Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: 5IsY71qhc3rteLP/coXQxTZzfpZMk0VpfU5o78q2Wao=
Subject key identifier: 52:F0:51:D9:82:6F:CE:86:19:87:27:77:B8:41:C4:43:02:E4:05:7A
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 0194BC3C25DD7068593A2914F404EC45E9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (hash: /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: yBV3w7BYEH8h4NzPOT4qbTNjkKVoFJlKG0GDuUfdppE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:25:dd:70:68:59:3a:29:14:f4:04:ec:45:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=52f051d9826fce8619872777b841c44302e4057a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:d9:da:a5:9c:82:59:69:d3:86:67:f2:05:
5c:20:7e:b5:96:aa:94:ac:a6:5e:ab:26:00:9e:06:
ea:5a:9a:7d:b5:73:b1:e2:b0:52:64:df:94:99:41:
50:0d:2a:b2:50:2e:99:26:f5:bc:c9:e1:15:b7:f1:
d2:e2:03:6e:8e:57:35:c5:47:42:7f:80:ff:f8:cb:
ed:e7:31:12:b0:36:22:ae:b8:90:bb:55:40:33:74:
3b:43:df:c7:2a:9b:a7:94:7d:39:97:f6:3c:2f:e5:
08:a6:a9:f6:15:1a:53:77:b7:c5:b8:b2:4e:fe:6e:
df:bd:96:27:e8:3e:9c:06:c8:8d:58:07:ef:0e:ff:
10:e1:33:3f:f7:76:36:5a:32:82:c2:ff:4e:e3:35:
99:09:93:de:9a:34:b4:44:e6:fb:68:35:74:6e:6b:
04:c8:50:22:fe:79:92:7a:b8:cd:67:c4:b0:e5:c1:
30:59:ef:67:e1:12:2c:ed:f7:fd:69:05:6b:3f:a2:
a4:06:71:82:d4:c6:11:87:13:33:cb:e7:68:7a:fc:
fa:1f:ac:a8:3c:6a:e6:ba:f8:be:50:c1:6d:60:e5:
24:1f:bc:0b:e6:28:d7:23:67:f9:a6:a9:5d:4f:93:
1f:32:8f:c8:3f:bc:d0:96:b9:a2:cd:72:3f:e9:b5:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F0:51:D9:82:6F:CE:86:19:87:27:77:B8:41:C4:43:02:E4:05:7A
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8b:e3:1d:33:a6:92:38:50:93:ba:47:e8:fe:b3:de:97:b6:
7c:1b:7f:f0:a4:09:3f:05:03:92:3c:93:51:3d:9d:b7:39:44:
a6:d8:c5:81:ac:96:2f:8f:d0:41:fd:f6:9c:52:da:b5:29:89:
81:04:83:bb:49:2a:43:5c:64:2a:f3:f8:dd:85:eb:cb:c4:9c:
ca:fc:b1:a1:e2:85:1e:e5:1f:f8:bf:a3:26:5c:bb:73:f0:91:
78:c2:57:a5:19:a9:43:c5:b2:53:09:23:46:42:c1:17:72:68:
40:dc:b4:3a:6d:b2:04:ee:b2:94:7b:42:71:56:dd:30:34:99:
3e:35:20:a8:36:1a:10:d7:f0:cc:ed:25:0d:20:9e:6a:bb:04:
5f:de:8c:7d:b5:4c:26:cf:e1:4c:20:b4:b9:99:7f:a6:6a:4a:
23:56:c0:74:8b:88:5e:ae:d2:03:0a:fd:64:9d:ce:1f:41:90:
62:01:f2:51:6d:93:49:64:65:bc:a9:ac:70:7d:b0:db:ef:d7:
bb:af:ff:af:06:bd:20:78:bf:bf:5f:53:d9:86:68:51:4d:18:
b7:5a:25:f7:fb:a8:e0:59:27:6b:d6:e5:5a:6a:7e:6a:6f:42:
57:95:d9:48:6c:1d:45:44:a7:12:38:cc:8b:b3:53:1f:ee:a0:
f8:28:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:40 2025 by rpki-client