Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier: PwDVeDNZ9YGDALBMtRNi/2j/vm8zZW/O3NModpW6Rj4=
Subject key identifier: 1A:EB:EA:2E:23:9C:44:7A:4F:9E:A1:D8:24:0D:06:91:8E:1E:16:79
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 0194BC3BF5DC009F2CD706EACFF89D65506D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number: 0DF5
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: s06nuWNLe2GoFndasSKgGUfA0pBYOqhY3dCh+eqiCfM=)
2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:dc:00:9f:2c:d7:06:ea:cf:f8:9d:65:50:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=1aebea2e239c447a4f9ea1d8240d06918e1e1679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:71:f4:ed:f5:b5:54:75:4f:8a:5f:f9:fb:
f3:d5:1c:79:53:b3:c5:66:40:fd:13:45:d8:5d:37:
d2:48:d5:04:ae:55:42:3d:1e:25:3d:b7:71:ba:f2:
73:bc:00:0e:67:53:fa:2c:2f:b5:5e:9f:1f:56:ce:
e6:b9:0b:20:28:a4:47:1c:db:b0:84:55:bb:95:56:
dd:4c:4d:41:8a:04:07:4d:48:6b:bb:4a:f8:0e:98:
d3:bb:98:4f:6e:67:69:39:36:f5:69:9c:ae:a1:a6:
d7:22:e3:9a:d8:0a:ca:e4:7c:74:9a:7b:0b:e6:32:
ba:f7:33:d4:64:95:81:78:9f:ee:2d:cb:a3:cd:55:
8d:39:74:01:40:85:83:72:2d:9c:64:df:a3:e1:5a:
61:e4:67:b5:22:0c:66:cf:96:f4:56:91:84:45:18:
1c:bb:0a:68:3d:f9:1d:cb:00:4b:f6:94:d1:c1:e8:
d4:8b:6d:79:b9:87:e1:e6:71:16:c1:4a:3f:13:44:
15:e2:57:5d:a3:ed:df:bc:2b:d2:d5:d0:c5:83:e6:
92:4b:8e:57:1d:8f:c2:50:73:4f:0d:b1:b3:ee:0e:
0f:a0:12:6b:9b:e5:45:b3:84:b7:8e:1a:5a:81:ac:
bc:af:47:db:6f:27:8f:dd:40:84:17:f9:58:0d:c7:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:EA:2E:23:9C:44:7A:4F:9E:A1:D8:24:0D:06:91:8E:1E:16:79
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9d:ce:74:4f:31:5a:52:f2:57:9d:50:92:31:79:0a:58:f9:
71:d7:5c:25:4d:c2:b3:16:dc:b1:c2:79:c8:22:a0:e8:62:7a:
27:d5:66:39:89:5a:d7:46:4f:e0:27:bc:4d:36:85:fc:fd:50:
02:22:06:3b:8e:7a:cd:44:29:a2:16:26:91:f9:10:16:90:c7:
c1:18:7b:e8:59:12:aa:0c:e9:ac:09:a3:30:e7:fa:9d:fa:b0:
62:c0:51:38:bd:19:7d:65:ce:c6:f1:9c:41:e2:86:e0:ac:7e:
a5:5c:e1:23:cc:06:bc:78:ec:b5:32:58:c6:f2:11:91:d7:3b:
7c:88:c0:07:36:3a:a1:3e:e1:e8:97:78:3d:b7:ec:21:b9:36:
34:bb:f6:14:6d:0b:d7:b7:eb:62:5f:67:27:97:26:4f:4a:53:
96:3b:b3:2a:65:65:9a:eb:8b:fd:01:a7:c6:d3:a4:df:d5:48:
51:ae:d0:62:4e:ad:d1:a4:ee:81:ed:7b:5f:f6:1d:57:66:f9:
bc:6d:cc:36:0b:8d:b5:b9:7f:b5:72:2c:9b:ba:c0:e0:23:9f:
f5:8e:d5:bf:b8:f7:8e:3b:45:ee:e6:58:ed:7d:85:14:55:1e:
90:77:78:c7:6c:48:d9:9f:dc:5a:fb:0f:46:bd:7d:c4:19:bb:
6f:01:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:26 2025 by rpki-client