Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: q8251YfPdLolJ7m2XLzdVy9iJkQnMrAt1wURxZIZ1sI=
Subject key identifier: F1:AF:44:31:90:62:68:99:47:88:CE:32:4E:C9:FA:CE:29:15:9D:8D
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 0194BCE0C43A7F91A60B7B1F7468AB3CCA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0CA9
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: qZrqb5/RKX4HvX8Z+z2xkRs4AwQBhSapsqMHfrNwpVo=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c4:3a:7f:91:a6:0b:7b:1f:74:68:ab:3c:ca:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=f1af4431906268994788ce324ec9face29159d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:f0:10:50:74:fd:ec:87:35:90:a3:cb:92:
f4:12:02:e0:12:29:f7:77:5b:1d:26:93:94:d5:1b:
0d:6e:09:fc:0a:c1:01:f7:ee:5b:cd:76:7a:17:4d:
1f:59:ec:0b:b7:e1:89:25:c5:ee:99:f7:45:d2:15:
39:aa:7e:b4:12:b8:bd:9d:ee:ee:36:aa:2c:1e:5e:
b0:50:72:f7:a4:0e:7a:c1:05:ed:95:7b:a1:7b:fe:
38:16:dc:e9:8f:fe:fa:7f:47:0c:9c:af:31:97:cf:
a4:ad:7a:4b:88:0c:24:56:2c:80:4f:c3:40:0e:9f:
46:e9:cb:ae:81:52:6a:b2:0a:c7:ea:b8:af:97:5f:
b1:29:e2:a0:91:5f:d8:80:43:93:5f:8f:73:5f:2f:
59:5e:de:28:f8:ae:ff:15:42:be:65:df:b8:95:4f:
bb:21:8d:b4:ee:0e:59:4e:ed:17:ad:27:1c:5c:e3:
0a:dd:ac:d3:b5:c9:5f:66:2c:32:61:f0:68:23:a1:
74:52:c8:19:93:36:e9:da:79:27:5c:2a:46:29:cc:
2d:29:dd:49:1a:90:22:fb:02:8e:1b:bf:76:03:ad:
6c:a8:c2:1e:4a:4b:9f:eb:b3:a4:d1:17:72:43:98:
29:e2:e2:22:90:71:83:36:43:3d:e7:78:7e:d1:6b:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:44:31:90:62:68:99:47:88:CE:32:4E:C9:FA:CE:29:15:9D:8D
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d2:4d:44:89:cb:14:87:f4:67:90:64:3f:8d:17:98:58:17:
94:f3:27:c0:c2:76:76:06:04:ac:0c:be:00:e2:e6:b9:47:e8:
f8:c3:51:72:91:47:06:67:59:b0:9f:68:82:77:b3:17:f0:6a:
fa:89:e3:87:d6:aa:a5:6e:4e:33:54:e4:45:f2:55:fd:bc:a4:
10:9b:70:23:39:3e:6c:e6:f6:41:20:16:4a:b3:fa:11:8f:ac:
c6:3b:dd:88:78:e0:7a:a8:d7:50:06:87:e9:02:20:b6:5b:a2:
fe:05:90:00:b2:83:86:36:30:d2:7d:c8:c0:3c:01:fa:08:6f:
d3:3c:41:21:42:e4:e3:6a:26:fd:13:ab:17:a0:c1:2d:22:46:
f2:04:f3:d0:8b:36:db:fd:f5:25:d2:9d:4d:ab:98:cb:ca:20:
d4:7c:9a:f4:0f:f7:55:12:91:65:49:78:78:cc:bf:4b:4c:1d:
34:84:af:aa:af:17:61:7f:bd:7a:1b:3b:52:93:ec:86:df:9d:
28:46:14:ce:f7:10:89:30:bd:a8:fd:f7:c1:a8:cb:c9:58:66:
ac:04:a7:5f:fd:65:78:25:13:a4:51:ef:bb:6c:32:c6:2a:47:
db:56:a0:9f:7d:f8:0a:c0:3c:bd:ec:bd:50:57:df:ac:f5:e7:
19:8f:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:39:00 2025 by rpki-client