Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: 1yCw7hslY0e0LsJzqKLOjWAxv8E2tyEMMtoF35YNS+w=
Subject key identifier: 99:A2:1C:71:0A:FB:30:13:F1:62:81:AA:AC:00:2A:74:C6:73:F1:6F
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 0194BC3C4AFDD0004D0D0A3F209ABB8CDEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0B99
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: /TVqUyIc8YBocTURV6QhrASwRFM9RYx/fY2DGGI5U3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:fd:d0:00:4d:0d:0a:3f:20:9a:bb:8c:de:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=99a21c710afb3013f16281aaac002a74c673f16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:54:36:5c:13:62:38:f7:40:d7:ac:2f:85:
c4:cd:43:cc:d0:f9:3e:cf:c8:7a:9f:66:8f:c6:8b:
14:a4:d0:1b:27:a0:90:38:cf:29:fc:4c:b8:69:21:
e4:d6:89:f8:d7:33:e9:5d:0c:5f:c1:52:8e:a3:da:
78:8c:9e:b8:bf:05:c3:14:0a:75:b9:b5:78:36:c7:
da:f6:d9:97:f7:3c:df:d3:5b:c9:be:dd:30:a9:d0:
12:04:c0:d1:20:3d:61:e2:57:7e:e2:30:ee:15:f7:
31:5b:61:06:6b:8d:02:93:b2:a8:35:ca:e4:47:99:
d2:69:e9:27:88:c1:bd:de:42:62:9a:1c:bf:c3:0d:
4b:26:e1:35:6e:2a:01:0a:74:c0:a6:9e:2b:b4:da:
b6:7c:8e:3a:df:99:62:90:6c:be:7d:65:01:65:a4:
4c:81:72:6e:00:bf:8b:a1:cb:29:c0:63:18:de:e0:
4f:6d:ff:67:6b:f2:dd:7b:8f:49:67:da:0f:90:16:
72:6c:49:1f:22:60:15:68:6d:20:f0:54:39:ff:37:
59:b2:07:51:65:36:aa:b4:85:00:76:c0:e5:33:1b:
6b:e4:7e:39:65:ae:cb:2c:48:3b:8e:a5:68:e1:33:
22:01:7c:d8:6e:71:c4:52:8a:e6:98:2b:ad:96:b3:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A2:1C:71:0A:FB:30:13:F1:62:81:AA:AC:00:2A:74:C6:73:F1:6F
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:06:c1:57:74:ec:4f:a8:45:64:68:d1:c4:44:f7:34:98:e2:
af:c7:8d:79:8e:5b:58:92:fa:f0:b1:75:da:c9:56:da:96:f7:
e5:26:97:8c:72:13:f0:40:ed:f9:fe:46:3f:3c:89:69:e0:66:
9d:36:d4:a8:c5:06:d3:e9:df:ef:fe:b4:0a:6a:ce:04:9a:09:
4d:03:de:4c:7b:f0:16:95:b4:bf:34:13:41:de:a0:cb:30:72:
a0:ef:bf:a0:51:77:76:5d:08:23:41:67:fc:0f:02:4c:c2:e2:
23:a9:f9:04:76:40:22:7b:1b:e4:fc:e4:8c:68:aa:74:2a:a7:
f5:ac:08:90:1e:d7:65:bc:f5:96:28:be:03:d6:dd:64:58:64:
1d:bf:cd:21:60:2b:f3:71:70:bd:e9:1d:77:2e:a1:43:d0:d6:
d2:56:f2:0a:05:3e:cf:a4:45:b5:9c:6e:37:63:05:41:a5:07:
b5:b6:48:f1:af:e3:39:84:8c:d0:51:6b:cc:c8:b4:5b:e4:72:
ea:f5:db:89:2a:2c:8d:d9:06:81:f4:00:ad:be:cb:f2:1d:ae:
21:56:15:1a:e7:25:85:90:68:cd:cf:3b:6e:0e:05:68:f8:53:
58:1b:4f:fe:99:5a:ac:c6:48:1f:2f:99:9f:52:12:c5:b6:c5:
9c:c2:b1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:31 2025 by rpki-client