Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: yw1+sef0n1doPWTKuVLhFl3zn0HEpgYY2gp+3glJBwg=
Subject key identifier: 4A:52:F4:75:CA:64:04:B5:E1:73:43:EB:29:05:60:2F:F8:AB:1D:B7
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0194BCE0D4E5D6B34E16DC6A53955D76D88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: 2frFJKy2B98shnj3X1EQ12xwW-Y.roa (hash: 0F5dPNYVy1tZEP7++57j0UW+ShuxTmo4HNHQX5FZtQw=)
2: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: U1DDut2a0E2L4candyXPQK4TOgkmLAl+hFcfFAtoRpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d4:e5:d6:b3:4e:16:dc:6a:53:95:5d:76:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=4a52f475ca6404b5e17343eb2905602ff8ab1db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:4a:56:80:84:18:eb:a9:bf:1e:01:6d:9d:
65:be:b2:46:0d:5e:5f:58:69:05:61:2b:d6:0c:4e:
82:c3:0d:70:60:5e:39:86:e6:f5:08:1a:a0:21:2b:
c8:42:61:34:1b:17:4b:84:25:53:2a:3f:ee:72:71:
6a:83:6a:c2:29:e4:1e:da:b0:69:74:b2:ec:4a:2d:
26:45:62:84:2c:48:26:1f:4c:53:66:a9:08:1a:c7:
ad:54:eb:0f:b8:9a:d0:b1:78:42:1f:8b:89:0a:7d:
22:2d:90:bf:8a:e3:08:c3:c7:0a:74:3b:f7:ae:17:
59:e7:e3:dd:c6:60:81:0e:e6:76:f4:3f:95:38:53:
a0:fa:79:71:b0:06:a4:b1:1d:50:41:72:06:53:db:
9f:cb:6b:b4:bc:0c:5a:c6:a6:2c:04:37:a8:9e:cc:
b8:96:0f:d3:5d:5a:6d:2b:d1:3d:03:06:ca:b5:7a:
7f:33:37:09:e9:5b:df:51:ef:b8:9a:be:f9:50:fb:
9d:cc:47:94:fb:3a:68:08:c7:49:4b:1a:fd:8f:a7:
4b:61:30:aa:e7:fd:d0:26:ea:e4:78:3b:03:43:11:
29:90:af:e2:90:5d:f2:90:50:a4:fc:34:c7:b3:73:
15:d3:73:15:8f:40:05:72:e1:3a:39:99:e4:f2:79:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:F4:75:CA:64:04:B5:E1:73:43:EB:29:05:60:2F:F8:AB:1D:B7
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1c:57:e5:7b:fd:46:50:4a:64:23:8e:cd:54:d9:e0:c1:cc:
34:f6:f7:c1:f4:47:51:5c:a0:3b:49:45:09:4a:39:97:39:b7:
78:6e:ab:43:59:66:ef:1a:54:8c:52:96:45:f2:dc:49:50:50:
97:73:a6:3b:ba:a6:9f:63:c6:ef:66:84:71:92:8d:6b:a0:56:
6c:0c:fb:31:ad:6d:02:d3:03:55:2d:2d:7c:00:eb:31:fd:78:
d3:88:fc:80:5b:b9:c4:a4:4e:46:49:7c:b1:af:e4:5c:a9:14:
0e:13:08:b6:d5:5f:aa:18:78:12:36:11:39:35:b5:fd:08:a8:
18:a5:43:14:83:64:62:9d:bf:2e:8d:a4:9c:05:23:a9:81:e5:
0a:c7:fd:79:d0:95:e1:d1:9a:45:df:53:b0:eb:98:36:70:fc:
ff:64:27:fd:1e:f9:1f:8a:98:69:e9:9e:f8:ec:3c:19:9e:96:
16:8f:ac:97:01:e3:a0:41:c8:0b:37:6b:fd:0a:80:aa:99:00:
6b:bc:53:21:ff:cc:1e:54:28:2f:8b:16:4d:c4:60:3b:6a:4a:
f3:dd:13:90:59:57:cb:e7:ff:e0:be:54:fa:30:18:56:8c:09:
75:00:a9:cb:05:44:bc:7a:75:2f:c5:89:67:51:c4:0c:07:3d:
1c:fc:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:48 2025 by rpki-client