Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier: H2FyeGKi2rmOxh7WOHbD+r7GWpAQQDUiJJm4BRQn30o=
Subject key identifier: 35:81:2E:92:BB:EB:EE:E7:67:5D:8A:C4:C5:7D:CE:AE:BE:84:BF:22
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 0194BC3C920F1631AD9860AE188396B68FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number: 0621
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: fc7SRnOdKWMkfm35QHjuVP63CGg.roa (hash: F0XX2FyPiZEkuc7OrHzEK+HUvlKEvHyVCeFAG2nOzHc=)
2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: p7/J8aRMPJTyGiKlvXcergXWwkmCILnqLKT817a3sIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:0f:16:31:ad:98:60:ae:18:83:96:b6:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=35812e92bbebeee7675d8ac4c57dceaebe84bf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:e0:c3:74:59:bb:b8:d5:2f:09:b8:58:66:
a1:fd:c2:5a:f5:8e:24:50:ac:0d:21:c6:93:dd:99:
19:0a:e6:71:3e:aa:01:ae:6b:13:10:7b:f8:92:b3:
81:f2:bb:e4:7e:39:e7:36:f5:9d:0a:bc:f2:58:b3:
b2:66:a1:51:aa:aa:a7:63:70:07:5e:9e:14:50:28:
9a:38:b6:3d:e1:fe:06:8c:3f:02:77:a9:71:a1:ed:
c5:c7:c5:ec:56:af:3c:ff:e7:62:62:d4:e6:74:fb:
9d:cd:3c:02:77:3b:f1:7b:2b:db:f5:10:10:47:f6:
4d:a1:3c:29:20:48:0b:fb:68:fd:47:ef:66:9e:05:
0e:94:3b:0b:55:03:93:aa:0f:80:96:c5:65:89:42:
8e:69:62:51:72:bd:97:5c:06:68:cc:75:6e:08:b9:
b2:b6:e2:03:b5:be:31:ba:7c:53:98:54:b2:74:f1:
10:fc:91:20:73:16:48:2c:8f:a7:49:c3:2e:4f:91:
96:94:79:a8:b6:a0:70:37:e1:99:92:9f:af:b8:aa:
79:84:1c:f9:9a:64:5d:ec:eb:15:9d:1c:b7:9a:29:
ce:f1:25:d5:76:cd:a9:af:bb:1c:75:11:94:f2:41:
b7:be:ea:a2:63:a3:6d:8b:b3:ff:5f:e9:50:4d:6f:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:2E:92:BB:EB:EE:E7:67:5D:8A:C4:C5:7D:CE:AE:BE:84:BF:22
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7e:de:0c:dd:c2:cd:21:78:df:74:0b:40:91:ba:57:ab:64:
7f:ac:da:e1:64:4e:38:30:ab:56:0d:40:a5:82:88:38:c6:4d:
cd:b8:1f:1e:74:2e:79:6f:a5:35:0b:bf:5e:b9:c5:cb:b8:b6:
1a:67:d0:d1:5c:85:24:63:a1:7e:8a:d5:c5:2b:ae:63:f8:00:
c7:33:22:34:14:58:01:ed:6c:bf:84:11:16:67:42:10:af:df:
48:16:6d:47:58:35:05:9f:8c:3b:83:4a:c5:aa:2c:1d:fd:f6:
c9:74:de:d8:cd:9d:4b:ed:53:41:8a:47:9d:8a:f7:51:c4:16:
2f:9e:6b:b5:db:df:cd:24:ba:80:76:80:af:b6:ca:a8:a2:4c:
8c:95:fc:40:2c:29:7f:28:c9:9e:ba:67:96:89:66:ca:24:ac:
0f:93:77:bb:eb:71:df:7a:c1:1f:83:05:b6:12:3e:51:dd:94:
8d:b3:e6:7f:26:c5:1c:af:dc:d6:ca:53:0a:cc:12:db:83:16:
d5:99:10:8a:23:85:50:d1:65:96:36:3e:51:02:90:3b:12:94:
eb:c0:b0:5b:61:86:fe:31:99:69:4c:e3:c9:d3:89:04:2b:da:
c4:77:99:68:71:ad:ed:ce:d9:ba:04:c3:77:de:e2:00:df:57:
d6:e1:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:19 2025 by rpki-client