Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft
File: NIVmBh42jK_xiBviusZzff08Hbo.mft (raw, json)
Hash identifier: iS96TESdqdQWQ8nYmS3v+LW8p2qtg36FoqCBeW0z5VE=
Subject key identifier: 13:4F:C6:F4:D5:15:B5:C4:44:A6:B3:C4:E4:24:6E:D5:40:78:C2:EE
Authority key identifier: 34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA
Certificate issuer: /CN=348566061e368caff1881be2bac6737dfd3c1dba
Certificate serial: 0194BD4E44B5EEB4AB17852FFEAE929C0656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: 0_2q2dp_nihFIcTaoAnETvnQKo4.roa (hash: bKtto0Xp3QOWNDaUxe4CkFxL1b1NtMArjGe69yHE/5w=)
2: NIVmBh42jK_xiBviusZzff08Hbo.crl (hash: sFEdPDaGqFNm5gGjQ6GRum+6q3D1yRmH4J/92UT5+RY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:44:b5:ee:b4:ab:17:85:2f:fe:ae:92:9c:06:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348566061e368caff1881be2bac6737dfd3c1dba
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=134fc6f4d515b5c444a6b3c4e4246ed54078c2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:d1:11:72:45:a1:fa:8e:bc:2b:6c:9d:d2:
c7:26:26:24:12:f1:06:f6:6e:75:1f:51:bd:a1:1d:
f6:b1:55:30:96:b6:15:94:9f:39:07:09:81:6a:95:
f4:cf:e6:99:73:23:57:0c:ac:71:02:19:85:89:0f:
24:76:31:b1:05:7b:c9:cd:7b:d2:70:b4:cc:ff:64:
e6:58:33:bc:1f:eb:f1:f1:d8:38:9b:7a:5e:b2:18:
d2:26:ac:a2:a0:87:63:49:99:a2:bd:fa:62:a9:40:
4d:e3:14:a6:84:98:06:42:b6:03:e5:95:e2:6c:e5:
b9:ea:91:96:f0:7c:c2:94:18:2a:1a:bf:58:c9:b6:
a8:99:c7:6a:f1:39:13:eb:ba:b5:75:e3:c9:4b:ea:
be:f9:fa:4b:cf:92:9c:fe:e7:a8:de:99:08:df:de:
95:73:9c:2a:66:37:34:08:ad:5f:bd:3b:68:85:d0:
27:27:46:8a:4e:4a:51:f8:17:c5:32:c6:b5:36:3e:
85:57:8c:33:d5:f1:39:3a:0e:47:1d:06:e0:cb:1a:
ce:f3:67:eb:69:98:b8:d4:00:68:86:fb:77:95:4b:
32:38:51:0f:3c:31:20:cb:a0:34:77:21:e6:31:c0:
ba:a7:92:45:77:2a:4c:c2:b7:4a:3e:ad:43:2c:14:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4F:C6:F4:D5:15:B5:C4:44:A6:B3:C4:E4:24:6E:D5:40:78:C2:EE
X509v3 Authority Key Identifier:
keyid:34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a2:d3:99:08:1e:b9:f5:5c:af:53:dc:26:c8:eb:95:dc:8b:
65:b5:05:cd:0a:b3:7b:d3:ff:b7:56:9f:39:2e:4f:b1:4a:f9:
f2:13:ee:5e:0c:62:f0:c3:2c:1c:b4:02:c7:8c:2e:e1:07:42:
f9:85:eb:f7:44:18:b0:06:aa:b4:ff:d6:21:9e:98:a3:1d:d8:
e3:e2:07:de:53:d9:7c:02:25:19:21:06:92:ad:29:7d:06:72:
4c:32:70:b7:cf:6f:2c:65:02:ed:24:5d:33:d8:a6:8c:dd:fa:
c5:f9:5b:b4:e9:62:4f:57:96:5d:9a:30:32:e8:bf:ad:a2:43:
cc:5d:2b:9f:f3:09:6c:38:ad:c9:9a:52:13:d7:6c:64:07:64:
0c:c6:99:14:82:1a:b9:41:2e:b1:b5:ab:47:ac:55:17:09:1a:
a1:e8:53:4b:d6:d3:ae:01:4f:ed:1a:d0:68:65:e7:4a:0b:2a:
40:7a:58:de:ff:af:e9:7f:d7:99:49:0d:8f:30:19:c9:b1:a3:
e4:7a:df:12:7b:0c:b5:74:d4:1f:87:15:6a:75:3f:bf:6c:72:
7a:e0:c7:06:c5:c2:d8:46:e8:13:be:4b:97:55:a0:12:53:e7:
f0:53:9e:30:d8:8c:d5:53:d6:17:61:2b:02:62:95:1e:7f:d1:
e9:cc:e4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:41 2025 by rpki-client