Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: Dfr8kX/hEjkW//q+Kz/Hm+AIXXVtoCQohoU4AzEoZ2E=
Subject key identifier: 23:D7:57:38:01:80:E9:EA:24:D9:24:C7:D4:D2:53:8C:AF:F9:C3:B5
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 0194BD4EB8EA900448227190F696BB7788A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 079D
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: JY_1PGRtW2cwmX0NWILz4PaMA8o.roa (hash: AxD4kbD5rAUUpHE8TMidnBB9N4smWhsO8xiIIFzpjU0=)
2: Vsn3jYRWMir2G2-W8jrydR_iJwk.roa (hash: +JLCfjRT9K7qAkhsFi/9o8pUTPcML+dFZemwYUpHZ7U=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: RmmR2XhCNfLP2nwZMnmmk4zcOYeg5hi6SBStM/zxnVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b8:ea:90:04:48:22:71:90:f6:96:bb:77:88:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=23d757380180e9ea24d924c7d4d2538caff9c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:63:b3:4a:14:ba:30:26:b6:5f:8d:b7:e5:
c4:e9:db:ea:8f:76:e7:bf:20:b0:a4:e8:be:36:1f:
b7:7d:27:f2:b0:09:fc:a2:7d:9f:11:db:f1:1b:06:
44:3f:2d:fa:f8:20:08:bf:98:68:d7:87:67:89:02:
a7:2c:08:74:90:c5:49:95:1b:01:1b:4f:15:f3:8f:
77:f4:c0:c9:1e:58:d8:9c:c0:23:21:b1:9d:3f:4d:
90:61:0f:b9:ed:2c:d4:ab:7e:7f:38:f0:96:9e:ce:
5e:10:e5:82:4e:de:b0:76:d2:bf:d2:da:44:15:96:
2a:f7:ee:b0:00:de:0e:dc:04:e5:7d:9c:08:5b:eb:
2e:db:8d:a4:9f:f4:fb:2f:84:99:27:58:8f:d8:17:
cb:21:30:be:5d:e9:50:0d:10:8a:70:33:3f:3c:fd:
ce:a1:44:8a:2a:3c:f8:cc:2d:5d:5c:04:7c:50:cd:
ac:c2:e2:b5:68:39:9b:ca:80:fc:99:2f:57:68:b2:
58:a4:10:b0:9a:18:c3:19:18:ce:96:5e:c3:94:ec:
c2:8d:4c:9f:ea:50:92:a6:b8:8a:aa:d0:29:91:53:
84:d3:4e:2b:73:23:64:e3:44:0d:f5:29:8a:a9:19:
97:ea:f2:77:22:2c:7e:2b:e3:12:9a:d1:d1:32:55:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:57:38:01:80:E9:EA:24:D9:24:C7:D4:D2:53:8C:AF:F9:C3:B5
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5b:bd:e5:b6:c5:69:85:c8:c2:45:ec:3c:14:39:0b:88:f9:
6d:e1:51:e1:56:ea:47:b9:0e:ec:50:4c:b4:60:f0:8f:57:ee:
7b:05:9c:d9:80:f1:9c:f6:4d:a9:1c:9d:f4:d8:82:a9:7e:82:
a0:f4:94:a7:81:86:64:8e:eb:08:82:21:ec:6f:f5:5e:6e:8d:
48:8b:3c:05:b6:bd:ef:e6:db:0a:5a:51:22:60:2d:c1:99:73:
b9:2d:03:49:ac:e0:ee:a6:61:ef:b4:a3:d6:86:29:c2:4e:0d:
3b:f6:de:1c:e8:14:fe:4f:23:ec:42:88:f2:df:33:27:1d:96:
85:c2:22:fd:6c:9c:8f:06:b9:40:be:6c:9a:58:e9:7c:57:96:
45:21:91:27:6e:ab:01:80:7c:34:bb:76:7f:ce:13:4c:8e:12:
a2:c2:d7:0c:f2:b1:c1:70:3a:85:73:ab:81:53:42:32:e6:77:
a9:95:31:d8:f9:3f:62:16:62:2e:15:ae:da:6e:bb:ed:e0:9b:
8d:39:ee:b2:9d:c5:cf:8a:89:8e:b8:57:12:5d:24:d2:86:13:
63:b3:a4:56:43:2d:a8:b7:7b:f8:81:4c:b6:c7:60:82:3d:c9:
ba:c9:ba:06:44:58:07:e4:06:b7:06:c4:8d:be:f6:f1:99:d8:
ef:72:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:42 2025 by rpki-client