Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.mft
File: nGfqNKARpHc4cVg-w5VOeR2MAo0.mft (raw, json)
Hash identifier: QTyW0nmdaCN06aPhCXxVki+LoFKt9ai9Hgpbf4Y5ca4=
Subject key identifier: 50:0A:E8:E3:3D:CC:31:34:D8:4F:70:76:14:F2:CE:9A:98:D8:7B:FC
Authority key identifier: 9C:67:EA:34:A0:11:A4:77:38:71:58:3E:C3:95:4E:79:1D:8C:02:8D
Certificate issuer: /CN=9c67ea34a011a4773871583ec3954e791d8c028d
Certificate serial: 0194BCAA00C8721B1CA34A7E6ABF169EF335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: NCPzn1GpZq4vT4gRDeBcmpEUhRQ.roa (hash: Vq8Q1+OKJnlcLx/yX0O6NcYNdeQRXSpw2T1WMWL6+Zw=)
2: nGfqNKARpHc4cVg-w5VOeR2MAo0.crl (hash: ZHm6qmkRuozD9jpsdkeG/3sXF6shcxDosoUMOiWgawU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:00:c8:72:1b:1c:a3:4a:7e:6a:bf:16:9e:f3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c67ea34a011a4773871583ec3954e791d8c028d
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=500ae8e33dcc3134d84f707614f2ce9a98d87bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:fa:c9:65:f6:67:15:da:54:cd:a9:49:32:
b1:f7:1b:d4:4a:9a:5d:5e:5e:a5:f4:7c:2e:6d:50:
2d:5c:9b:d6:aa:84:d3:3b:e5:f2:92:58:59:e8:fd:
5a:4a:01:fa:28:56:0e:cc:e8:8b:81:ff:3e:ba:89:
be:33:c1:e7:56:0b:68:45:72:cf:e3:a2:65:5e:4e:
16:2d:42:ac:37:2c:44:13:cd:17:71:41:3d:23:9b:
86:87:a1:6e:9f:12:ad:62:bf:2d:b2:5d:9f:00:5b:
47:fe:29:fa:5a:4b:a3:33:00:3b:8f:e8:73:7f:f0:
86:d2:0a:36:77:e7:45:43:1a:85:a3:2d:1f:37:de:
93:53:80:5d:3b:e2:35:c0:d3:d1:65:8a:f1:88:e3:
10:80:1b:1d:fa:bb:a7:16:8b:a4:e2:56:6c:2c:2f:
eb:65:ad:ae:11:8b:70:96:ba:94:7f:cd:3f:0b:a9:
ed:63:04:cd:ab:d8:83:1a:0d:f8:78:f1:3b:b5:bd:
ac:e0:d8:ca:5d:39:11:84:45:d9:32:76:eb:f7:a6:
11:70:59:26:20:9f:30:fc:2a:ed:0d:8c:f1:1a:38:
4d:c2:b4:d2:ff:1a:12:a0:5a:25:eb:e7:89:07:21:
4c:91:0e:04:1a:65:66:f3:0b:6b:78:cc:66:90:74:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:E8:E3:3D:CC:31:34:D8:4F:70:76:14:F2:CE:9A:98:D8:7B:FC
X509v3 Authority Key Identifier:
keyid:9C:67:EA:34:A0:11:A4:77:38:71:58:3E:C3:95:4E:79:1D:8C:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:53:75:3f:16:83:90:80:38:10:49:d6:9e:61:27:b7:41:52:
59:db:d3:81:ad:bd:08:0d:83:da:b6:89:49:a1:6a:e0:8b:8a:
a1:6a:43:16:ff:38:10:2c:b9:f7:27:8b:9e:11:71:8c:a1:73:
3a:dd:30:0d:d2:58:31:00:59:83:a4:45:93:f1:d4:f7:cd:35:
b6:3c:89:73:7d:65:76:f4:a0:2f:33:da:db:06:77:cc:dc:04:
35:a1:64:92:55:58:76:ce:99:a3:00:6a:5a:d7:84:0f:c9:18:
8d:2c:83:08:6f:f9:13:0d:6f:25:9e:2b:1c:36:88:b8:d6:42:
b9:0f:34:72:6d:1c:d3:ce:2f:7a:6f:b0:56:a5:aa:6f:9d:80:
d9:ba:47:89:7b:0b:af:e1:c6:8e:0a:91:cc:01:eb:ab:d7:7b:
94:36:fc:a6:b4:69:5f:be:a9:4b:9e:82:38:68:c6:be:87:08:
28:21:28:44:00:8b:25:95:27:3d:11:de:61:eb:a7:41:bb:0a:
fd:54:28:72:43:ad:48:d4:b8:6e:02:d9:c9:da:37:24:85:e3:
62:ef:07:a7:78:b7:9e:35:ad:13:13:b2:08:9c:39:02:ed:0c:
5c:35:92:23:60:4b:a8:19:3c:61:9c:17:09:37:56:aa:f7:51:
e4:e0:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:45 2025 by rpki-client