Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: LY209BZ81jd4kqTokEJIUTQ8omq3z1G6WkVd66w/nJU=
Subject key identifier: A6:5D:87:D7:07:0F:ED:A8:AE:89:1C:0E:3A:19:E1:88:C9:CE:5B:3D
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 0194BD17651082B2B27AD6A3E7FA5F351662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 1203
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: SKDX4xocFt+gqZQi+q5A46d2ISPl8pXcfBFLZnpHA7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:65:10:82:b2:b2:7a:d6:a3:e7:fa:5f:35:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=a65d87d7070feda8ae891c0e3a19e188c9ce5b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:e3:0c:2e:0d:b0:3b:cd:e7:d5:75:53:59:
ef:7a:0d:88:c9:83:81:5f:89:92:41:9c:9f:e9:33:
b4:d0:3e:10:38:7e:94:61:13:f7:cb:ea:0a:f6:1c:
d1:2d:fa:50:d6:40:1f:f1:0f:01:51:6a:2c:ea:0f:
4a:77:40:c4:a7:cc:54:26:23:bc:75:11:aa:da:ad:
d4:93:44:51:90:d5:1d:22:6f:f7:10:e5:6d:0c:b2:
fb:f3:65:8a:c3:11:9b:3f:db:99:6c:72:bf:08:24:
bd:38:23:83:28:ed:41:cb:cc:83:21:72:bc:d4:87:
02:eb:dc:37:b1:00:44:cf:b7:a0:3f:9d:b2:a2:6c:
ed:47:30:ff:7f:6e:e1:cc:ca:65:84:a2:51:80:d0:
b3:94:8e:38:77:42:27:f7:64:1c:34:db:a2:98:1c:
cf:fb:40:97:b9:df:f3:f1:33:bd:b9:92:ad:97:c2:
9f:be:9d:01:82:9f:0b:04:ce:bb:54:6b:65:f6:6c:
ba:a9:ab:a2:ba:cb:80:16:27:b5:b3:f9:77:e9:40:
51:62:98:a0:fb:3e:bd:74:38:5d:86:7b:79:fe:91:
e3:86:9e:19:41:0b:e9:8d:d5:aa:35:10:33:e3:f9:
02:80:7c:cb:36:6a:cb:d4:26:82:95:12:52:24:6b:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5D:87:D7:07:0F:ED:A8:AE:89:1C:0E:3A:19:E1:88:C9:CE:5B:3D
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:54:4f:50:88:06:42:4d:63:24:e5:f2:37:c4:f5:42:84:2e:
bc:3a:79:7d:4b:f5:67:68:97:c9:49:01:aa:cd:98:3a:fb:ac:
87:ec:c5:4d:49:71:7c:09:79:20:64:e4:15:a0:4b:04:8f:14:
3c:82:f1:b9:5c:0d:42:92:ce:51:f8:29:40:62:ab:18:0c:98:
8a:28:47:b9:a1:cc:59:fa:97:58:c2:46:74:76:f5:81:4f:7b:
66:c4:6e:3d:9e:b3:42:ef:21:f3:f7:9d:b6:91:42:92:bc:25:
c3:0f:37:60:a3:cf:b6:1a:88:9a:23:1e:63:80:fc:99:61:ce:
96:a5:8b:d1:02:32:f0:06:d9:13:8d:c8:11:9a:54:82:aa:30:
ad:0b:48:e3:3a:07:75:1b:74:59:c9:97:c8:b5:bb:7c:86:7d:
51:75:ac:2c:b3:4b:6d:f2:a1:eb:f4:df:9d:b4:4e:2e:1a:8a:
10:aa:e4:f6:39:43:19:b1:de:3c:77:2d:7f:a8:01:41:69:90:
62:1d:a5:30:db:c8:fe:22:aa:7f:53:13:30:ad:6d:4f:c2:f1:
dd:cc:31:28:c8:76:63:aa:59:e8:3c:2a:88:1a:c7:37:14:dc:
33:c4:f3:ef:1d:2e:33:8f:c6:2f:6d:ac:19:73:2a:4a:56:84:
6c:8f:0f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:27 2025 by rpki-client