Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: 1d2Aa/5X3zxvweFuFlMHBJrNnD2tp7uKJVcG/qleb68=
Subject key identifier: C2:9F:42:97:F9:30:DE:60:AD:DF:85:21:6C:78:32:9C:A3:A9:DD:0E
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 0194BC3C4A84D5288131815CF0DA8FEA227A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 047A
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: KS3hV99t5XaeqdGrsjmQdYdesJIhtpvZV5zon01s0xs=)
2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:84:d5:28:81:31:81:5c:f0:da:8f:ea:22:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=c29f4297f930de60addf85216c78329ca3a9dd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:2b:61:40:91:55:87:2a:c0:73:d2:48:1d:
c3:e0:e9:02:5f:20:ac:37:76:8c:23:f5:df:d4:f6:
6a:1e:d4:ed:57:96:18:3d:b4:6b:1d:e9:f2:48:f6:
01:6a:8d:07:2c:1a:4e:65:b8:fb:14:88:fa:4c:0b:
99:23:cf:04:79:07:1d:97:e9:62:a1:96:dd:e7:79:
d4:a0:f8:10:44:67:61:2b:c4:cb:15:71:db:6c:b0:
56:30:4f:ca:ca:c1:97:c0:46:09:28:59:a8:95:9d:
40:c4:c5:8c:75:d5:85:92:f6:0e:cd:85:77:05:c0:
8f:c5:e2:f1:4a:9e:0d:53:b3:18:92:08:b9:28:60:
9d:b9:66:27:8e:ad:14:66:a6:a8:5e:31:3f:d3:5d:
dc:7c:08:54:1e:9d:1f:04:f6:66:cc:af:13:78:ce:
7f:6f:fc:95:76:ce:9a:d3:d8:d6:5e:c9:fe:71:f3:
b2:a5:0e:6f:64:fc:47:a8:e5:61:fb:d7:6a:e9:1b:
14:1e:65:8b:be:53:8c:6a:9e:c0:37:40:89:99:6e:
55:09:f5:49:cd:e1:2d:5a:a9:6b:fc:98:09:28:4e:
b7:3d:08:f5:d8:dc:d5:be:fd:f8:36:31:bc:b9:c4:
08:38:45:83:5f:2f:b9:d4:30:ac:f7:38:2c:09:43:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:42:97:F9:30:DE:60:AD:DF:85:21:6C:78:32:9C:A3:A9:DD:0E
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:85:86:8f:b7:4d:3d:c8:83:cf:bf:dd:b8:87:fd:58:8e:
5e:7a:1f:47:a1:ea:f7:21:65:0e:cd:3c:95:40:8e:41:3e:0d:
04:51:5b:6b:1b:ca:d0:33:ee:90:b0:28:aa:7d:b9:c5:35:ac:
3c:e0:51:d5:50:f0:7f:00:fb:df:4c:80:f5:02:27:fc:fb:96:
bb:c1:48:1e:15:44:04:6f:5f:f7:46:1f:98:28:05:fe:b3:b9:
90:a6:4c:30:7f:3f:7a:a2:a3:9b:71:8b:d7:b1:42:fc:b6:3a:
c8:95:28:56:10:9f:7b:ea:af:09:7b:11:68:ce:28:fb:38:5c:
e8:ad:f9:bd:76:c6:c6:8c:32:3c:3a:10:d7:d5:1e:55:85:1d:
ad:06:4d:fc:8e:7f:e2:4a:f3:7a:e6:5b:10:64:d3:41:c5:11:
74:6c:3f:eb:5a:cc:1f:11:ca:7a:92:31:ae:17:d8:1f:c0:35:
0a:98:75:e9:3d:e3:c0:50:0d:5a:30:8d:a5:a6:b8:48:c2:b7:
e9:8d:a8:88:ab:dd:09:54:0a:35:d8:c7:04:a6:c9:72:0e:e7:
54:c9:45:b8:33:32:51:b4:3b:33:f4:fa:8a:69:bc:70:22:f2:
69:11:23:cc:fc:2c:6e:21:ab:80:b0:4d:60:9b:79:67:e7:49:
e1:55:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:33 2025 by rpki-client