Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: celaGOSY6P75U4R9dk7P2hfnqU8BAvpdz0QOqyPJJAI=
Subject key identifier: A8:FF:2C:D4:88:B8:77:08:CF:4A:54:AD:78:B0:CE:42:39:1A:22:04
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 0194BD8561FF5D642736568ACDAEA7E2109B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: 0DrYQM/4+mVfDiwKiDBRcFsJDqR6div/PxIm3c5lySU=)
3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:61:ff:5d:64:27:36:56:8a:cd:ae:a7:e2:10:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=a8ff2cd488b87708cf4a54ad78b0ce42391a2204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:f3:6e:63:80:dc:02:a8:6e:fe:27:51:40:
57:20:55:20:7e:34:ec:e5:46:2f:d7:2e:c0:2d:8c:
72:ef:b1:76:ee:94:e5:01:ff:18:68:4a:e9:d8:a9:
44:08:fe:b4:3e:b4:a6:d1:b4:69:e9:52:69:9e:f3:
f8:b0:c2:b1:35:af:5f:92:ff:23:dc:e5:ba:b1:fb:
3b:31:13:f9:79:4f:60:2f:fc:a2:55:e4:25:79:28:
1a:11:4b:37:8e:dd:21:78:71:8f:39:ec:cc:ff:ad:
e5:bc:cd:09:7c:ca:29:bf:99:2c:ed:0b:47:a9:ab:
33:63:46:09:64:a8:b7:7b:cc:06:4f:44:1e:59:44:
d9:f7:42:3e:15:12:af:bf:1a:83:63:1e:56:1e:b8:
ec:8f:9e:db:b7:81:4a:0b:25:27:3e:1f:a3:b3:73:
1b:a1:63:50:5f:f1:0d:44:96:a9:4e:2c:35:3f:85:
5f:4b:12:0d:54:28:d7:b0:17:e3:b8:b6:1d:7f:b0:
6a:0c:8a:8f:68:e6:48:2b:75:e5:3e:a6:1f:d5:b3:
2e:df:a4:72:20:30:54:35:76:ea:b5:aa:c2:c6:34:
3d:27:5b:29:3d:11:85:ce:50:37:de:a5:55:b6:df:
33:06:d1:23:13:4d:a8:f9:7e:29:54:f1:5a:9e:02:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FF:2C:D4:88:B8:77:08:CF:4A:54:AD:78:B0:CE:42:39:1A:22:04
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3b:b6:56:7b:f5:8a:47:63:ed:19:c7:88:b5:3e:50:52:dd:
b4:91:c1:ef:e9:49:94:c4:b4:bf:28:d9:f6:ef:19:7b:8f:10:
f8:71:09:f6:5f:03:8f:d2:2a:32:68:0e:ae:e2:35:42:a8:9e:
37:4d:c7:e6:2b:39:46:e4:41:1d:c7:4a:d0:a1:14:6f:36:86:
84:4a:a6:a8:b0:c1:ed:83:e2:7f:b8:3b:39:f6:54:29:19:af:
f7:9c:8e:56:41:b1:27:9a:08:3f:49:23:00:03:b0:23:c2:33:
e6:66:58:3b:cc:bd:6e:16:16:41:db:5c:74:e1:7e:82:89:4f:
c5:c1:7b:10:fb:ff:6e:a0:67:67:a6:7c:53:22:ca:43:8b:31:
ed:24:3e:c6:06:9f:7d:2c:7d:37:2d:5a:a1:d7:f8:d9:ee:48:
fa:15:db:42:c1:b8:74:78:fb:7b:cc:65:4a:70:7a:f6:f0:54:
47:48:d4:fc:83:35:07:50:ec:72:5a:ca:77:d1:6f:30:58:40:
6c:e6:28:02:8f:e3:bc:aa:05:1b:c6:92:7e:14:6a:d5:ab:ba:
8b:06:b5:0d:8a:21:3c:f0:bf:b4:17:26:1b:6d:ac:aa:e0:c9:
3f:df:72:3b:b0:36:39:9f:87:c5:31:94:f0:73:28:8c:2e:78:
73:16:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:37 2025 by rpki-client