Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: vci9FwXgqc7n+bkTLViGQ2VrsisG476uZ2Lsy9TThw8=
Subject key identifier: 03:A1:4E:C2:37:91:10:ED:75:71:65:E3:6B:59:E0:2A:5B:08:2F:3C
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 0194BCAA1ADF1AD5D49DD35A08EED2A521F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 11AB
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=)
2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=)
3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: GVN/jILfYKS+YSgDTfJAVe1KX/2We+y/Mqnjt/wjwxM=)
4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1a:df:1a:d5:d4:9d:d3:5a:08:ee:d2:a5:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=03a14ec2379110ed757165e36b59e02a5b082f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:3d:e2:de:68:d9:19:57:e7:e5:9a:e9:fd:
d8:aa:3b:ce:df:ed:fa:18:b9:54:db:92:6d:dc:15:
09:16:2a:92:5d:5a:dd:77:3b:c1:6d:c7:1b:c5:16:
a6:51:51:4a:1a:cf:47:27:9f:c3:e1:67:17:09:2e:
4d:7c:df:91:f3:e2:14:05:15:1d:3c:43:71:d1:5d:
53:23:fc:f2:6e:52:f7:a5:08:05:f5:7e:9d:ae:61:
9c:c6:79:22:ba:bc:d0:7d:a9:fb:03:dd:15:79:ea:
76:ab:60:55:da:f2:3c:f5:e7:9e:14:7a:c6:d4:c1:
88:64:d6:35:28:a9:85:df:80:e2:bc:88:4f:23:d1:
cf:1c:79:92:7a:36:ab:b3:78:ab:8f:39:81:26:90:
7c:cb:b0:d3:fb:ef:c3:e5:7b:a3:e1:7b:25:35:aa:
96:a6:7c:8f:bf:48:48:b9:53:06:8c:13:21:96:8d:
6d:69:71:7b:0e:e2:33:c0:5c:c8:25:8c:4b:93:bc:
80:4f:3e:68:83:33:b2:90:25:07:c1:99:b4:43:e6:
99:bf:24:25:dc:cd:33:26:97:39:45:5f:fc:bf:19:
2d:db:7f:cf:94:3a:bf:a2:52:5d:86:fd:16:d2:8c:
71:66:2b:d3:2a:32:81:fd:e0:ee:d4:bc:59:86:d7:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:4E:C2:37:91:10:ED:75:71:65:E3:6B:59:E0:2A:5B:08:2F:3C
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b9:82:e6:7d:92:63:b0:30:f3:a6:aa:9a:ea:b1:7e:83:5a:
0c:54:2d:03:dd:55:51:19:9f:f5:b5:3d:30:bb:df:ae:f3:55:
d0:11:60:c9:62:79:88:25:9a:2f:13:ad:fa:ff:8c:60:23:2e:
e3:49:71:48:e2:db:07:28:bd:dc:6c:3f:07:d2:3d:ad:31:a4:
33:71:ec:a3:2c:f2:0c:7a:d7:19:4a:67:44:77:0e:54:e1:71:
4c:b6:5a:6e:d7:18:0c:f3:c7:cf:95:71:b0:f3:18:cf:8e:1d:
16:42:e7:05:18:c8:7b:c6:0c:5e:ad:a8:5c:6b:96:fe:ef:78:
d6:f8:21:90:b3:e5:27:f5:2e:e4:1d:1a:b1:d3:65:72:1b:86:
de:d4:e1:7d:19:55:e7:e9:1d:04:48:2b:58:dc:0d:82:cd:31:
8f:69:5d:03:9f:47:b9:de:6a:d5:62:c2:44:af:af:9a:fa:15:
b2:4e:78:dc:f7:06:84:51:03:33:f5:0e:65:3e:11:d6:bc:3f:
e5:a2:9c:61:ea:94:01:d0:25:81:9b:4e:10:1e:e2:0a:04:53:
e5:6d:c5:12:1c:d2:13:30:a8:da:e5:12:4c:a1:8b:6f:75:af:
b0:1b:3a:dc:b7:1e:52:00:8a:db:ce:8b:46:63:62:8f:ec:f4:
62:ff:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:41 2025 by rpki-client