Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: i/BjFG+h0o+ZTGKMggjJ8fAtCX0zyQe8lyFXPmm32Ic=
Subject key identifier: 29:6D:02:4A:B7:CF:EE:8A:72:9B:C6:2A:D5:65:81:05:5A:30:A1:C6
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 0194BC72F86CBC1BB258306D5B39EC5173C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: x5UjZJg4PXzvJWv8dlfSL+eVe+LTQlQdiBuoiq/5Rhs=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f8:6c:bc:1b:b2:58:30:6d:5b:39:ec:51:73:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=296d024ab7cfee8a729bc62ad56581055a30a1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:1c:be:79:b8:8e:aa:38:8b:9c:7b:2e:96:
af:50:ee:6c:8e:2a:57:cd:10:af:82:8e:18:22:3a:
32:42:57:47:39:5e:11:c0:b0:0a:d8:01:bb:6b:4b:
7d:2f:46:7f:92:8f:17:29:fc:f1:b6:9c:05:9d:11:
08:ba:58:7b:89:19:43:62:4f:c4:1e:04:48:5e:bf:
35:d1:d4:e9:97:11:6b:1e:10:6f:25:f2:a8:ce:38:
70:51:a0:dc:7d:51:02:04:f8:8b:b6:18:76:20:d9:
0d:52:b1:03:d1:31:26:4e:cb:4e:80:61:ab:3b:f5:
bf:e1:b4:89:52:4e:d0:5f:58:c0:d7:3c:0f:21:ee:
85:7b:15:e8:dc:09:3d:75:c8:ca:40:a8:91:ef:a1:
db:1d:46:b8:7b:44:8f:47:9c:7a:45:80:13:8d:38:
53:f2:10:7a:90:93:0a:88:9a:ae:14:27:43:ef:2b:
7d:d2:3c:58:1c:81:61:09:ad:8d:9a:f2:2b:dd:ad:
79:79:58:48:e4:ca:4e:d0:90:7a:d9:ba:bd:97:6e:
6a:2a:50:c3:46:ff:35:28:f6:5a:13:62:12:b6:d5:
89:1f:e6:a9:d0:72:8c:f6:c4:0c:7a:3b:77:d6:de:
21:15:2c:d1:4d:84:59:c8:22:3c:d4:68:9c:a4:bb:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6D:02:4A:B7:CF:EE:8A:72:9B:C6:2A:D5:65:81:05:5A:30:A1:C6
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2d:a1:10:ec:a1:a6:6c:8d:3e:b8:f0:04:cc:5f:94:a8:8d:
b5:83:a8:2c:d5:42:cb:8c:53:2b:df:21:1f:ac:cb:8a:1b:62:
71:75:88:50:6f:1d:c5:f1:6f:20:78:92:13:87:3c:9b:c1:33:
36:a8:40:c4:30:af:ad:b2:0c:62:31:6d:3f:bf:e8:39:87:dc:
16:08:bf:0d:24:4b:63:6d:a9:ce:66:05:a0:89:51:03:0c:a0:
07:89:64:ef:c4:6d:11:e4:4f:56:c7:f0:b4:7b:15:52:d8:b3:
11:aa:3c:9b:5c:6f:60:35:f3:d4:d2:fc:41:d7:28:48:ac:b2:
ea:bd:20:7e:ec:5f:a9:aa:13:cd:74:57:93:76:68:98:a5:49:
d9:c4:65:7f:79:79:45:a6:70:98:66:1b:8e:3a:7c:c8:52:a7:
e0:81:1b:04:47:1f:9e:e4:1e:73:6c:8b:73:9f:77:a3:1a:f6:
05:de:e2:a4:8f:45:63:e5:ff:a8:f7:6d:6f:29:49:90:de:06:
48:3d:49:5e:73:af:99:a7:c1:d4:59:c4:79:3b:43:f3:14:e4:
69:f6:ed:75:8f:88:92:46:51:bd:91:52:c1:e7:e5:9e:ae:64:
e9:42:22:aa:40:82:02:29:b1:7a:32:03:ad:87:7b:e9:07:d1:
55:40:9f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:40 2025 by rpki-client