Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: QhUR4NbELhicNKRFLj1jNbv4oKUfww6s5XkKYPvnVTw=
Subject key identifier: CE:1A:BD:9A:B3:FB:47:67:CA:1B:83:E4:74:62:95:B6:7C:7B:2C:7B
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 0194BCE0D8FF6BB48F31FAB5A1EBFC98307C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: b1/NuZWYP3UkVagKm3JRubuDYMJd8lc1S9MQxYjzOxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d8:ff:6b:b4:8f:31:fa:b5:a1:eb:fc:98:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=ce1abd9ab3fb4767ca1b83e4746295b67c7b2c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:79:c1:1f:91:c6:00:66:22:b1:62:b1:bf:
98:b6:1c:ba:cb:80:e5:e7:93:dd:7a:24:e6:46:9d:
3f:ac:1c:c8:d6:cf:23:88:5d:80:08:26:43:7a:bb:
d2:95:68:5e:38:54:5c:29:21:af:b4:2b:76:bc:d8:
4c:e8:dc:77:65:39:51:e0:7a:a4:31:46:90:33:df:
ea:fd:31:03:7b:c6:cf:65:1b:08:1a:02:78:d5:ef:
2d:1c:17:2e:97:fb:db:77:88:c3:18:a3:40:53:3b:
b5:fc:11:3c:39:c3:9d:98:97:e5:e9:eb:db:64:1a:
1f:be:8f:3b:2e:6e:6a:a2:75:6a:85:ad:11:64:95:
bb:cf:d5:99:c2:64:32:41:08:ad:1c:35:81:2e:d3:
90:25:00:56:c6:44:f0:5c:49:ce:8d:cf:47:04:ac:
8a:a6:ef:85:41:61:da:a4:a8:6a:b7:31:dd:72:8d:
98:9b:55:52:1e:0a:61:b1:76:5c:39:12:af:f6:2d:
b3:76:16:81:a3:20:70:51:ca:db:0d:9f:36:a4:33:
bd:0e:2e:0f:ad:82:5e:57:e8:8d:29:48:9f:c6:b6:
60:dc:55:d6:59:f9:f1:d4:71:73:df:e9:a5:96:63:
3e:51:92:59:92:3b:99:5e:05:f4:09:6a:b7:43:05:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:BD:9A:B3:FB:47:67:CA:1B:83:E4:74:62:95:B6:7C:7B:2C:7B
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:98:6a:c7:5a:73:eb:41:9c:ff:57:bd:10:f0:7b:f9:bb:3d:
e6:99:4b:eb:2d:e3:56:2f:92:f5:80:2c:00:e2:a3:99:2a:e0:
92:b2:77:d1:fa:c7:a5:d7:d8:f1:44:66:12:0b:a6:a6:27:1d:
92:d6:d0:93:0d:60:8b:db:23:09:02:57:7a:ca:91:55:79:bc:
f5:31:3c:47:a4:09:ef:ef:8b:89:9c:1d:ca:af:5b:c0:03:0d:
a9:18:b3:5e:18:52:5b:bb:74:c9:04:be:95:53:5d:e9:76:08:
51:b8:7b:f6:83:12:f3:10:75:7f:2c:e7:eb:63:76:3f:59:56:
0f:a0:b5:3e:d0:34:b7:66:f5:3c:c4:14:f2:f9:14:3b:2b:55:
e5:c4:38:29:15:13:7b:3e:23:cf:43:0e:1b:ba:9d:fc:9b:47:
21:aa:90:68:63:a3:a0:0f:45:23:3e:f4:c7:82:50:88:14:00:
f4:04:a9:51:b3:22:f9:84:2e:25:ba:a3:92:37:4b:db:15:91:
d1:8e:4f:f6:8d:5d:4e:48:04:8a:7b:58:1c:6b:c8:67:48:90:
ab:63:7b:e8:87:e8:cf:7f:fb:c1:3f:a1:4e:af:fd:5f:b8:25:
b7:62:a6:18:50:f8:af:20:f2:05:0b:9c:03:e3:54:cd:bf:ed:
07:41:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:36 2025 by rpki-client