Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File: nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier: FtJWzogCzNis0kzrLSkhGqQMXR6sSj52m029v2Podd0=
Subject key identifier: AF:80:72:0C:4A:2C:74:58:54:F5:9E:27:CC:40:CD:97:D7:FE:53:6A
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial: 0194BD174CF1570AD488224576EB10366D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number: C6
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: PlSqnlYyOqQrwWgO093ptmBuTk8.roa (hash: B/4NVIpImgw0M4LtZjS53XokU+bvy+fnegDKhebYqyI=)
2: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: oCW+glXq3MaUkcHTTXLEoJBdgqxt4Zs4a0WRTZlcU2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4c:f1:57:0a:d4:88:22:45:76:eb:10:36:6d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=af80720c4a2c745854f59e27cc40cd97d7fe536a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:4f:86:2c:5a:e9:42:80:44:a5:8e:fe:aa:
16:2d:ea:d0:5e:7b:44:3d:6a:33:c8:9c:b1:35:00:
0f:a2:f9:f9:36:85:36:48:49:16:3e:b7:55:20:cc:
90:38:4e:43:c3:6c:5c:59:45:bd:e7:b2:7a:52:26:
25:42:65:0f:01:1c:41:29:21:a1:26:37:8c:a7:4e:
17:2d:ac:59:80:0b:01:77:f3:1f:38:b1:b7:d5:30:
ce:aa:d1:f8:f8:29:47:89:d4:35:90:c9:54:dc:d8:
c1:87:46:52:44:df:8b:af:8d:4b:59:2a:f3:a3:47:
eb:6d:be:84:e8:5f:17:c4:ac:95:3e:5d:c0:3c:6b:
72:38:46:71:c4:e9:07:f7:bb:f9:3c:0b:6a:a7:9f:
c1:1d:8e:31:b9:72:78:a1:63:6f:c1:77:f0:38:76:
89:3f:b1:d3:c1:30:29:d2:c4:63:f7:fd:19:bf:a7:
61:5c:c2:b8:ca:06:03:47:bb:67:13:ee:11:8d:bc:
9f:95:04:8e:25:b6:15:02:dd:38:0a:e8:1a:01:99:
c7:9e:e8:ef:b0:61:84:c2:0a:3c:32:e5:ae:ff:b8:
d4:49:b2:bb:2e:97:3b:a9:b0:58:bc:aa:2e:c4:0d:
b2:00:e0:82:86:fa:d0:73:6f:50:7e:69:2e:c0:63:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:72:0C:4A:2C:74:58:54:F5:9E:27:CC:40:CD:97:D7:FE:53:6A
X509v3 Authority Key Identifier:
keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:67:03:bd:0a:25:8c:11:be:f5:2b:05:34:44:eb:4e:d9:34:
96:84:33:eb:ec:6d:54:00:80:f2:03:55:7e:8a:55:7b:d5:da:
82:c6:2d:b3:08:a9:a3:60:11:5d:84:e7:8d:a5:66:85:a9:ac:
64:a3:25:b7:a3:52:ac:8f:98:1c:c0:89:14:cf:ec:bb:20:e9:
a4:9f:ba:4a:50:44:60:f0:52:a4:d2:26:80:0a:41:d1:f1:fb:
ba:ba:51:c3:85:56:15:c5:a2:a3:80:63:29:92:3a:87:a7:6c:
46:8c:a3:15:a9:47:7d:88:30:74:8d:78:7f:6e:44:cc:a4:97:
9a:ee:7d:a7:e4:f7:9d:cf:d8:66:07:be:f2:d2:2f:df:a4:89:
d7:49:93:98:4d:35:82:3e:9e:48:15:9d:ab:18:50:81:79:54:
46:81:04:eb:3a:4b:6b:15:2d:28:7d:c7:3f:fc:d1:d1:6d:0f:
4b:07:07:42:c0:3e:7c:5c:43:1b:fd:e2:7d:17:dd:43:eb:bf:
da:4a:16:22:96:41:f9:9c:f6:2f:df:4e:91:5c:88:be:f7:7e:
c5:da:a5:ad:7d:ac:ee:f6:91:bf:57:23:7f:fc:d2:a4:96:2e:
e2:d6:bd:3e:2e:3b:68:7c:d1:cd:8c:c2:6e:54:44:e3:bd:24:
a6:80:c0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:05 2025 by rpki-client