Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: iR2Heks6sG2v7r/rHm45+9bRsroaxik0ERfDc91qOHw=
Subject key identifier: 1F:4E:78:02:8E:D8:7A:C9:18:F1:67:C4:F1:0C:44:4B:84:D1:5C:AF
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 0194BC3C73631D37FAC8EF1BFC5671745966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 01D8
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: 1uWXPJauvtvifVbThumN2raM6U0.roa (hash: Y17nAyKVcY518yw8/uPGoyc32qYJ3ixC6oOmJrlY3aE=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: brBF/rcpI5YD+qYFIqfeeJ5ccOOrVZgwV3cwV2MfiDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:73:63:1d:37:fa:c8:ef:1b:fc:56:71:74:59:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=1f4e78028ed87ac918f167c4f10c444b84d15caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:06:4c:ef:c0:99:28:ce:30:97:b4:2e:de:11:
e8:fe:63:cf:3e:ad:0f:39:c0:fe:74:9d:20:08:b8:
fb:ba:b0:32:c1:5a:72:44:88:e0:d9:cf:02:ae:ab:
8d:a6:63:a6:a9:3e:ac:a0:27:b8:89:af:5b:dc:cd:
ff:31:56:61:82:a7:e3:8e:57:8c:cd:22:f8:6c:e1:
48:da:3c:eb:09:2b:b7:46:a0:5a:94:87:95:f4:1f:
81:53:3b:8f:a2:a3:9d:f4:c3:c7:f1:a6:4f:48:77:
90:fd:e9:e7:ac:62:95:09:67:30:fc:6a:02:4b:a3:
4b:03:f9:1a:11:10:02:63:a6:ee:b7:bc:aa:2c:91:
a2:e3:18:02:f3:33:46:ed:e4:db:89:ba:c2:84:2c:
65:35:11:f5:b6:aa:dc:d5:11:04:9b:fa:77:b1:98:
a1:c3:b0:ef:58:0a:00:f1:89:04:65:28:87:93:ca:
30:d3:d5:6c:da:e4:de:00:3a:9c:d8:40:55:43:61:
38:3b:97:5d:f3:75:08:f7:5c:e2:e8:10:b3:f8:8c:
c3:7f:9e:de:be:e3:cf:85:59:6e:3a:03:a7:f6:45:
74:98:ef:4f:84:4b:4b:a3:ff:4a:d3:4d:0b:92:52:
37:20:82:2a:86:e9:e6:69:e0:a4:66:04:b1:f5:74:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4E:78:02:8E:D8:7A:C9:18:F1:67:C4:F1:0C:44:4B:84:D1:5C:AF
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9f:9a:3a:40:e3:95:8b:d8:38:ee:53:41:ac:e8:57:21:89:
8c:bd:ee:03:92:bd:f5:6c:b1:f1:ba:b7:6a:ae:b0:bf:5f:e1:
24:3a:68:c2:64:72:56:36:be:1d:a5:13:33:ac:3c:b6:68:a5:
39:82:33:aa:02:c1:ab:86:24:92:e4:bd:93:82:59:ce:6f:f7:
f3:e2:d1:1e:69:d7:a6:98:1d:dc:c1:34:7c:4b:57:c4:b2:de:
39:dc:9e:f4:15:9d:a7:cc:4e:e0:35:16:d3:d6:dc:e0:d4:47:
cc:42:06:87:c0:9b:0f:8c:95:ff:b6:4a:4f:fb:47:82:70:6a:
be:d7:70:15:97:1b:1e:d5:1b:e5:a1:97:07:03:f8:09:d1:02:
ac:68:ef:66:86:9a:7c:97:80:63:a4:07:68:dc:12:89:a6:87:
96:b0:ae:3e:3a:a7:0c:87:05:e5:88:57:b9:81:03:2a:94:2c:
3e:20:0c:5d:59:f2:35:28:c9:cc:68:ed:17:58:f8:ef:59:1b:
a4:b4:e8:e4:a9:6c:d5:04:5a:07:dc:69:a0:0a:65:5c:d3:0a:
ec:d6:1f:7c:39:7f:63:83:ec:59:87:89:76:f4:b9:28:82:1e:
a6:22:96:5e:d7:f3:b5:76:78:46:47:f4:30:53:b9:bf:cd:fb:
c3:10:87:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:19 2025 by rpki-client