Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: 4XrzVjmMCnLUPXkUkYbmki0tc4PuIGrvIc5z7ghkWr0=
Subject key identifier: EB:17:4B:FB:44:10:08:3F:AE:63:70:66:83:82:14:C4:37:FE:AC:AC
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 0194BC04CA7A83745FB48F79B8D966656D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: X5wEy/PemX8RLoYsnA98FW2u/iBpCiOs6S4w1uxuTyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:7a:83:74:5f:b4:8f:79:b8:d9:66:65:6d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=eb174bfb4410083fae637066838214c437feacac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:6f:7a:3d:a0:22:47:f7:c8:d2:0d:07:58:
13:1f:1d:31:69:c3:ed:e3:99:cc:fb:74:94:96:f8:
75:2c:05:e7:c5:25:b1:bf:bb:cd:46:34:29:4c:9c:
61:93:ce:27:7c:7e:f8:c8:92:f7:b1:66:14:02:15:
de:0e:f2:fd:bb:56:68:6f:a7:54:f2:49:3d:1b:5c:
e2:0e:c7:83:14:d7:2b:2c:de:56:7d:bc:06:b0:3b:
51:18:6a:5e:7f:4d:0f:63:c3:79:02:b4:39:9e:37:
11:3a:bb:b8:2a:19:86:4a:51:d6:d0:c4:d3:0b:c9:
2c:4a:9c:fa:11:d9:03:61:5c:c8:38:58:b5:7b:cd:
56:8d:6f:0d:8d:87:80:a3:44:4c:7b:40:fe:14:43:
fb:eb:be:3b:98:c8:2c:2e:d2:68:b6:86:7a:f5:e4:
b7:a6:f5:8c:10:eb:ed:1f:f6:ee:78:f2:c9:ea:5b:
a1:37:ce:ff:b1:15:05:51:cd:6b:27:64:d7:cd:69:
d1:d8:69:2d:37:ec:2b:ef:b0:bd:34:39:ea:af:3c:
59:c2:79:cc:01:71:0a:3b:c4:33:8e:4c:64:b1:da:
29:25:d1:e3:44:39:03:94:01:bb:aa:29:1a:0a:61:
35:89:ce:10:b7:84:3c:4c:7a:a4:47:1c:63:11:c6:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:4B:FB:44:10:08:3F:AE:63:70:66:83:82:14:C4:37:FE:AC:AC
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fb:33:7c:bc:a9:60:14:38:ac:5f:95:2c:1e:ce:7e:00:fc:
44:71:75:68:b7:a2:0d:36:76:9b:50:1b:0a:24:ee:0a:61:a8:
d9:5f:69:af:e6:be:1e:50:0b:db:ed:c8:ef:8e:d7:1d:33:a3:
25:3e:a9:0c:36:ec:e5:ab:32:81:19:40:29:dc:e7:69:0e:85:
ac:fc:22:d7:6f:84:02:a4:5d:7e:ee:fd:9e:43:b3:98:28:d8:
38:bf:99:9d:2c:d2:b9:97:62:ae:e1:63:93:9c:49:e1:bb:e3:
6e:90:ba:63:a3:78:76:e8:77:e5:e9:07:20:08:d2:31:3e:87:
9f:df:18:2f:18:d5:3f:9e:66:76:1d:e8:73:4d:f2:42:42:b2:
e6:b9:fd:93:8d:b6:1d:4e:90:7c:d4:2e:03:c8:d0:5a:ad:f6:
22:9b:da:4c:7d:11:0f:1a:d2:38:21:75:bf:32:7f:e7:c2:9b:
6d:e2:59:0c:cb:88:da:54:78:2f:25:36:c0:b0:38:f8:6a:b6:
b4:5e:b8:3b:4e:df:c7:ce:6d:8b:fa:99:34:e4:43:ae:d3:41:
1c:7f:c2:87:5f:81:d7:5f:29:30:1c:63:92:5a:df:c7:35:f7:
e1:27:96:7b:a2:55:e6:37:57:63:34:1a:12:08:36:28:6b:b1:
cd:64:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:12 2025 by rpki-client