Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: czxlFbgVlyhWcHW4goR1gxo3wMQvsuxU2PoNng5kokU=
Subject key identifier: AF:D4:C5:5A:30:69:8C:AE:BC:37:FC:D1:B9:56:95:58:C9:6D:F3:76
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 0194BBCDFB8CBB4E9252C0F3E0E007ACF4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0A69
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: wVcE5NZet37UtTLRMetD5+w40elg7MUiyvyioGZgcPg=)
2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:8c:bb:4e:92:52:c0:f3:e0:e0:07:ac:f4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=afd4c55a30698caebc37fcd1b9569558c96df376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:24:73:a5:23:14:7e:e9:95:3f:f3:4f:8c:
4f:68:c1:38:11:dd:73:02:6a:fd:39:4f:e2:92:0c:
3d:4d:48:27:71:71:a2:90:e8:dc:15:cd:0e:05:df:
28:e8:d3:bb:ac:ce:95:ad:4b:cf:0c:c1:79:19:d7:
01:e1:a8:41:a7:d8:77:ef:90:cd:a1:6d:e3:c9:e1:
d5:b3:cd:0a:8c:98:df:0b:32:23:12:f7:9e:c9:48:
34:8c:a3:e6:6e:5c:1d:4d:28:89:4a:be:ae:ac:24:
1f:93:52:09:95:56:3f:4a:54:bd:71:93:7a:f0:27:
4c:a7:1a:1b:73:05:27:38:d8:12:c3:69:77:1f:63:
66:43:36:72:4f:78:2b:db:29:97:c7:59:00:a1:8c:
5b:ea:64:b1:9d:30:9d:56:49:7c:c6:d8:6b:6d:aa:
b0:c1:8a:93:92:b1:be:73:ab:42:18:76:59:da:1f:
74:9e:cb:5a:b6:9d:73:29:fc:c1:0a:c0:b7:8a:77:
31:d0:9d:19:29:c6:46:7b:98:55:7a:b8:cf:88:49:
48:29:bf:bd:cf:52:27:e2:fc:ad:17:61:81:cb:9e:
35:c3:4e:73:69:ec:28:e4:60:82:d9:08:8f:0c:74:
f7:38:aa:a7:a5:1f:9d:ab:28:3f:9c:e7:98:f6:22:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:C5:5A:30:69:8C:AE:BC:37:FC:D1:B9:56:95:58:C9:6D:F3:76
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:37:75:5f:f5:cc:71:b1:b4:9d:fc:92:88:02:21:33:ee:c8:
50:9b:52:79:a2:4d:ca:38:81:ab:0d:74:9b:95:d3:f1:51:9b:
c4:81:c4:7f:a9:04:10:7d:09:94:6d:51:2d:53:73:14:18:83:
14:cd:4f:b3:89:18:8e:c1:eb:cc:f5:67:fc:fa:aa:04:5a:df:
11:6a:5c:45:1a:6e:ac:e6:3d:8e:ed:da:fc:79:0a:70:3e:88:
5a:db:60:96:55:d1:4c:5a:a3:04:6c:fb:5a:55:38:19:16:0d:
41:63:60:e6:27:8a:6e:ea:40:4b:08:31:81:96:05:db:33:da:
29:54:80:d6:4b:8b:ff:83:14:34:7f:e2:ed:de:b7:6c:bc:f0:
28:9c:52:64:ad:2f:bd:64:12:80:d8:db:3c:8d:ec:d2:5b:50:
b2:0b:3d:dd:e7:4d:92:90:19:ad:6a:fa:24:70:25:57:33:14:
05:9f:ae:7e:b2:fb:7a:f8:ec:57:6e:6a:7f:b1:c9:3c:5c:25:
b8:71:47:4c:d2:4f:8e:55:0e:50:31:b0:96:74:06:1a:eb:a7:
f5:58:d2:40:59:60:54:2c:89:0a:b6:4b:23:45:bd:be:dc:f8:
74:27:e5:af:a9:f7:80:72:29:62:3c:64:6f:12:ef:6e:25:3d:
1e:87:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:21 2025 by rpki-client