Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier: q3SVPlSvlxPwi2f2OqalqpJGvfE73mQ+GDWkQ+c7yd8=
Subject key identifier: 62:EB:24:24:C8:70:F8:FA:4F:BE:30:28:97:6B:74:16:83:32:8C:3F
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial: 0194BC3BEBB003AF85C7C8A260B19013E955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: FGO/DD7cishxcjqy4Swg0lFLcjqu1jPs18a6kL5775o=)
2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:b0:03:af:85:c7:c8:a2:60:b1:90:13:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=62eb2424c870f8fa4fbe3028976b741683328c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:21:68:54:15:ac:b3:80:38:8e:ad:ba:7a:fd:
6b:a2:39:07:dd:5d:3e:7c:51:fa:ba:32:88:93:4c:
3e:10:2f:7b:a0:7e:59:c5:a8:62:d3:f2:0a:a1:27:
77:59:fb:3a:40:8d:1c:89:41:bc:bc:7a:f5:17:65:
1c:e6:58:13:44:a0:b5:90:d8:1e:78:a6:05:a8:7b:
91:4d:dd:66:c0:72:48:f8:42:63:b8:8b:41:fe:59:
6f:0c:a2:72:c0:7c:20:8b:f6:b5:dd:6e:36:88:70:
64:2c:be:de:38:c2:73:71:b1:d8:5b:fe:96:01:ea:
a3:4d:d9:df:19:3b:a0:6d:a4:ab:30:ba:dc:19:ca:
b1:a9:72:f4:bc:8a:55:d7:cd:71:a5:6b:cc:88:fc:
df:3d:b2:37:6d:84:38:36:98:2c:26:96:43:f4:7d:
24:e0:06:30:9f:16:f4:f3:ec:e3:6d:b3:05:f8:b0:
95:e5:a0:06:14:3c:99:c4:13:b5:7c:53:9c:c1:61:
47:66:43:51:1e:df:81:38:d8:b0:c6:de:fb:0d:8b:
bd:35:cc:7c:8e:33:7a:c7:c0:5d:7f:cf:78:b9:e8:
0d:f9:37:1c:69:ca:98:bd:70:99:5d:54:a2:5f:2b:
07:1f:37:36:c1:6b:27:10:73:5e:2b:a6:85:55:3e:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EB:24:24:C8:70:F8:FA:4F:BE:30:28:97:6B:74:16:83:32:8C:3F
X509v3 Authority Key Identifier:
keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:78:b5:8a:08:db:ae:c1:69:f6:cc:cc:14:3d:00:73:7d:
3f:5f:2a:af:43:93:29:0b:47:88:0c:3e:ed:20:f6:66:82:df:
cd:72:b8:a2:3b:6b:bd:53:53:1b:e6:88:f3:f5:9c:d4:d2:02:
9f:b3:fa:cb:44:b6:81:2b:e0:c7:75:b1:f7:31:cb:c4:4f:51:
3c:44:31:92:d6:90:c7:c5:cd:a9:db:d2:a8:0c:1f:2e:85:fe:
c9:7d:02:ef:33:28:85:87:44:11:a7:91:75:65:ae:7b:63:45:
83:d1:a1:01:98:68:7a:69:2d:b3:c3:81:4d:2c:59:20:0a:16:
c8:eb:c4:b9:34:75:2f:5a:5d:c2:82:78:b4:ce:b6:88:6d:14:
a5:e6:57:c7:91:32:f2:1a:b4:87:3b:9c:ba:13:00:ff:d2:00:
db:51:3d:44:17:e3:dc:ea:82:05:85:7c:ba:29:0e:09:c2:a1:
f6:3e:ae:49:67:eb:63:7d:76:0b:84:51:2d:73:4d:70:f3:91:
31:be:78:2a:07:9a:96:7b:36:cb:5b:71:bd:7f:13:3f:7c:7b:
3c:7a:7c:08:03:aa:c7:67:8d:05:4d:6a:fd:b4:72:0f:75:34:
c6:6a:37:33:b0:a6:81:3f:0a:5e:33:92:90:d6:02:87:d4:60:
07:18:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:40 2025 by rpki-client