Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
File: nUkl6XatC_tz4JfaaRfoD1vObIw.mft (raw, json)
Hash identifier: cAsj8t1zGACGQEeLnFPUjp75RTLMyqIw7xC8YTD5NEs=
Subject key identifier: 2B:EA:A4:7D:EE:2C:73:6F:AD:7C:BC:19:DB:9C:49:73:AC:BB:5A:3B
Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Certificate serial: 0194BBCE17B355644D498B202C029C5C00F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
Manifest number: 0E88
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: 7Wfm8N_BNNM1ZIAzk65u_y1CoxQ.roa (hash: vGKhwTsZ6bUD5wem1afZhHCNpuoU8y3whIP7i2K9fc8=)
2: nUkl6XatC_tz4JfaaRfoD1vObIw.crl (hash: h5ZBrn+AvFcxdbnQeI5VWeKkMU5DyT9lKVhZhX7Pbow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:17:b3:55:64:4d:49:8b:20:2c:02:9c:5c:00:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=2beaa47dee2c736fad7cbc19db9c4973acbb5a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:aa:d6:d4:51:30:57:19:4d:a6:1d:cd:7f:
51:ed:f2:c9:00:14:40:5d:85:ce:cf:6c:d2:5b:e6:
cc:0d:38:a8:77:c4:00:b1:78:f6:f5:53:25:34:17:
49:78:a5:53:27:7c:9c:8c:60:ef:84:5d:96:89:1b:
07:f7:b4:b6:eb:61:d5:ad:6e:be:27:64:b3:ca:10:
8f:fa:f2:df:66:3a:1b:3a:e9:9d:06:06:95:b3:d4:
a4:43:47:1c:8d:26:1e:47:7b:55:17:0c:b0:99:21:
7d:82:66:0d:d5:8f:92:8a:35:6d:a5:f6:4b:da:5a:
68:86:c7:61:91:16:f5:dc:21:4e:dd:e6:ca:9f:7a:
4d:d5:79:33:73:e1:58:20:78:93:5a:c1:43:04:bb:
5e:69:15:8e:b6:ad:dd:66:c5:56:9f:18:df:5e:5a:
ba:68:2e:d1:43:83:71:b4:43:36:7b:7b:c0:39:6c:
3c:8c:f9:74:ff:2d:43:b6:d5:49:af:62:70:47:b3:
c6:8c:ef:79:3f:f2:21:eb:63:66:e1:66:7e:57:eb:
21:7a:f8:f8:a6:5a:3e:27:60:e1:3f:d1:0e:07:db:
05:34:ab:a4:05:bf:34:2a:00:6a:05:6b:da:c9:98:
0f:a6:ef:eb:6c:34:e4:67:51:b5:5d:bd:f7:93:33:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EA:A4:7D:EE:2C:73:6F:AD:7C:BC:19:DB:9C:49:73:AC:BB:5A:3B
X509v3 Authority Key Identifier:
keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b3:5a:6c:a6:2d:00:9b:00:79:44:30:59:9c:e0:2b:23:00:
2f:8c:f0:73:dd:c4:a6:af:fd:f6:fb:52:04:66:59:5d:c6:af:
23:d9:0b:7c:22:39:5a:46:0a:17:6b:fd:b3:d9:66:1c:03:01:
cc:b7:80:f7:37:a0:25:e9:c2:d0:37:9d:bb:a9:97:a5:57:55:
0b:6c:2e:ff:bf:b5:bd:2d:8c:ae:84:47:db:b0:04:c6:dd:c9:
0a:7c:8a:39:6d:1b:80:b2:8d:1e:89:60:c5:b3:39:9b:07:e8:
d0:6b:a9:1d:13:76:46:16:fe:45:98:f1:9a:a1:85:7f:f8:05:
7b:76:17:99:23:f1:cb:83:f4:0f:09:36:87:91:39:ec:e3:c3:
9d:e2:c9:16:0c:72:20:fa:97:de:53:52:2d:9f:ce:e9:87:4f:
9f:16:e0:8c:e2:c2:05:6f:ef:a3:0a:0c:e4:7e:11:97:14:46:
ee:0f:9f:dc:7c:76:bb:8c:5c:e2:56:ff:ba:96:34:40:33:0b:
0a:f5:89:04:e8:57:7d:34:ce:66:ad:08:26:05:39:2f:fe:32:
5b:08:b9:87:19:d3:41:4c:19:ce:79:d2:a8:3a:35:1b:cb:b1:
9e:5e:27:b4:ae:be:02:75:62:5a:cb:12:22:83:79:78:ff:1d:
79:24:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:28 2025 by rpki-client