Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: HZG56/86wcQBhIsyFYMGhImbzOWii3ZaqVvqhNN+AXU=
Subject key identifier: 1F:C4:B5:74:A9:29:08:E2:06:85:B2:5E:19:0E:B5:26:FA:6D:DB:2D
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 0194BD4E9ABB6A71184C6146D124DD240161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: EpEEDO6av2BjZqXM7PJuDNRRddc.roa (hash: goR8NYgMvQvI2XaHVSHQ54m82iix34JIgDUIXRKLU78=)
2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: K9s+3OzvAaQ+Klw61VzKdUXivp+gbAcc0T1GKyRIyGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:bb:6a:71:18:4c:61:46:d1:24:dd:24:01:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=1fc4b574a92908e20685b25e190eb526fa6ddb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:d1:7e:f8:46:6a:fe:ce:26:7a:71:a5:50:
7a:c2:45:a6:86:f3:2a:a9:50:24:64:cc:e4:77:51:
0e:ca:1d:7b:9e:58:ae:ba:00:31:29:a3:18:c9:4f:
87:ae:a5:73:61:bc:b8:93:49:f5:ab:11:f5:5a:f8:
ea:91:68:7d:de:91:a7:da:37:a3:69:7f:26:2b:c8:
10:54:50:4d:9d:8e:5a:07:73:c8:fd:8c:92:34:8c:
2e:74:4a:e7:a1:db:68:99:a8:17:3b:a1:35:5b:44:
ae:bc:f6:04:9c:d3:1f:43:fb:6e:56:7f:81:3f:e9:
f4:14:30:5d:e8:89:de:32:23:a4:07:58:b4:43:a4:
a6:4f:da:d6:8d:df:d5:04:a2:df:38:7c:f2:ad:80:
89:be:49:51:f8:1d:b1:26:a4:78:1b:23:19:42:3a:
37:d2:a1:48:5e:46:22:cb:46:79:64:e0:f5:b9:47:
12:2d:80:e5:68:64:c1:93:70:ed:e0:26:17:51:7f:
78:b8:5b:cc:eb:87:b9:b0:f1:17:6c:5b:9f:09:16:
25:c5:fd:a7:1b:50:c7:bf:e0:f0:5c:96:45:be:c8:
4e:d9:11:e2:21:02:06:12:9a:f3:df:e6:ec:7a:a7:
23:96:e8:5f:d6:bd:d6:b7:10:1f:1f:94:56:cb:e8:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:B5:74:A9:29:08:E2:06:85:B2:5E:19:0E:B5:26:FA:6D:DB:2D
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cc:fa:08:8f:d5:24:f9:73:bd:6e:e9:23:5c:0b:d3:6f:5a:
da:ae:7d:08:ec:50:22:3d:83:1e:19:93:8b:6b:67:8b:2d:71:
4f:31:c6:33:85:bb:03:68:d7:b3:de:5c:9b:82:a3:8b:d2:c2:
9a:05:3b:79:ef:f1:ed:19:b7:d1:2a:8b:ba:79:df:1e:d9:0a:
39:58:fb:69:ce:76:c8:63:8a:00:4b:36:63:6f:80:94:f8:19:
57:b0:aa:20:a7:9e:64:72:72:d2:c9:3d:b1:60:9c:04:c8:3f:
40:5d:eb:8e:be:8a:c9:26:83:e2:59:e9:e9:91:5d:44:35:a2:
5a:b4:84:fb:ed:22:aa:ac:3c:ad:44:10:07:cb:cb:b8:8a:9c:
79:a2:ac:ae:59:cd:d9:ad:9a:ac:a5:fe:9d:c8:cd:f5:f9:c0:
df:42:79:25:cb:95:93:78:c8:96:3c:bb:55:99:fc:8b:5f:30:
4d:ab:4d:63:d2:e7:80:80:64:19:ac:ba:43:1b:67:2c:96:ae:
d9:fc:5d:fc:14:b5:6d:0f:3b:1a:5f:d4:61:1e:1a:e3:c7:17:
a5:ad:2e:28:d0:ce:7f:80:53:c8:3f:b2:cf:f9:c4:78:fb:80:
38:21:b7:44:3b:66:ef:80:23:54:06:3e:d9:56:b4:46:d5:2d:
8e:e7:8b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:31 2025 by rpki-client