Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json)
Hash identifier: UEBHi/yNwxnPPmh3L/p055JvpZKpmSw4879B9yXy26I=
Subject key identifier: 04:D9:82:0C:87:63:EC:E8:60:23:97:6D:AF:05:9B:1C:7E:37:4B:32
Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621
Certificate serial: 01962E61E7D0716BA1BF8B3C66D5C1E0F362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 09:01:30 +0000
Manifest this update: Sun 13 Apr 2025 09:01:30 +0000
Manifest next update: Mon 14 Apr 2025 09:01:30 +0000
Files and hashes: 1: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: 3HfZg/YCUCqAX+NpqncpDjFHbNAhmHgjieDoYU1pfFQ=)
2: f-luTA_tx0v0TH5JKilbt6SzcJU.roa (hash: +LXN4TEg0fwtohb1kuvdLScMnEdA9CiLPdalbBVCXxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:e7:d0:71:6b:a1:bf:8b:3c:66:d5:c1:e0:f3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621
Validity
Not Before: Apr 13 09:01:30 2025 GMT
Not After : Apr 14 09:01:30 2025 GMT
Subject: CN=04d9820c8763ece86023976daf059b1c7e374b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:b0:ee:07:5d:b4:92:d7:9f:8b:2f:4d:41:
8e:f2:23:db:0c:03:68:8c:4d:45:9f:d5:b7:05:c2:
7d:8b:61:15:0a:6f:1c:48:4a:d1:a9:35:fa:ec:e7:
1e:ff:1d:c3:70:05:2c:65:26:fc:d0:c9:24:92:1f:
fe:49:21:a9:52:85:0f:41:e7:f5:bd:d8:44:29:fe:
49:c0:c1:6c:7f:f1:e3:2f:d2:f0:92:2d:f7:57:21:
47:24:71:03:89:c9:78:76:38:70:16:30:e8:5d:ae:
9a:f0:62:d7:8d:23:8d:c8:f8:c5:84:11:3d:5b:9c:
44:8b:f4:da:73:a3:86:9b:c0:e1:b5:d8:cc:b0:dc:
ea:55:72:4e:11:d1:10:d0:6f:4a:5f:2b:3d:dd:f0:
27:e8:0b:2d:25:31:85:c3:5c:14:47:a2:db:eb:1b:
7d:c0:3a:8b:20:c2:7c:ba:a0:1a:c2:5e:5a:bc:13:
be:05:75:e3:74:3e:ab:fa:c1:cd:53:fa:17:14:ea:
62:c5:a6:c8:1c:0b:b9:49:e8:3b:d6:27:33:32:c2:
96:5b:c6:69:b9:e1:7a:68:c3:24:c6:4f:c8:65:e4:
e9:28:8e:3a:7f:42:31:d7:81:95:00:80:df:69:ed:
77:45:d7:ba:64:6c:5a:f4:11:74:9f:d3:4d:a5:a8:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:82:0C:87:63:EC:E8:60:23:97:6D:AF:05:9B:1C:7E:37:4B:32
X509v3 Authority Key Identifier:
keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:59:85:b4:97:43:c5:24:b5:b7:81:9c:4e:ab:59:aa:5c:b5:
0f:c1:7d:e3:48:5d:95:3d:72:83:8e:7d:54:83:53:74:26:2d:
9f:56:af:ab:12:d7:98:71:dc:09:b6:43:48:2b:d4:44:01:2a:
f1:92:0c:49:96:e5:be:a1:39:82:0d:e4:0c:19:ff:14:e8:b3:
b3:0c:28:5d:69:06:ef:70:53:42:e6:0c:70:b4:68:a4:9d:07:
ee:19:3f:25:a0:b0:c3:5f:12:5f:c1:9e:be:ff:f8:a3:dc:9c:
53:b4:b0:23:eb:0d:9c:f9:9f:ea:64:52:2b:ca:ff:19:c2:27:
23:a1:6a:f0:b1:62:26:bb:c4:09:0f:ce:1c:27:ad:ae:9a:62:
e8:51:93:8c:f7:9e:e1:4b:1f:b7:db:92:1c:e7:79:97:dd:e5:
b6:74:78:78:9c:29:14:af:d1:8a:79:fa:72:67:fa:cf:53:2c:
4c:35:a3:bd:86:0d:b5:26:a7:e3:41:b0:41:1b:93:dc:0e:5a:
48:ce:e6:ac:e2:f4:de:7f:e7:20:b4:1f:db:a7:2d:23:01:69:
6e:ea:23:b2:ae:ff:bb:64:55:48:0e:76:b3:70:22:f9:ca:ca:
3b:e3:84:92:2a:e7:8e:38:b5:65:69:2d:87:dd:08:5c:46:f0:
d0:23:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net