Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: BGlQbQGlUjUrqD3pJCdHKkrmD0w6f6J0f9mYmbg9x4c=
Subject key identifier: 05:74:9A:00:7C:84:9C:45:10:3E:F4:39:82:4D:5B:03:A3:EE:26:FA
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 0194BC0527F0F0F30AB2E3F65725E8B3AEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: B6
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: OWn2GJfm+GhGoPuoqQbEEjL8QV+P94hREmdgGhtGvdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:27:f0:f0:f3:0a:b2:e3:f6:57:25:e8:b3:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=05749a007c849c45103ef439824d5b03a3ee26fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:04:22:3e:54:59:44:2a:c5:31:b1:27:30:
85:a3:ad:46:e1:7c:52:3d:fe:e1:ea:77:c4:b0:fc:
f8:23:cf:20:52:fb:0b:6f:09:2e:cf:53:57:b2:1d:
80:1c:00:7e:f3:d3:e0:61:b3:b2:4e:28:58:5b:63:
03:5b:6b:60:0b:62:35:09:f9:ee:52:dc:3d:82:9d:
67:61:61:99:d0:fa:b9:e4:7a:43:70:19:7b:a7:05:
a5:38:cd:ea:c8:5c:d8:9b:8e:3e:6f:e3:e3:f6:3f:
f5:10:93:3e:7b:0b:28:b2:79:20:67:10:ef:ec:a0:
09:e0:13:7a:4c:0f:fc:df:8d:12:d0:c9:78:50:07:
6d:71:d0:a9:2f:a1:3e:fb:95:0b:e6:f4:d3:8e:92:
5a:6c:3a:79:c4:5e:dc:5e:a0:73:6b:d0:9b:f6:3d:
bb:64:01:6a:57:2f:be:ae:e0:34:09:8f:8f:f7:23:
e7:c9:7d:c8:42:af:90:fd:43:d7:d6:50:ec:de:ba:
2f:a5:ca:7d:ea:02:3e:c3:55:6d:ba:bb:5b:67:4a:
40:b1:68:61:65:f5:76:b9:a7:97:a5:58:6e:fa:26:
e5:a5:03:c7:0b:d0:dd:08:8f:7d:da:cf:9a:d0:17:
fb:ec:de:96:5c:af:ef:aa:26:e9:d7:9b:ea:b7:d6:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:9A:00:7C:84:9C:45:10:3E:F4:39:82:4D:5B:03:A3:EE:26:FA
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f1:8e:58:6e:9f:04:8c:b4:43:b7:e1:af:67:d2:6e:5e:c2:
32:2c:bf:3f:70:32:13:2d:a8:e8:31:a5:6f:ca:28:63:6f:45:
35:5b:eb:db:0c:e6:fe:42:5f:c6:53:03:e7:8e:f9:c0:5e:3e:
5a:9b:1b:67:44:80:3f:b7:85:ac:ae:7f:44:03:d5:58:41:33:
ce:77:75:d3:f6:38:12:f4:8b:e6:82:9d:67:4b:a9:f9:b9:95:
5e:99:f6:62:5c:62:a6:7f:3b:4c:ee:98:a1:1c:74:71:c5:e1:
b7:af:15:ac:40:e1:2d:95:c2:dc:9c:69:85:25:12:e8:10:87:
64:34:33:86:d0:ee:d8:f2:1c:5d:ba:e2:83:32:19:34:40:f8:
15:61:df:33:28:83:43:32:19:d3:81:cd:f1:a0:d2:5d:3a:d8:
03:ac:66:07:5b:e9:88:84:ac:54:9c:77:bd:47:f9:06:4f:89:
60:f4:e6:a0:1a:30:9c:26:f1:e2:fd:1e:a8:b7:7e:e4:d6:93:
95:a7:f4:36:c0:9e:78:4d:39:17:61:2a:a5:95:26:7f:4f:ae:
27:8f:b5:dc:2b:eb:a0:61:43:86:f5:20:8c:b7:30:0c:d9:20:
c8:a1:ff:1e:f9:4d:70:ea:a8:52:a5:2f:30:0c:ec:19:6a:07:
b9:17:2a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:28 2025 by rpki-client