Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier: 1O199LAS0vK/Yf2WsoAzvlSO0FSW3U0beQmuHBUL4HE=
Subject key identifier: C4:55:24:94:17:59:80:91:5F:EB:08:B2:B3:CB:77:3F:50:68:39:C0
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 0194BBCEB9D13ED85D6C407EAE7EE0D0B177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number: 0F58
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: IgwhmqSO8SiVzutSuC-ggN1y5hs.roa (hash: hWda86la1UQ6+/Ceq4HxCjEUdf3IPSx/E6cAKbn8Wy8=)
2: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
3: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
4: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
5: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
6: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: CRDgjz9cXgv37GKwdM9rLXUKEo2vrwHE19wTbwSUd+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b9:d1:3e:d8:5d:6c:40:7e:ae:7e:e0:d0:b1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=c4552494175980915feb08b2b3cb773f506839c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:74:45:9d:70:c6:77:10:c2:70:4f:62:45:
95:37:da:c9:36:01:05:ab:41:97:d7:93:cb:1f:e0:
e3:43:04:d1:4c:83:8d:49:cc:7c:fb:f6:16:99:85:
cd:37:d0:51:5d:86:9a:b7:98:9a:f8:e8:40:1e:55:
23:ed:98:44:18:51:20:6e:40:9c:15:1e:7f:93:7e:
cb:ef:d7:6b:68:53:fb:69:73:7f:b3:70:10:0f:1e:
2c:cb:4a:f4:78:58:b9:f4:0d:37:42:66:77:0c:90:
81:f0:0f:ab:2c:bb:c9:e2:87:c2:14:e3:14:a5:4e:
87:ac:57:2b:69:1a:3a:ef:05:ce:e3:cc:3c:7d:15:
ed:ab:e1:fc:e0:d1:ca:b7:86:92:79:0e:82:33:93:
7f:a0:4f:1a:84:92:56:c0:bb:0f:ed:64:70:3f:ff:
53:66:6c:5b:79:70:9c:81:1a:87:e4:3b:43:4e:62:
27:d6:10:13:d3:2a:24:cc:42:d2:25:06:07:bb:f7:
cd:14:46:c5:fd:1f:45:b8:14:41:ec:18:ee:c3:f8:
85:e1:cf:d6:53:1b:72:66:c5:32:e6:58:04:5d:f0:
0a:4c:e2:03:98:71:d2:89:32:b2:82:95:65:d3:33:
d0:81:c5:9e:10:40:db:f5:24:ce:9d:d6:3e:17:f7:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:24:94:17:59:80:91:5F:EB:08:B2:B3:CB:77:3F:50:68:39:C0
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:50:d3:86:06:0b:7b:47:17:eb:87:8a:62:98:27:d5:5d:e3:
f4:bc:c8:18:e7:ce:5f:df:ce:39:26:26:ea:2b:38:33:d0:c4:
f4:0c:8f:cd:5d:21:52:0e:26:80:fe:19:4e:0c:fe:af:6f:81:
49:71:73:bb:32:10:ce:81:b8:05:c1:0a:c3:ff:88:a3:b1:e0:
68:6e:68:68:3d:8a:be:71:5d:0b:f9:32:4f:ca:65:63:19:6b:
c6:ee:ed:ee:52:d5:a0:bd:43:d9:3b:8b:23:0e:f2:80:dc:cc:
8e:c3:63:e0:3e:00:ed:70:ff:8d:8d:fe:58:b4:d9:5e:71:b0:
e6:e9:bc:58:c9:13:af:d9:6f:c1:65:d9:55:32:8b:3b:9c:20:
2b:f4:cc:84:8a:0e:b7:f6:95:71:7d:1c:f9:3b:49:5c:78:43:
0b:69:2a:bf:6e:cc:10:c9:be:df:75:1a:2d:d5:fb:2a:fd:e9:
a3:61:c6:58:0f:7e:fe:ff:6a:47:dd:47:75:cb:46:17:a5:ea:
a3:3f:5f:e4:36:48:76:5e:69:8f:de:96:54:68:5e:62:39:08:
2c:db:4e:62:fa:76:a6:93:39:f0:cb:00:b1:9b:2e:5c:00:f8:
73:18:fb:7b:9b:1d:2d:f2:93:80:f3:c2:f4:f5:09:68:05:ee:
3d:7e:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:18 2025 by rpki-client