Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: 0akETz+Ijb7W3IGogYzl4QgbQxEqRdVuq0MaME4vZAw=
Subject key identifier: 1C:D1:C1:7B:3B:3F:22:18:D0:35:B4:7E:01:9C:F1:9C:E6:71:3A:F8
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 0194BCE07C191469A8B1C1F1C2A870B31F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: aW2Pju8PwCaIkmpr26vYpDj4T1izXscP7U+O2IMXSXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7c:19:14:69:a8:b1:c1:f1:c2:a8:70:b3:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=1cd1c17b3b3f2218d035b47e019cf19ce6713af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:9e:94:01:52:8f:49:d5:c7:6c:35:70:c5:
f8:2a:0a:b5:84:98:6f:1a:85:cf:d9:3b:39:0a:19:
ec:4c:ec:2c:9a:2b:0f:83:f9:65:35:f1:8b:f0:f8:
23:78:ad:ee:88:27:c1:b0:9b:42:73:14:08:ba:25:
f0:67:bd:39:c1:b7:3f:05:89:54:5c:86:89:47:aa:
ce:81:d9:2c:51:92:19:58:36:be:3f:24:2f:d7:8b:
1e:89:6f:b6:f8:2d:4f:fc:1d:a6:a5:4c:cb:a5:76:
00:ab:4d:5e:05:b5:89:b4:96:8e:06:a8:98:c8:a2:
d2:d7:77:87:bf:70:42:87:65:70:95:f8:87:1b:54:
ae:d2:00:71:bd:bf:a8:4c:e7:55:b6:18:e6:e6:7c:
0b:fc:b3:8a:4c:21:c7:04:35:bf:bd:9f:1b:3e:96:
5c:81:29:0d:1b:c8:4c:0d:58:55:16:06:a1:7e:24:
b9:13:d2:98:77:69:7e:ab:b7:a2:b6:bc:6a:2e:02:
f5:30:54:58:00:bc:52:8e:8e:bb:7c:ea:ab:36:09:
83:e3:d7:c5:60:f9:f0:c2:9b:aa:e9:a7:c5:c1:c7:
14:b7:54:63:35:c0:8d:4b:8b:58:cf:a0:67:aa:12:
05:79:57:e9:83:22:ed:70:d7:ec:a2:79:ce:a8:d7:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:C1:7B:3B:3F:22:18:D0:35:B4:7E:01:9C:F1:9C:E6:71:3A:F8
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:93:d6:19:49:46:26:cb:59:6f:84:5b:a8:9e:56:2e:e4:dc:
ef:0f:f5:30:f5:65:65:fb:40:0e:38:26:2e:14:7b:d4:c4:7e:
37:5b:7c:8b:ba:53:df:69:d5:ba:06:1a:6f:c9:56:62:cc:79:
02:98:ad:7c:16:2a:25:7d:ca:40:56:ee:21:18:1a:bd:11:50:
06:61:8c:69:e6:7e:b2:1a:22:81:d8:95:b0:14:f2:fa:74:e8:
7f:74:7f:84:1e:67:b1:df:c2:b6:ba:4d:88:9e:27:6c:88:5b:
45:9d:74:9e:2e:ef:30:9f:08:e8:a5:68:a8:56:d1:ee:33:c0:
5d:3a:76:44:d8:bc:70:e5:38:b0:f7:1f:f2:8c:6f:1e:54:f5:
20:3c:05:66:35:d8:de:38:8d:36:dc:b0:1d:ab:10:cb:7f:98:
d7:fd:f1:1e:67:57:09:63:23:33:55:2b:50:8b:b5:7a:f7:63:
43:38:0e:f4:34:7c:33:29:be:e7:f9:30:d1:96:0e:fc:53:00:
ab:79:a3:d5:35:1a:76:f3:e9:86:66:cf:40:c9:ef:88:d9:c0:
e1:fb:92:6e:c5:9f:1d:46:9e:fc:4a:59:56:f6:3c:3b:19:f2:
e0:c7:60:ec:79:5f:d5:83:b0:fa:0e:c5:54:28:6d:65:1b:07:
81:69:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:50 2025 by rpki-client