Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: aWCsrQnWLygC3u3fWuBbRFuiZbHlTaEOzFvlNIeKA7g=
Subject key identifier: 9D:F9:84:65:AD:BA:63:A3:CA:44:8E:A3:1B:38:83:C3:46:81:C1:82
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 0194BC730561746A840F9BA65632AC85FDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 08C2
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: /GEVD7woP17ejnd+duJo988PNjDWWshnFWjhSfiTOHI=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:05:61:74:6a:84:0f:9b:a6:56:32:ac:85:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=9df98465adba63a3ca448ea31b3883c34681c182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:fc:56:17:22:69:ef:cb:bd:34:a6:7b:de:
4b:3a:a7:2d:08:d0:39:9f:47:13:52:f1:d4:cd:30:
c1:c3:fd:49:bd:17:11:60:99:bd:88:9f:19:38:cd:
88:9d:c7:31:b1:ce:0e:8e:71:f9:0f:06:e9:dd:e8:
61:b9:35:1d:a7:e0:83:f1:ee:7d:b6:19:ab:cb:fd:
2a:d8:e1:50:f7:97:48:1e:ec:24:63:4f:cc:09:71:
11:00:a0:41:5b:48:80:b8:1a:f2:74:e4:f6:1b:68:
74:2f:04:5c:04:8e:75:b3:27:13:85:0d:7c:bb:7e:
08:00:7d:fa:bd:b1:03:59:cf:c4:5a:a5:18:e7:17:
a4:4f:de:25:e5:20:a8:5c:4e:32:d5:88:fd:cd:b6:
f1:61:20:e7:f5:92:a9:70:d2:b0:00:e0:e4:58:63:
25:7b:bc:b9:8a:4f:60:1b:5b:55:73:a6:31:f0:00:
30:f6:9d:6f:47:db:82:3c:e2:4d:fd:ae:50:1c:a0:
bf:6a:83:34:e0:78:58:df:d2:10:13:79:3e:60:34:
d0:52:01:87:37:fe:ce:a8:05:44:8e:9b:cf:65:5f:
06:ad:0a:ef:1c:d6:74:3b:d6:4e:6b:84:a8:ca:57:
33:d7:29:ff:c7:90:ea:f0:e4:b5:7c:3a:1d:0f:99:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F9:84:65:AD:BA:63:A3:CA:44:8E:A3:1B:38:83:C3:46:81:C1:82
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:28:71:80:ae:77:ca:54:f7:17:7c:0d:6c:96:4c:4b:c4:3b:
e2:6a:35:e1:a8:83:b3:06:52:4e:ce:08:28:ac:2f:ae:74:92:
f5:28:99:88:5b:db:da:0e:fd:43:a3:20:38:cb:9a:6c:da:b2:
3c:4e:52:46:91:da:52:ad:d7:68:50:a0:56:74:48:48:b8:56:
18:dd:12:70:0c:4a:1c:83:33:c1:cd:77:44:0c:69:14:7b:12:
f2:0f:17:49:b5:14:66:57:3e:58:c4:e6:f2:2a:2d:12:55:ec:
b7:14:26:3d:60:b8:f5:08:87:90:5d:05:47:91:56:2b:a8:f2:
b1:86:b0:c3:41:43:b7:0b:fb:b6:ce:78:b6:37:af:ec:f0:a6:
b0:a9:33:dc:62:9d:05:6d:a7:2c:ad:ee:06:09:7a:79:9e:22:
bf:b0:8e:4f:82:8f:38:24:52:0d:93:37:74:68:b6:d9:b5:66:
e4:1f:cc:2a:3f:e4:2b:39:7c:e4:6a:16:7d:e4:37:be:5a:5c:
46:4a:f9:34:f3:84:68:9c:fc:ae:da:a3:35:47:fa:92:58:4f:
a2:0c:27:c7:8c:9b:1e:6a:b8:26:a3:72:de:ef:78:56:25:d9:
c4:6b:6b:6f:19:b2:05:27:36:8b:db:b0:c0:ed:bf:8e:37:1e:
fb:7a:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:18 2025 by rpki-client