Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier: BhBuVYVDEkrcY+6hNdZVB4hmftSqCARx6iGY0fLmn1c=
Subject key identifier: C1:39:9D:EC:C5:4C:BF:47:9F:98:40:E7:14:62:EF:66:59:13:FA:61
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer: /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial: 0194BCA9C9DD5B155100E0B1AE97C74F9BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number: 1168
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: eoQnG9nz4veyzY9SQU2rg9zUv3t156GMtwxRMT08nOc=)
2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:dd:5b:15:51:00:e0:b1:ae:97:c7:4f:9b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=c1399decc54cbf479f9840e71462ef665913fa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:a4:14:e0:3e:d9:ce:01:d3:9d:ba:42:c7:
9d:9b:cd:48:73:7c:70:e6:71:10:6a:be:dc:1d:b4:
55:f0:1e:c6:fa:2f:03:dc:af:9c:23:91:a9:df:71:
ad:51:d0:a6:c7:fc:3b:7e:b3:f8:40:b1:88:52:2b:
65:72:1b:d9:4e:96:ac:49:b6:01:81:d6:cc:1c:f9:
3a:74:90:41:59:e6:c5:ed:e7:4f:40:9e:f3:23:b3:
7c:d0:6e:10:e4:4c:dc:92:47:7e:56:98:97:3c:2d:
91:8a:b9:a6:12:83:4f:56:22:cf:96:62:b1:7a:c9:
b5:d0:d8:95:3c:5f:3d:dd:45:e0:70:60:f3:79:2c:
5e:d5:53:13:05:0b:43:61:3b:b6:32:33:ce:a6:e0:
5c:cf:48:68:70:53:ae:0c:ea:bc:d3:f8:c0:81:ff:
22:f6:21:c0:4c:fc:92:41:82:3d:6f:17:21:c9:8b:
80:b7:63:cb:b4:d0:90:3f:4c:2b:c0:a7:c1:3d:62:
e7:88:95:70:e8:30:d2:a0:2a:a9:54:23:ab:31:31:
9d:93:8b:82:b6:dd:1b:42:fd:05:25:1c:ae:6b:a4:
e7:f6:ef:0e:f3:75:e8:9c:f7:82:84:10:a4:24:68:
6c:a9:a0:c4:27:eb:e5:80:51:e3:2e:11:1c:cb:87:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:39:9D:EC:C5:4C:BF:47:9F:98:40:E7:14:62:EF:66:59:13:FA:61
X509v3 Authority Key Identifier:
keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:52:a8:b6:49:28:a6:70:ca:cc:78:6b:6b:f3:fc:31:dc:d0:
47:7d:4d:76:42:c9:4f:b8:6a:bc:32:85:23:96:cc:f6:67:7f:
0b:21:76:e4:74:0b:23:5d:db:8f:f7:72:42:e7:3f:33:d8:3b:
d8:d2:86:5c:13:f5:be:a1:c0:39:95:6e:bf:bb:58:d5:26:20:
f3:53:fa:55:66:02:50:99:9f:50:4c:c8:f9:da:8f:9c:7d:65:
38:07:2f:a5:ec:d0:c3:8b:9b:bf:fc:6d:47:4c:24:01:9f:73:
c8:df:f4:6e:ea:e9:bc:bd:0d:d9:7e:4b:ec:8c:80:bf:4d:b5:
5c:96:54:21:93:50:23:96:83:8b:6e:59:d6:eb:59:2b:1c:95:
e6:50:53:cb:4f:f2:ff:aa:55:cc:4e:20:2f:10:78:ac:7e:35:
fe:7c:05:06:b4:fa:61:04:59:66:73:a4:b6:52:39:79:6f:dd:
d5:09:75:ee:b5:28:a7:a9:3d:e3:9e:38:fb:fc:30:c1:fc:20:
ad:73:6f:36:32:10:91:b7:3a:d1:89:e6:ef:8b:17:df:89:26:
72:c7:24:9c:16:c3:8b:c2:dc:a0:b0:e3:10:b6:f8:46:08:86:
8c:88:f4:86:3c:79:71:30:93:18:ef:ef:06:eb:cb:5d:a7:f9:
7a:ae:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:15 2025 by rpki-client