Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: HqnN3VkaE38EIewSJBVD0eZP/AGcmH/rr1Cpfxvx/uk=
Subject key identifier: 7D:FC:16:A0:CF:BF:61:0D:40:3C:AA:FC:3C:AF:D6:95:1E:12:3F:32
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0194BC3BCC236A8198290DEE04731D6E455A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 06F6
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
2: cMKq-JLpriWlMzpSBU3o-kUT1kg.roa (hash: I7cUNz/JbiqOhEpR7u1ijrS7XgHWRNZvsBcsvvfUeeM=)
3: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: rzz/S0c51G0s2vPc7MehoV0SyZftQYY4iPPBuqopaGk=)
4: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cc:23:6a:81:98:29:0d:ee:04:73:1d:6e:45:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=7dfc16a0cfbf610d403caafc3cafd6951e123f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:bc:e7:0e:fa:5e:a7:1a:79:02:39:de:16:
2b:24:87:0e:84:0a:f1:c7:4c:c7:b6:06:9a:ae:4f:
d3:98:d9:f8:69:e7:dd:01:ae:7b:49:80:2c:f1:6c:
d8:18:b9:38:cf:eb:ad:89:0f:2a:bb:3b:91:6d:80:
13:8e:2a:0b:4e:38:96:f6:87:bc:1f:7b:c2:a1:fb:
5b:fc:be:1a:58:a2:72:73:3a:7c:ca:7f:6e:c9:82:
ac:ae:88:16:27:2c:b0:03:bf:51:5e:a9:e9:be:4d:
08:66:fe:42:c7:8e:1f:8a:39:73:86:c0:8c:a8:c5:
e0:0e:19:56:04:df:3d:f7:fd:9f:e3:1e:02:9c:a9:
58:07:eb:a9:ee:e5:9b:52:9c:f9:11:92:9d:30:47:
af:31:57:ec:d0:a7:ab:d7:29:88:5d:62:47:f0:f7:
48:15:62:53:4c:5a:0e:06:f0:13:97:9e:27:7c:39:
b8:e6:a7:88:4d:0f:14:f2:1b:f9:ef:dd:2c:92:74:
b7:29:29:0c:0b:50:1c:39:54:d9:0e:97:69:d9:35:
e4:bd:1a:24:81:99:ba:71:a9:b8:69:c4:d0:4a:7b:
d5:05:1b:ae:52:6c:eb:c2:cb:7a:18:ef:49:fb:7c:
db:dd:39:4e:6e:b3:4f:ff:25:58:83:c1:5b:ef:2d:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FC:16:A0:CF:BF:61:0D:40:3C:AA:FC:3C:AF:D6:95:1E:12:3F:32
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:df:ed:d7:e9:ed:80:f3:8b:df:c7:d8:22:82:51:fb:e4:50:
bf:1d:e5:88:90:80:25:f4:58:a4:20:19:0f:51:e1:e4:7b:44:
04:39:95:a5:3b:64:9b:0b:10:01:b3:dd:d5:d9:5c:9d:60:9a:
a0:49:ff:bb:d2:e1:28:6f:5d:aa:0d:09:94:87:45:d5:3c:b9:
77:ad:c3:97:b7:57:b5:60:d4:9c:f8:5d:25:d4:be:60:91:e3:
54:3e:c5:a6:55:cd:3a:04:65:a9:ff:86:12:21:6c:f7:ca:15:
1e:c6:6e:e4:c6:60:ca:b8:9d:9b:63:b6:f5:a1:b5:4d:a6:6e:
c2:71:17:a8:59:88:b4:ce:02:b0:93:47:f3:b1:e0:0e:cf:a6:
7a:af:2e:86:22:96:36:37:78:47:92:d5:8e:b3:7a:9a:17:6a:
1c:32:c0:23:f7:47:b3:03:b7:0a:60:b6:c0:95:49:71:ca:c7:
8a:6f:66:34:38:b1:d9:52:57:b9:57:2b:63:4c:e7:ca:6d:83:
ad:7c:7a:21:4f:da:51:dc:9e:5d:41:b1:7d:48:5b:0c:b5:f2:
33:da:dc:0a:b0:fc:ce:de:26:b8:53:ae:51:6c:0c:2a:30:2a:
b4:f7:71:4e:d7:cb:5a:34:65:44:e2:1c:d2:1f:3e:cb:d4:19:
ca:76:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:14 2025 by rpki-client