Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: /e00fbYbnUMvu7OtQU5sx+0F0re9AZsPLuNfIyhJ1wE=
Subject key identifier: 03:1D:A0:F9:92:FC:7D:E1:26:FB:5F:3C:AE:E4:60:C8:96:CA:C3:DF
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 0194BD859AB7C86A9C5442380C923E36177C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 01BA
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: AYO5ySR6vKQrmZIeSqxEJYH/NLWOOj+gCHtAjejBH/s=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:b7:c8:6a:9c:54:42:38:0c:92:3e:36:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=031da0f992fc7de126fb5f3caee460c896cac3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:a6:4f:1f:74:ec:1b:33:2a:e7:61:f7:fa:
af:56:91:26:53:e2:e7:57:5e:f0:5d:1e:0e:09:8d:
a0:1b:2e:51:c1:a1:d0:7f:9b:d1:98:ce:55:44:18:
df:a7:48:dd:7e:33:8b:86:80:e3:ee:49:26:14:e6:
f1:b6:07:f0:72:d3:ea:05:5b:39:cf:1e:42:33:5d:
c3:19:9e:48:f4:a9:00:28:45:26:ea:77:81:1e:9b:
60:2b:b4:9a:c7:8d:6e:b6:09:71:bb:31:fb:ed:b3:
f6:76:08:a2:4a:bf:b8:bd:6a:69:0f:99:62:6f:8f:
31:37:a0:ed:de:42:73:8c:bf:e1:16:00:e7:30:e4:
5e:53:48:12:82:7f:31:e7:5d:2a:c2:94:84:c0:40:
6a:35:3a:b6:9f:79:d1:57:9e:a4:b1:27:c0:5e:ce:
54:61:89:47:76:1d:71:a0:0e:c7:09:db:cf:85:86:
be:5e:5b:26:71:ad:d0:a5:94:14:12:3c:b8:d6:f6:
dc:25:e4:4d:9b:62:42:2e:72:0d:84:e3:94:ec:ed:
16:13:33:f7:90:e6:d6:15:b9:f3:1a:28:d3:ec:7e:
e8:d0:2d:da:77:97:bd:68:4f:52:29:92:8f:d5:ea:
87:12:c9:38:fe:20:b8:53:88:ef:45:31:6d:92:f2:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1D:A0:F9:92:FC:7D:E1:26:FB:5F:3C:AE:E4:60:C8:96:CA:C3:DF
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:55:ac:c8:a5:0c:42:61:88:3e:48:14:7b:96:5b:32:c8:57:
8a:6a:6a:2a:18:70:16:a0:f1:29:00:b7:02:e9:8b:ad:74:06:
d1:ec:12:70:56:3f:13:a3:3a:b6:77:36:f8:6c:89:73:27:3d:
4d:27:83:a9:a0:43:a9:c3:32:11:35:43:45:63:f6:3c:4f:ca:
8f:10:c5:96:ef:13:eb:ff:c2:ea:30:49:af:b3:6a:4e:32:98:
ce:c6:bc:7b:cc:bd:cf:e6:f1:be:4a:ac:ee:41:d2:60:5e:6f:
7b:1c:02:e5:4f:b3:b4:c8:23:78:f6:1f:18:4a:f2:a7:fd:b4:
1f:54:3e:78:3a:5d:2a:ca:f4:d1:fb:b6:0e:26:89:54:40:b4:
bf:3a:56:da:12:7d:58:61:7c:99:a0:64:5e:7e:a9:71:f1:2e:
5d:1e:3f:5c:ec:1c:28:b0:f3:5e:d8:05:bc:ee:58:4e:64:c3:
b5:90:ee:05:37:cf:45:f4:53:a2:24:5b:72:83:ed:31:a0:e8:
84:65:df:f4:c0:76:b3:5d:44:05:1e:f6:0e:7c:68:ca:16:df:
4d:4c:37:d2:a7:91:3e:fc:68:d6:42:f7:c5:a2:2b:d8:b8:9a:
36:7c:91:5a:da:51:5b:85:2c:88:b4:a9:16:9f:46:0e:e2:0a:
5e:a5:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:59 2025 by rpki-client