Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: OACu+wR8QWN2hRtUMYFIIrmH8mQxYnxhGI+WPjpDFq8=
Subject key identifier: 38:26:67:7E:F2:76:AA:FC:6F:58:2E:0D:E7:08:EB:F3:28:BF:A0:56
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 0194BD4ECAF4BC06FEE0E7E9C10937624A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 0D29
Signing time: Fri 31 Jan 2025 17:00:45 +0000
Manifest this update: Fri 31 Jan 2025 17:00:45 +0000
Manifest next update: Sat 01 Feb 2025 17:00:45 +0000
Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: C0j54wqC0yGsage1kdMq64AizyLZq8laeseJyxfLSaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ca:f4:bc:06:fe:e0:e7:e9:c1:09:37:62:4a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Jan 31 17:00:45 2025 GMT
Not After : Feb 1 17:00:45 2025 GMT
Subject: CN=3826677ef276aafc6f582e0de708ebf328bfa056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:ae:35:67:bd:44:7e:4c:8a:79:85:2b:4e:
b5:18:5a:d4:db:88:52:43:d2:47:6e:6b:11:20:b3:
7c:05:32:66:7d:d9:18:1d:61:54:59:dd:16:18:53:
a6:7e:65:28:47:2e:83:d1:cb:71:ed:a8:e9:1a:ae:
bf:10:7d:26:e0:3b:9a:8b:b5:92:d9:33:9f:b7:6c:
ef:57:78:5d:9c:28:28:83:1a:96:4f:de:c0:b8:a2:
12:0d:b4:7b:ba:f3:27:9b:f7:3e:29:a9:2f:da:2a:
b0:56:1d:e4:ce:2a:d8:7e:d9:25:29:fc:69:0e:cc:
5f:01:71:55:27:72:8d:06:66:8a:77:90:82:f4:d2:
09:96:1a:9c:aa:d7:94:6e:1f:ce:63:9e:79:e1:81:
ca:c5:bc:c1:69:df:ed:3e:cc:c4:06:a0:41:55:d1:
00:0c:4e:ca:76:b0:ba:12:01:52:85:ba:6e:e4:46:
b2:66:f2:62:b1:7e:e1:7b:07:24:99:ce:64:7e:20:
0a:fe:6d:f5:45:b4:24:05:29:7f:92:94:66:00:d8:
08:4c:49:c0:b3:0c:77:ff:eb:60:9f:01:ef:38:35:
76:a9:f1:58:4d:2f:75:54:ff:40:44:a5:b6:f4:f9:
29:33:5c:9e:6c:01:b7:d6:a4:0e:56:5a:fe:58:c9:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:26:67:7E:F2:76:AA:FC:6F:58:2E:0D:E7:08:EB:F3:28:BF:A0:56
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:02:a2:bc:46:e8:80:17:e8:da:b6:78:5f:fb:8a:0c:fa:b8:
61:1c:ca:f4:73:c3:08:3f:4f:fd:79:9c:97:3a:4e:75:9e:c2:
4f:85:50:39:f7:d9:9d:92:8a:62:50:6b:59:2a:ba:d1:fe:7c:
32:97:ba:23:c1:94:c5:3d:87:1d:cd:cc:73:d6:f6:ce:76:3c:
b1:27:e5:70:c4:85:04:db:f6:df:83:1c:d7:ed:2e:af:66:cd:
c2:a2:bc:81:19:59:1b:25:f0:ba:b8:4e:dc:9e:e8:cf:01:68:
3b:dc:d3:b1:cf:1a:3f:d3:29:cc:66:f0:ca:42:a1:27:5c:4a:
b5:e5:f2:86:ef:1c:ac:41:e5:32:e5:7f:04:99:74:2e:d2:9a:
3a:df:41:88:3c:77:ab:31:69:89:4d:40:1e:cf:c7:aa:7b:41:
79:d4:fe:4a:8c:6a:b7:b3:a6:69:27:27:4c:bd:56:9e:97:4c:
03:c5:62:55:23:f1:d1:a5:4b:74:3d:05:bd:e2:35:cd:e1:ae:
99:c9:34:be:71:50:30:23:08:ea:e1:8f:d7:25:f4:36:c8:e8:
ef:fd:a0:bb:3b:62:82:2c:91:43:97:41:39:d7:0b:c7:06:df:
f6:c8:35:51:f9:dc:b3:60:98:ed:2d:bc:6f:28:37:07:ef:8e:
38:ed:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:52 2025 by rpki-client