0e:2d:69:1d:a9:11:5f:f2:80:cc:2c:cf:
a7:94:b2:75:2e:95:ab:8e:b7:84:12:99:b6:2d:d3:
c7:2b:e5:c5:11:e0:3a:b8:1d:8e:2e:41:29:ab:08:
20:77:65:eb:3e:45:87:fb:89:95:62:85:16:fb:da:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:91:27:DA:0A:BD:6B:98:8A:42:CD:6D:9D:C3:D0:BF:D4:70:7A:87
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f9:c9:89:64:c9:27:94:8e:96:1f:c5:fd:77:6d:e5:c1:0f:
f4:ed:32:4b:50:9f:dc:8a:58:b6:ed:d7:cb:7b:d2:ef:80:67:
e3:77:56:ff:b5:01:5f:5e:ec:55:3f:94:30:12:cf:07:55:4b:
8e:52:67:b8:b1:00:68:9b:d4:47:ff:8b:c2:f1:35:1e:e9:2b:
b1:25:da:7c:1d:0d:97:6d:45:9f:51:24:b9:11:86:2d:ef:f6:
85:3b:46:8f:f9:ef:3c:e1:1d:17:84:65:14:26:78:c3:ce:4f:
62:fd:98:ed:44:6b:24:72:88:5e:3e:0b:74:17:28:8a:af:90:
89:1b:8b:d6:0e:42:d7:bc:79:02:69:06:e7:20:d8:ce:53:23:
a3:a4:e3:b6:ea:c9:e7:70:94:2a:05:3e:17:ff:4c:a8:a4:66:
b4:41:e9:e5:dc:12:c8:ad:99:64:18:ea:9e:a5:18:c3:13:74:
ef:cb:3f:b0:d6:98:98:e7:52:56:ad:d3:e1:ae:71:5a:81:0b:
94:e2:4c:d8:84:2b:79:70:c3:24:b6:98:89:c2:be:9c:c8:69:
fa:1a:bc:d0:9b:bb:fd:cd:cf:86:03:28:5e:55:ed:00:db:2a:
d9:c8:68:48:5e:a3:4d:e7:0b:cb:36:10:42:31:e9:e4:25:fe:
be:ac:53:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net