Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: bX09zTBF5+FSYqINXUENp6GZ8inLt6fYbwIforFDoK8=
Subject key identifier: 0E:39:F2:89:F3:C5:51:E5:EB:E0:DF:89:60:8B:A2:23:26:4E:70:EB
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 0194BBCDC9CC93D15B7AB129816C2ADFFD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 083F
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: SnWCr8okO4IHbJ+lYShCCyALVNCARjIoBQ0EY+DmZek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:cc:93:d1:5b:7a:b1:29:81:6c:2a:df:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=0e39f289f3c551e5ebe0df89608ba223264e70eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:8e:11:af:8a:7e:c6:79:c7:3b:fa:f2:e7:
3c:a8:d7:c3:32:4a:30:fe:ee:b9:69:89:8f:bc:69:
7f:32:8e:33:49:6f:c3:24:c8:c2:ca:9d:7a:d7:1f:
91:b6:a3:ab:78:9e:1b:c5:88:38:f0:91:d4:55:93:
79:75:0f:09:21:31:c4:86:dc:ab:84:ff:89:d2:14:
05:bb:47:7a:2f:9c:26:0d:9e:d3:1b:f3:02:ac:33:
97:9b:a0:f0:c1:17:e0:ad:ee:4a:5f:09:73:8c:38:
cf:e4:b9:d9:a1:3d:02:a8:f2:2b:d5:90:cc:0a:28:
38:c7:89:c7:75:85:08:ac:a4:51:cc:37:1b:e4:e4:
af:ef:81:ed:a9:36:2a:94:4f:f1:1a:e3:2a:06:2b:
f5:15:00:1d:d4:0b:d3:68:ca:b5:3d:de:14:3d:30:
44:32:10:35:f2:ea:92:cb:17:f1:64:c1:4e:bd:81:
b2:a6:cb:8b:6a:60:69:60:4a:cd:12:89:82:95:6a:
8b:80:80:ce:ab:ab:df:8d:3b:26:a6:79:dc:9d:3d:
8e:0d:98:fd:f7:78:ff:77:48:08:ec:16:78:84:b4:
e9:fa:c0:4c:4e:a0:d5:05:e8:05:50:cf:a2:40:88:
fd:41:32:4c:23:e2:da:9b:ca:02:2e:09:49:c5:8b:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:39:F2:89:F3:C5:51:E5:EB:E0:DF:89:60:8B:A2:23:26:4E:70:EB
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6b:45:0d:7b:87:14:cd:31:07:59:02:79:b2:e6:74:e7:c3:
70:70:40:43:f2:b4:d2:27:54:98:65:a4:4b:30:da:43:9e:b9:
c1:1c:c5:3e:82:fd:33:43:71:40:3b:56:7b:8a:a0:b8:0f:bf:
87:58:c1:7b:16:24:94:4b:d4:15:e2:7b:77:21:72:e9:37:47:
11:43:04:a1:f7:a4:79:9c:2c:09:15:cd:0f:e3:e1:b2:eb:0a:
23:db:2a:3c:b6:c2:51:01:20:87:a2:d8:a0:c6:62:e5:a8:65:
e0:7e:a4:f4:ac:51:1f:0f:dd:81:88:29:9c:d0:c1:34:04:d5:
32:a0:42:ec:3a:31:57:ed:7a:b2:97:d8:82:bc:93:6d:a1:87:
fb:ed:c1:1c:59:da:89:88:b3:b8:8f:e3:0a:de:48:25:dc:e7:
9e:82:c6:c1:58:63:b0:d4:c0:bc:8f:bd:6a:b3:21:f6:ff:f0:
9d:c2:d8:6e:00:da:43:5f:14:0f:56:e4:d1:2a:ec:ea:2a:df:
6c:79:a6:b7:8d:e2:f4:6c:39:ec:1a:89:2e:fa:10:5e:45:f8:
c7:62:ea:d4:00:93:02:7c:e4:49:17:6d:79:b1:c2:1f:f3:a5:
b3:30:b0:2c:76:24:37:22:d8:ef:47:8c:53:23:b7:fa:ec:79:
85:5d:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:26 2025 by rpki-client