Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: JtwGxnR0KfMzXjcSzfiRHm01Tgd4sNxwDCYIjb3kTpI=
Subject key identifier: A7:89:40:F9:1A:8A:58:CC:6D:11:FD:E2:B0:0A:88:D2:6C:54:EF:66
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 0194BD8562206DBFE4B9F3878D87A6CD12A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 1139
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: KBPaX26T74rF_b98D5vbCS4Nuz0.roa (hash: nU2QowOmWztQQgJHXXYPFT8tIem+quPQmedvSFuZH+I=)
2: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: VS5MkZ3GgaptOtiVQQ1Q/tOsXc+kdtRQBflF3T7xh9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:20:6d:bf:e4:b9:f3:87:8d:87:a6:cd:12:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=a78940f91a8a58cc6d11fde2b00a88d26c54ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:23:b4:1e:85:95:2b:e6:85:3d:8c:27:5a:
e3:d1:3b:28:b5:67:a6:06:26:f5:fc:58:e7:1e:bd:
c1:51:85:53:e6:49:c1:a1:ae:04:11:f2:89:d6:4e:
49:e0:e6:44:f0:41:5a:0a:7b:df:f6:51:9b:1f:ae:
90:0c:97:11:3f:ce:35:82:50:5d:cb:1c:26:47:d1:
4c:a6:89:1b:fe:80:13:4e:95:99:c1:e3:78:88:bd:
3a:46:6e:a4:63:bb:2e:6d:04:34:65:74:0c:02:14:
0e:a8:5d:34:9a:d0:53:99:34:6d:f8:c1:90:9e:24:
f4:a6:4b:af:d6:3c:e7:6c:08:39:be:fc:d4:bf:df:
02:ee:fe:4c:82:d4:07:7c:eb:a4:0f:2e:36:0c:89:
de:3c:e1:07:53:7f:1c:da:c1:50:b4:75:f1:b5:87:
7a:e9:3c:2c:cd:07:c7:fe:f2:a4:3a:e2:31:e1:e8:
f1:15:a8:a3:a5:8c:87:ec:f5:9c:7e:23:88:02:ff:
1e:f6:bf:f5:1f:a4:d5:df:8e:a3:d0:1f:7c:e8:90:
fa:b6:89:59:06:18:b4:e2:d0:ac:5e:da:9d:d7:1b:
20:88:07:89:df:8d:c0:8f:0d:a9:17:d8:34:cd:04:
86:db:9d:bc:69:7b:ad:30:05:92:c2:7f:11:20:71:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:40:F9:1A:8A:58:CC:6D:11:FD:E2:B0:0A:88:D2:6C:54:EF:66
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d9:c5:7e:82:38:4f:d5:5d:cb:bb:92:27:6f:6c:5b:0f:5c:
fb:a2:a2:2c:69:38:49:68:d5:40:27:d3:69:d2:54:d5:19:f7:
19:06:31:32:c4:1a:52:79:90:3c:2e:c5:ec:82:4f:d4:db:53:
c5:1d:3b:6e:0a:5b:a9:c4:87:79:9e:fe:07:8b:a2:9d:e5:2e:
11:01:f6:c3:fd:1f:ad:fd:cc:ae:50:5c:ee:4e:9f:4d:e5:33:
68:11:3e:23:a2:f6:b5:b4:46:b2:c3:eb:5b:ca:9c:92:53:85:
67:a4:f6:6e:5f:ff:a8:0b:02:e0:b1:6a:39:19:9c:26:05:65:
79:89:d9:99:05:4f:35:70:dc:3d:6a:40:65:ac:cb:f5:bd:61:
33:d6:5a:c4:b2:6c:2a:1c:59:44:64:28:fc:3c:a3:7a:0a:6a:
f0:03:41:5c:f5:7c:6a:d9:9e:1d:f6:f9:d8:d6:d9:5d:22:ac:
00:0b:1d:4d:3f:8f:f5:82:87:51:ca:2f:5b:ba:f5:d7:c7:04:
3d:8d:9d:db:78:bb:d2:5b:55:ea:02:5f:40:28:18:b6:1a:c9:
84:ba:51:76:91:5f:3c:4a:4c:2f:f1:4b:1b:05:06:9d:1c:33:
de:9a:3a:68:45:28:31:e7:7d:67:5c:c9:82:23:1f:23:c5:5c:
6f:d2:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:24 2025 by rpki-client