Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: 8euvPvOqzWs2fi/9eXH20uuGtZWd3pfWPxBucs8O7s8=
Subject key identifier: 4C:D2:7D:7E:6A:FD:25:BA:6D:55:85:4A:D2:4C:21:E1:7C:88:8B:A3
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 0194BCE079316AECAFE0443E1E9C3B1401A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: 188Xwwbc+NtG9Q2wWjmIYRWon30Sxu3+iQJ/rxe4ygI=)
4: l_Zl6Bdklv_5gQIP2-GoHw2h630.roa (hash: 758J6t2HjKBISKYrQMpMuTTyf2sp8gnP+Us0wkwf5Ko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:79:31:6a:ec:af:e0:44:3e:1e:9c:3b:14:01:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=4cd27d7e6afd25ba6d55854ad24c21e17c888ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:57:59:6b:78:9b:67:ae:c9:68:30:2a:b9:
e4:ce:4f:a4:d3:6e:60:0a:8c:a4:4f:95:0c:65:49:
4d:f7:0f:5c:4b:d2:b6:e9:6e:83:98:f7:66:ea:07:
86:74:b4:9b:d0:1c:ab:1c:aa:ac:48:08:c0:fd:3f:
ff:98:45:6e:66:8b:3e:bc:ea:88:04:0e:b1:d9:9d:
fd:d9:af:be:17:66:d3:71:c9:ca:d0:de:30:0e:a3:
a3:f6:72:75:d5:8c:84:56:66:a3:c5:6e:47:33:ae:
eb:b0:36:1b:82:80:4b:a5:03:5b:b0:ae:c3:3a:f1:
8b:02:9a:8b:36:f0:80:69:f4:a0:c7:34:94:5d:a3:
b3:70:67:94:49:46:fc:cc:ed:98:b6:21:0e:31:10:
82:8f:c0:84:32:b1:40:41:37:d0:ec:56:1e:d0:2f:
4e:51:62:92:49:de:78:b3:0d:ba:ef:de:37:dd:52:
77:16:7c:57:eb:8f:15:c7:a0:bd:a8:e0:29:36:06:
22:27:c9:43:79:e8:21:00:a6:e7:1a:98:55:cf:d2:
04:85:cd:db:36:42:17:9d:99:df:9a:3f:34:73:2f:
2a:49:49:6d:68:35:4f:43:4f:14:da:c8:31:20:0c:
cb:f4:1c:8a:b3:60:4b:72:06:6c:e9:4e:0e:21:57:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:7D:7E:6A:FD:25:BA:6D:55:85:4A:D2:4C:21:E1:7C:88:8B:A3
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d4:66:19:97:ce:28:65:b6:bf:2f:c5:b7:ef:9f:52:74:ba:
db:ea:66:62:11:b7:ca:c5:71:da:16:a2:f1:e5:0d:c8:4e:6f:
cd:21:85:87:31:b3:17:9c:87:ca:3b:7c:6e:50:f9:bb:09:6f:
c6:52:a4:a6:e3:4d:cb:39:28:45:a4:13:5d:bc:b0:9b:5e:89:
69:48:46:6d:10:5d:29:48:e2:e1:1d:ff:ed:71:c3:71:04:a0:
cb:f1:1c:85:f1:f5:ff:85:2c:ab:92:b8:08:22:88:24:d1:65:
20:09:dd:6c:f5:43:6e:ca:20:c8:6e:b6:43:6d:52:ed:99:6c:
1b:27:11:c2:f2:0a:a4:b3:a7:7c:0a:87:72:e5:fc:9a:f2:26:
0f:ef:8a:61:09:b0:f4:b4:b4:b7:25:67:df:79:83:b5:72:c9:
69:29:b8:75:4d:c0:5b:51:4c:1c:ea:6f:60:9c:b5:cc:eb:39:
58:f9:37:60:fa:2c:c6:0c:9b:56:e1:ea:36:b8:1c:6f:46:3a:
64:ac:ec:09:c9:e1:53:e5:7a:4e:f8:02:84:81:61:ff:fe:b1:
b3:f1:b8:91:a2:7c:b9:a6:c1:e2:20:dc:2f:ef:3d:8b:e0:2d:
ea:c3:21:32:6e:3f:3a:96:fa:93:99:c6:93:00:33:c6:5c:a4:
ae:a0:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:37 2025 by rpki-client