Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json)
Hash identifier: BZpgyDXwW1MmJOZlXcMu7+W7LJBsEPwNT4+03M0tTN0=
Subject key identifier: 3E:7A:E9:5D:4B:0F:27:92:1F:AC:95:D8:0F:DB:8E:DC:E6:52:67:3D
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 0194BBCDF57ADF970BAE47E93CE53AD73B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
Manifest number: 0415
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: MJgreWjojTG3TWAm0IOsT3PX7yE.roa (hash: QQOCbVX4ydh8RHwVZnu9QI+n2Ns0Q1CadZGcMjFSReI=)
2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: FPnErrsAuQ47rUDcOsBayiWUTlxM81ZR/J5CULlcHzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:7a:df:97:0b:ae:47:e9:3c:e5:3a:d7:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=3e7ae95d4b0f27921fac95d80fdb8edce652673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:51:7a:f2:f5:5b:fd:a9:df:74:e4:a1:62:
69:be:6c:83:aa:c5:64:bc:21:ac:45:2b:74:12:21:
ad:f9:cf:c5:e5:23:59:af:db:c4:c2:14:8b:3f:a5:
91:02:9b:2c:ce:ca:90:e5:f8:c3:38:5b:11:b2:f6:
0d:11:eb:56:bf:e3:1b:52:25:89:de:08:d7:fa:3a:
a9:71:18:7d:f1:12:b0:2e:a8:d2:3e:26:ff:22:8d:
55:20:89:92:0e:f1:2a:79:e5:59:41:0f:e8:e9:a4:
e4:fd:57:21:a0:ae:98:be:65:99:8f:26:b2:ab:4a:
65:dc:86:8a:19:6c:1b:b2:19:0f:e1:45:b5:65:53:
1e:20:e8:63:2c:e5:ae:05:80:49:44:74:48:45:bc:
de:01:e9:c9:df:b2:0d:ed:7a:2e:65:54:67:10:b6:
40:57:b9:69:f8:f4:50:60:c3:64:36:9f:cb:8f:bd:
82:48:4b:f7:14:4f:4b:d0:83:4b:f2:79:f6:70:47:
eb:86:34:2d:14:b7:55:24:ca:f7:9f:45:fa:f8:58:
5e:33:43:2f:d0:72:44:87:56:5a:5f:82:0d:b9:69:
cd:5f:17:bd:39:25:3c:88:f2:00:ec:53:46:49:45:
33:82:13:67:ae:9e:49:f4:9f:6a:b3:a0:89:b1:08:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7A:E9:5D:4B:0F:27:92:1F:AC:95:D8:0F:DB:8E:DC:E6:52:67:3D
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:18:fc:02:fd:49:6a:df:39:19:b6:f0:c4:5b:ee:35:18:7a:
0a:2e:19:b7:0e:6b:45:7b:95:cd:56:cc:70:99:19:4b:7c:c0:
ea:36:a4:27:9e:be:61:16:f3:2d:4c:26:4a:ce:70:3f:00:2b:
7c:e7:ec:84:a7:2c:80:a9:a7:9d:d2:3f:fb:e1:2d:4f:42:67:
13:e2:0b:05:84:40:8d:da:99:0b:07:e3:48:90:38:cc:07:76:
8f:d5:18:c6:33:50:a7:0b:83:ad:2b:b7:0b:bd:fd:52:66:a2:
cc:a9:0b:7c:33:fb:58:31:e6:1c:a7:43:13:ab:0c:0c:93:db:
43:32:b9:8e:9f:97:f6:89:6f:7f:9a:4b:01:1d:d1:a6:ab:68:
df:b1:d2:8e:b4:64:de:cb:23:7e:7f:7b:42:b4:ac:40:58:58:
f9:9c:96:f3:63:70:b3:fd:16:65:1f:6f:af:5f:64:31:f3:03:
42:55:01:ff:20:05:16:75:6f:a2:20:b5:29:8f:46:91:93:d3:
0e:fd:9b:21:d7:4c:6e:28:9f:5c:a2:3f:81:38:06:db:3a:42:
e5:44:80:c4:3c:ff:b1:2d:04:03:3e:d7:05:c7:64:41:68:ed:
4c:bc:d5:92:b7:8e:dd:72:fe:65:be:16:d6:e6:88:be:fa:03:
04:37:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:09 2025 by rpki-client