Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
File: nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json)
Hash identifier: KPlkQSt3xU5SXpOIW50S+LjHIcUI1K4nn1tRZ6iije0=
Subject key identifier: D2:6B:FD:DA:BD:FF:F3:A4:B5:46:24:CD:6D:B8:FC:40:CF:5C:11:F1
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 0194BD85500F1BB4B6D2A8FF3E18639DEACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
Manifest number: 0953
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: cmsoMlIRCcbLziNipTUjZc3lrew.roa (hash: a1CFCcY0jADOuS6DTKGkRSmsv5gzH4GzUcir7HG6pUE=)
2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: lg/fXGJjI9YGZ/1dXgnw83Z8OcaCp8p/ADyO8lHMPE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:0f:1b:b4:b6:d2:a8:ff:3e:18:63:9d:ea:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=d26bfddabdfff3a4b54624cd6db8fc40cf5c11f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:97:71:99:7a:a8:e2:1b:df:0f:52:3b:c9:
92:55:db:7c:60:d5:0b:f9:36:97:5c:9a:38:8c:ec:
d0:1e:33:c4:c1:3c:a7:a9:87:9c:36:8d:7b:25:55:
63:8d:61:8c:ec:bd:f9:92:55:1b:7e:0e:0b:77:6d:
e9:75:c7:9a:5c:c6:37:20:dc:fc:a0:2e:80:e1:78:
d6:db:6c:84:34:7a:0b:6b:0b:d6:60:1d:34:1d:c3:
1b:5e:80:ec:85:73:e9:24:b8:08:ad:8d:c0:d4:c6:
6d:27:1c:ad:90:f2:76:bc:33:a1:38:26:55:d6:68:
b3:7c:59:be:81:f8:45:3f:95:6d:aa:b9:93:ff:a9:
45:29:76:c3:de:8a:7e:f6:45:61:04:56:fc:7d:e6:
49:bb:32:5d:c5:11:ff:25:39:da:0d:76:d1:57:90:
60:7e:61:fe:10:4b:48:e6:b4:eb:d2:f4:ea:5c:79:
28:3e:97:c2:83:8f:f8:02:60:f1:64:fe:f8:80:49:
27:31:22:9d:51:3f:9c:56:4b:c2:13:c4:5a:da:66:
af:ed:fa:82:74:b9:12:f8:a3:a3:98:28:5c:26:7f:
d4:49:e4:0b:06:ac:16:09:6b:46:10:6f:c4:4e:60:
d6:0e:ee:d7:0e:e3:1e:27:0e:98:eb:5f:98:23:05:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:FD:DA:BD:FF:F3:A4:B5:46:24:CD:6D:B8:FC:40:CF:5C:11:F1
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a4:76:29:39:26:60:1f:1f:5b:ec:20:af:83:ce:b3:7f:82:
13:a1:7f:66:3a:bb:37:3d:64:d8:d2:cc:10:30:25:24:da:2d:
6d:64:78:44:75:01:06:ca:c8:ff:f8:10:40:5f:bc:3e:2d:7e:
0b:e5:c4:7f:f9:5e:d4:ee:c3:0b:38:d9:5c:3b:65:db:f7:e4:
ad:aa:77:6b:5b:ea:42:d9:b3:bb:e4:f3:20:60:49:ea:fa:95:
4d:70:8e:e4:e1:1c:06:07:88:42:e1:d0:05:70:7b:6b:f6:29:
36:f1:6f:ec:82:1c:21:17:9a:0b:a8:96:6b:42:a9:17:81:95:
e7:ca:f1:ea:6b:80:5d:d2:65:4a:94:d4:08:7b:a4:1a:8d:8c:
50:b8:cc:29:56:67:3f:bd:33:c2:c5:17:3b:89:ed:ee:29:55:
c0:a6:fb:21:31:1c:d9:81:ec:b4:82:18:22:2e:45:a4:fb:40:
89:74:00:f2:72:31:7d:5a:c7:e4:74:18:d9:95:ae:37:5e:31:
ca:cf:9a:6d:de:d7:c0:77:21:4e:0b:c3:d7:a8:98:8b:da:c5:
3e:14:84:db:f0:52:c5:d1:8b:dd:68:c3:60:ad:59:e4:53:9e:
54:d1:96:f4:6a:5f:3b:34:2c:a0:35:bd:d1:cb:b7:e1:da:7e:
3e:dd:52:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:14 2025 by rpki-client