Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: 0tpONjDwV+xsGlJ9OR+8zioyMFDtR/Ang9zER1PtCGI=
Subject key identifier: B9:4D:2C:FE:5C:4D:59:47:E7:F4:ED:11:7F:55:BD:BC:37:A9:19:65
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 0194BC3C1302F5829FD7CB78833594A15F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0CEB
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: 1-XtGkJ8Jd3c4uVesg7xkCJ7ybiY.roa (hash: BQVLo0f3zkM362YzBfFEYph/KCDGOKSVQPjGQsi/Kt8=)
2: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: hPAou8FhrAnUhq12atlUs0n3TWYu+X8JWs8MncJYrio=)
3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:02:f5:82:9f:d7:cb:78:83:35:94:a1:5f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=b94d2cfe5c4d5947e7f4ed117f55bdbc37a91965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:19:49:cc:78:27:9b:cc:bf:11:5c:4d:f2:
6b:00:e5:99:a2:95:a3:0b:94:26:a0:0e:1a:d9:ed:
5c:4d:2d:0e:91:40:ff:59:9a:00:d0:6f:39:a7:2a:
b3:e0:aa:85:81:97:e7:28:a3:81:11:ce:6f:ac:c0:
f4:df:f0:cc:63:d2:ed:89:d8:4e:59:c3:b0:4a:33:
27:f4:f7:22:18:95:0f:05:35:2d:d4:7d:58:a5:e5:
dd:d4:f9:95:5b:6b:d0:24:8d:82:25:d3:78:7d:64:
80:ff:87:f9:51:84:39:c0:da:c4:ca:2e:b5:60:b7:
ca:ff:99:cf:42:0e:62:95:36:b4:db:93:d0:ce:6f:
ec:29:10:89:7d:b5:c8:5c:6e:ca:1c:ce:bd:19:d0:
6a:09:9a:99:b7:20:6c:67:83:c1:b9:ef:f8:36:13:
46:03:55:08:cc:f0:74:00:b9:72:a4:56:d2:c5:5c:
15:a0:70:4b:66:16:ce:2e:af:14:e4:b9:9b:32:f3:
d9:2b:af:9e:c0:df:2e:3d:39:ce:d6:d5:94:87:b8:
7f:66:ae:ad:28:76:a8:8f:2f:00:50:32:4a:93:f7:
cf:56:17:3b:6c:8f:e3:95:ac:bd:66:2a:00:e6:84:
3c:7b:bd:7c:b8:35:ab:7c:c4:6f:75:39:57:12:94:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4D:2C:FE:5C:4D:59:47:E7:F4:ED:11:7F:55:BD:BC:37:A9:19:65
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b3:b0:e3:dc:3a:81:70:fa:4a:74:6e:6e:15:d2:22:93:75:
bc:1e:89:96:1f:5c:79:b9:35:e4:00:51:55:81:b8:6b:93:b9:
16:07:dd:ff:6f:dd:53:67:30:0e:ee:4d:fa:9e:0d:82:a1:46:
5d:21:90:e3:b5:3f:a5:5d:9b:28:05:b8:9d:c4:ce:a6:20:80:
47:95:7a:6f:74:ad:16:6b:9e:94:fa:14:23:0c:79:0d:51:4a:
10:8f:01:26:d9:9e:dd:fb:0d:23:74:fb:9f:31:c9:31:8b:e4:
67:53:66:07:53:28:5c:39:62:6d:4b:e9:7c:c7:ce:77:62:54:
68:8d:2e:4a:f8:08:c9:68:1c:bf:bf:39:b0:80:8f:b1:ed:a6:
72:00:91:bd:30:0b:23:6d:1b:e2:df:df:81:76:df:6f:7b:ff:
7e:5c:04:e9:3c:25:3d:f4:67:5f:53:26:5d:06:5e:6b:43:ff:
4f:47:f8:83:15:ae:40:42:c3:b4:5e:4d:18:9a:a3:60:db:3c:
5b:a1:07:8e:bf:86:6c:cf:ca:76:25:f4:dd:13:99:2b:9d:57:
26:3e:63:26:73:02:d7:89:30:ac:aa:9b:92:65:bf:15:5d:bc:
9e:42:6a:12:f3:eb:42:c8:c3:44:ab:7f:10:34:ac:42:e4:9c:
77:57:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:25 2025 by rpki-client