Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: EaBjYCyXT0Jgx4+nfDvSlmpQs1Yt7kbq12/eTbowXRo=
Subject key identifier: EE:C2:EC:68:3F:0A:42:83:E1:9D:13:EA:B5:FB:63:66:12:D6:46:38
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 0194BCA97A8F5A43039C43D3A3D40BC7C624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 04C3
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: bnmpqW7qGPSqSpvRcRutWyKAeTi+WqzxNsiG8LfjoCc=)
2: jCF0UZxubcg2boAXKn66J2n2ZyE.roa (hash: Jnz70fxzRetWB+WwfJpKB4S2++FXBxK+gp589kR2o6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7a:8f:5a:43:03:9c:43:d3:a3:d4:0b:c7:c6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=eec2ec683f0a4283e19d13eab5fb636612d64638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:13:49:8f:77:f0:73:96:fb:6f:22:9d:9b:
88:49:de:cc:39:b9:4a:31:70:1f:43:6c:61:e8:95:
8e:2a:02:83:9a:57:de:c7:ad:5e:58:a3:ec:e9:ac:
2d:fd:91:d5:db:a7:58:22:04:6e:49:7c:47:47:74:
54:6c:a2:77:68:f1:1c:fb:4a:4e:61:fc:bf:a8:cc:
41:7c:12:87:37:af:3d:02:ed:9b:2b:61:4c:d7:84:
0a:e3:69:4d:6b:5d:10:9e:73:bd:06:44:45:6d:95:
cb:c4:c7:3c:72:dc:5b:e4:33:1b:c4:e9:20:95:ab:
76:78:14:57:1a:36:99:64:84:74:7f:90:68:ef:a2:
78:f0:c8:c6:9c:7d:8b:4a:2a:bd:37:56:20:47:9a:
c7:ba:77:5b:77:ab:a0:bd:5a:56:30:7b:bb:9a:72:
b2:06:cb:c0:8c:f6:ad:46:3b:0f:d2:6b:f8:14:1b:
08:88:e8:d9:ec:b8:0b:e7:07:05:b7:cb:49:de:8d:
1e:48:67:e6:cb:dd:a1:81:78:05:5c:69:36:0f:fd:
ee:09:21:99:05:c2:91:e7:14:a3:90:9d:7b:4f:fc:
7e:22:56:af:03:8f:aa:45:d7:60:c0:5f:6c:40:d2:
71:11:b8:e1:fa:6e:e8:f9:f6:93:0f:03:b3:0c:33:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:EC:68:3F:0A:42:83:E1:9D:13:EA:B5:FB:63:66:12:D6:46:38
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e2:05:0d:36:e8:93:db:4a:c9:1e:bc:be:65:62:39:bc:e0:
a8:80:c1:f8:fe:0d:34:47:9f:91:b7:6b:b4:35:ed:d4:e4:52:
b8:79:d3:bf:47:4f:46:af:1f:de:73:74:c2:9a:c4:f3:d0:41:
31:88:4e:38:cf:c4:75:a1:9b:51:a3:4c:8a:a2:1a:07:58:21:
1d:63:44:1d:c4:84:a6:f5:91:53:17:d3:f5:0b:24:50:9f:d2:
b0:d5:c1:4e:e8:4e:57:b8:bf:28:a2:66:ce:8a:1a:30:b2:5c:
51:cc:27:02:44:5b:7a:8e:37:62:c5:91:fc:65:f2:77:5a:04:
c2:12:22:29:5f:17:30:59:5f:95:59:47:35:a8:46:1a:99:b0:
10:21:b8:c2:98:da:a3:9e:65:36:9c:73:91:28:65:50:c2:1d:
06:57:fd:37:3d:94:0e:1a:01:b8:16:f5:c8:7e:41:24:b6:b7:
7c:37:42:48:05:19:fa:0e:f0:33:33:2b:b4:bc:07:3b:a4:f9:
2e:34:f8:c0:48:f4:32:df:a2:c9:a4:ea:7f:2c:27:8f:f6:8b:
b4:5c:c3:e3:2b:06:b7:35:8e:ee:4f:e3:56:f4:81:c4:f1:22:
39:73:a6:69:0f:15:1b:8c:ee:d3:ad:24:29:06:96:6f:2f:e8:
1a:7b:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:04 2025 by rpki-client