Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: +yi4jhbYHMvrjwXJwr0pZWuOHtoUfPbsPwsItGa2+Ks=
Subject key identifier: FF:92:4F:1F:9C:61:5B:63:1B:6A:E2:FF:F4:2F:F6:ED:73:16:CC:A2
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 0194BCA9A4775B3EC2ACB1448322DACA8126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 1247
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: pY/pAEb0H1HiQy+L1h+8n+JCNQCAo+VUBGuIB4if7rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a4:77:5b:3e:c2:ac:b1:44:83:22:da:ca:81:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=ff924f1f9c615b631b6ae2fff42ff6ed7316cca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:fe:dd:d7:b7:c2:69:f8:e4:a4:0d:75:94:
12:b1:fc:91:37:68:1f:7b:ec:9c:c6:92:5c:3a:71:
49:39:a5:4c:0a:3b:b4:7c:b5:3f:2e:09:ca:e4:92:
1a:53:73:0d:ba:2a:9b:7f:cd:a9:71:0b:ea:ff:28:
59:8b:d7:b5:d4:f5:7b:7f:62:46:05:62:ca:da:19:
cc:dc:05:5d:f8:85:57:47:42:38:a2:43:ef:b4:af:
c3:96:85:87:04:b5:4e:14:cc:62:a8:d8:ed:36:e3:
03:41:df:2b:c9:93:f4:2c:06:89:b8:cf:83:79:5a:
3f:a1:2f:98:a8:ae:63:f4:87:a9:c7:f0:fa:8d:2f:
6a:0f:54:31:87:4e:f8:2a:87:80:f5:ed:5b:7c:ac:
70:fa:9c:39:05:ab:67:db:10:81:44:e6:64:51:8a:
0b:97:65:25:51:6f:de:91:fd:5a:fc:4d:9b:7b:67:
e6:f6:12:df:c5:a3:a9:98:32:b7:7d:98:ff:28:6c:
4c:2f:a4:f1:69:9b:02:4b:e0:c0:3d:af:9d:72:82:
a2:92:85:6a:b7:27:7d:ae:42:b4:44:2f:13:64:dc:
51:90:14:70:c0:17:5c:08:5e:ef:9d:c3:d4:f1:6c:
97:bd:69:ec:6e:ae:56:02:ac:57:d2:df:4a:b2:68:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:4F:1F:9C:61:5B:63:1B:6A:E2:FF:F4:2F:F6:ED:73:16:CC:A2
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:d6:c9:b2:8d:82:9d:29:e2:b4:fc:1a:60:2e:7e:de:84:
97:f4:d7:a6:91:80:4e:54:c3:6a:c3:61:86:2a:a2:91:2a:98:
d3:75:80:cc:37:81:d7:53:95:3f:0b:be:75:d5:4b:8c:af:a8:
50:d3:b0:4e:7d:95:df:d5:bb:19:ee:7f:25:ce:62:2a:60:d1:
cd:0b:df:11:38:ce:ff:dd:40:52:64:e4:55:45:e8:ef:0b:39:
b1:c4:a0:71:c6:dc:4f:7d:0a:aa:ae:ad:a1:88:91:5d:4d:9f:
c7:e0:db:98:ab:40:46:f9:47:22:8a:1e:e3:1f:6e:4b:b5:e5:
06:2a:84:18:31:27:4d:96:77:8f:ba:d1:11:7e:f1:ae:23:70:
21:79:8e:b6:c4:7a:a8:cf:06:cb:17:9d:79:d3:8d:53:9c:1d:
80:e8:30:b7:1b:b2:54:4c:22:40:5c:98:28:05:2f:86:34:c0:
8b:77:48:cd:38:73:2b:d4:cf:b3:2d:bf:ab:2a:b2:fb:44:49:
8c:91:7e:04:d2:ec:29:64:5d:33:8a:e2:19:3b:6d:b9:a0:f9:
b5:24:04:98:a0:d3:82:43:05:1f:77:1c:fe:e1:5c:e6:4c:6e:
e1:96:40:50:30:e9:1a:ac:54:d1:66:a6:4b:62:fe:cb:17:96:
76:c3:e3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client