Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: KBj+65Xwr+W8xmcDrT3U8NwofPaUdJPrJh/Fq+abyDc=
Subject key identifier: 76:AA:40:AA:B3:5C:B7:9A:88:62:43:A1:8A:20:33:D4:C4:4E:45:F2
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 0194BD17C4374AB3E6D447C7585AA8EB5E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 0CEB
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: IhOEqb6oVwO99vSsFbzxWypzWPiAJImk0uoKWAHl1Yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:37:4a:b3:e6:d4:47:c7:58:5a:a8:eb:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=76aa40aab35cb79a886243a18a2033d4c44e45f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:38:0e:82:53:fb:de:da:8d:04:a3:75:af:71:
c7:13:bd:d9:4a:06:be:dd:0b:18:8b:f0:db:01:67:
65:e6:d7:08:72:cf:2a:49:85:bf:b7:8a:1a:63:90:
11:5d:d9:c3:97:e1:3c:aa:b0:79:49:00:23:cc:d3:
a2:25:e0:08:de:d5:e6:bf:05:4e:12:59:a7:5d:ad:
97:2c:25:26:8d:95:39:4f:73:13:42:65:d4:a6:d4:
6f:39:f4:17:99:b5:8c:b4:5e:41:38:bf:b8:ea:ea:
7e:39:02:fd:be:25:16:04:4c:31:92:a4:7c:3f:b6:
dc:9a:97:e8:c8:3e:1c:18:70:9c:c3:e9:23:49:4f:
de:e3:b3:7a:17:da:6e:20:25:4d:ad:47:c2:f0:70:
ad:e5:33:52:1b:23:f9:64:dd:83:1e:cf:6c:ae:3e:
71:26:8b:67:8c:3f:54:8b:af:56:7a:7e:d6:7c:65:
b5:0a:5c:be:88:d5:74:96:92:c4:97:2e:af:72:81:
4d:10:2d:f3:7e:8d:e4:9a:08:04:0f:c6:dd:31:83:
6d:b7:12:f9:bb:98:90:20:78:17:e0:77:36:55:0c:
20:37:1a:7e:9b:55:d5:73:32:39:71:04:98:e3:e5:
4c:52:83:71:71:8f:5d:b6:0f:81:05:66:a1:ad:47:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:40:AA:B3:5C:B7:9A:88:62:43:A1:8A:20:33:D4:C4:4E:45:F2
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:02:94:f2:4a:1e:de:eb:2c:83:a4:44:31:7b:ca:ae:82:20:
cf:f3:62:bf:49:89:ad:10:d0:59:ff:98:a8:60:4a:91:ba:da:
39:cb:6f:d4:18:6e:59:f2:f6:25:34:c0:d5:6f:d2:56:15:43:
d7:d5:41:6d:6b:b0:a8:8b:7f:38:9f:5c:7d:90:b8:53:04:13:
98:43:2b:bc:f3:4a:ca:0c:07:f6:51:fb:62:b4:18:aa:c5:65:
3f:af:5f:16:ba:e7:b6:99:87:65:0e:2e:b4:02:50:da:f2:41:
40:0e:24:aa:fc:c2:37:7e:69:a2:4a:2e:b7:c0:83:7a:2e:ef:
06:64:89:c5:8c:ab:ab:ba:43:4a:ee:35:73:de:c3:04:6c:d6:
7f:11:2c:96:78:ac:08:9c:69:07:0d:5b:46:39:9e:27:ab:6f:
a6:ba:b4:60:1f:b3:96:fe:c0:75:3a:70:b8:24:a2:36:0e:1d:
77:58:0f:d3:ba:b5:73:e2:77:e1:8e:ab:44:de:f4:47:5c:76:
4f:be:c8:e4:4d:dd:05:b8:d5:6f:27:e8:8c:e0:a9:18:90:84:
28:10:6a:44:9d:df:39:49:5c:50:ea:a6:26:25:74:77:e3:21:
1d:60:65:d4:dd:2a:0a:38:5d:8e:ad:4b:b1:83:8b:b3:ef:1c:
4b:38:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:48 2025 by rpki-client