Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: CVKYwbjkvADI8c2eyRY7qhgA1zhymC5BHfAYWv/NZz4=
Subject key identifier: 4E:05:98:28:09:43:99:E3:4A:A9:10:54:CC:36:84:81:B8:FF:C9:EC
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 0194BBCEAEDF83B833933D00445B2244FBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: HlrhpJe6VFFzuGpl54a3CGvW57kIE8gErmv02m4Uvi8=)
2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:df:83:b8:33:93:3d:00:44:5b:22:44:fb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=4e059828094399e34aa91054cc368481b8ffc9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:28:a4:6a:78:4d:00:59:ca:b6:d7:af:e9:
a1:e7:3d:53:ab:69:3b:8a:cf:bf:ca:0f:02:5a:f7:
19:fb:42:e9:f6:b7:46:2e:32:38:5e:d8:2f:f0:b8:
99:9c:6e:e0:13:80:ca:e0:ab:0b:fb:e1:83:87:dc:
24:47:26:7b:96:23:52:06:e1:71:53:d8:48:84:fd:
06:0e:47:89:07:3e:25:0b:b6:fc:6d:1e:ea:6a:31:
bb:92:0c:ac:87:88:2e:88:9f:40:eb:35:6c:5f:fd:
c6:ca:c1:af:f7:13:a1:df:7e:43:3b:96:11:6f:3b:
9e:af:80:e2:fb:6b:08:57:e7:90:69:5e:f1:2b:26:
71:99:7a:c3:4b:85:17:08:7e:7e:27:97:16:88:fb:
8e:f5:9a:d0:55:be:9f:e6:ba:80:30:1f:04:7f:87:
37:fa:93:fd:4f:14:f2:00:0e:18:56:b7:75:fa:3b:
35:93:a7:41:72:36:8c:a5:e2:b2:6c:36:8c:5f:83:
70:e4:d5:30:b8:95:f2:dd:bf:60:e4:cb:66:79:30:
f5:1c:f0:f2:2e:5c:f2:5c:f3:72:33:57:e9:51:40:
1c:6a:a3:84:5b:22:b7:f9:1b:8e:04:6e:28:1d:b6:
93:05:ed:78:00:1c:b2:cb:97:ad:05:0b:ce:ed:78:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:98:28:09:43:99:E3:4A:A9:10:54:CC:36:84:81:B8:FF:C9:EC
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d1:61:9e:e9:8d:68:21:8e:e3:9b:de:79:92:9d:4c:cf:f8:
43:ce:27:72:02:23:38:b0:65:3d:11:4f:d2:8e:c4:dc:e8:33:
ca:0f:c4:d8:c0:3c:09:51:fc:b0:2a:63:ef:57:4e:e0:41:6b:
41:79:e2:44:04:87:55:3d:28:4b:b4:75:18:6a:76:18:ae:eb:
08:41:5c:81:03:d8:b6:4a:4c:86:dc:39:84:d7:01:ba:87:67:
f6:be:94:43:e6:33:6b:50:84:4e:d2:fa:03:fa:09:7d:10:3e:
94:99:01:63:b7:93:78:b9:42:7f:99:10:c3:39:ad:66:80:88:
d4:ad:98:a7:60:37:27:bb:6e:3d:7f:b4:38:7a:66:85:40:cf:
48:d8:de:31:d9:a2:10:ec:e2:92:27:0c:6a:85:28:cd:2d:30:
58:75:f0:19:30:45:c0:3c:ad:b7:35:e1:56:09:cc:5b:d0:12:
6b:1b:be:1b:ee:59:4c:32:a9:f2:29:49:55:56:b6:66:4c:fb:
78:d0:a5:4c:82:8b:f9:2e:d3:55:c4:65:8d:1a:b2:e1:7b:da:
19:f7:dd:4d:25:1d:6d:59:5a:62:04:6c:78:21:5a:ae:0d:33:
d5:6f:6a:25:3f:c8:0e:f1:fd:9b:48:b0:2e:ac:86:28:54:63:
04:ad:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:34 2025 by rpki-client