Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: khCOsz/k+44536ZDH53e4KXXCCj5HBuMSezWLJFZQv0=
Subject key identifier: 35:D3:4D:7B:AE:8B:0F:14:6F:3D:CD:13:D7:46:F2:A4:AE:75:A0:9E
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 0194BBCED62DBB3AE0506A2FEC17292334AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
2: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: YQ7Oa4lobssCMLcs05pyxbl7U6lghtcsrqX0o0txKHs=)
3: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:2d:bb:3a:e0:50:6a:2f:ec:17:29:23:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=35d34d7bae8b0f146f3dcd13d746f2a4ae75a09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:ce:79:a4:be:67:15:27:fa:ff:be:18:21:
71:b8:42:4b:34:92:d3:0e:a5:94:bf:8e:9b:53:a9:
73:44:69:e2:68:20:4f:75:bf:90:c0:d3:f8:88:c4:
d6:54:c6:3d:c5:5e:ef:1d:12:91:b3:0f:1a:4c:bb:
f0:04:25:f8:f3:ca:63:70:e9:26:4f:d0:69:7a:35:
69:6f:79:09:73:be:1a:3d:9d:c3:54:36:4f:b1:a1:
dc:e0:26:98:98:52:39:ef:fa:5b:ec:9a:c7:f5:4c:
4a:25:79:2f:ea:95:bc:2f:98:05:5b:a3:d1:9f:10:
2d:a6:82:f4:a0:32:1f:5c:ef:e8:7c:1c:53:02:11:
41:47:cf:c2:ba:a4:98:96:f0:c3:5c:84:03:72:b4:
65:0a:67:58:60:02:f7:4e:55:16:4f:ce:ff:93:0f:
84:32:6a:58:5f:2b:ab:51:87:a7:4f:28:c9:e1:46:
e3:43:7d:34:a9:b0:90:bf:d7:9c:20:48:8a:03:81:
87:85:d5:3d:52:2f:2d:78:6e:dc:f7:8d:55:c8:0c:
7a:ec:34:aa:05:2f:d0:f6:cf:44:d9:2c:d4:4f:25:
28:a5:13:5f:ba:fd:8f:02:1d:70:f9:14:63:09:19:
17:f7:66:97:bb:52:90:9b:89:f2:3e:2f:41:f4:61:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:4D:7B:AE:8B:0F:14:6F:3D:CD:13:D7:46:F2:A4:AE:75:A0:9E
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:64:b5:ee:6c:60:3d:e9:46:28:cf:ac:e8:b7:97:4f:de:16:
c8:63:08:1c:4f:32:6f:93:cd:8f:ce:3d:60:e6:67:af:a0:74:
73:0f:f0:38:67:a7:fb:dc:1d:e4:48:cf:34:7c:4b:76:e7:b3:
30:2d:75:d0:19:d5:86:07:b3:ca:fc:1b:25:e5:3d:5f:0f:77:
23:0d:bf:d9:77:ca:f2:94:60:4a:11:f7:27:a3:b2:a7:46:12:
19:8d:4e:00:93:cd:2c:2c:44:b2:aa:ee:26:5f:b4:62:b8:2a:
8d:1f:22:73:e8:0a:1a:d5:65:f6:c1:6e:2b:cb:48:25:26:67:
12:29:fa:06:63:36:0c:60:03:c6:84:b8:c5:14:97:97:b9:0a:
c4:dd:fa:e3:64:18:d3:10:5d:b2:f8:94:e4:26:50:f7:e1:e6:
99:58:1b:d0:45:f6:5e:22:63:d2:d3:8c:b2:a7:e0:30:f9:80:
9c:66:3c:80:68:72:02:c1:ef:a2:6c:c7:98:a0:4b:e0:15:7e:
15:b6:46:2c:c9:5a:7b:cf:30:14:86:bf:98:68:13:c2:85:3a:
07:45:cf:88:8e:71:5a:08:df:d8:fe:18:04:37:48:28:42:7c:
02:1c:bf:3f:df:82:d0:b0:a3:0f:e9:25:c7:68:ca:b6:88:2f:
d6:8d:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:01 2025 by rpki-client