Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: kgfT6mc57SukvRpUhCmC8IhYR23T95NBuQOElQC6eMA=
Subject key identifier: B0:6A:7F:B6:99:4F:21:D0:63:1F:F4:F2:B7:4D:F2:7F:6B:93:F4:9F
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 0194BD856F72F875F8E07A2AA181CAAA9EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0CD9
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: fhUqT3bfo/5+00iQV6h0K3/krLWh+h7h/pMcXiV3D+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:72:f8:75:f8:e0:7a:2a:a1:81:ca:aa:9e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=b06a7fb6994f21d0631ff4f2b74df27f6b93f49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:fc:e2:ea:8e:0c:b4:e8:96:04:8e:ed:fd:
d5:ee:e9:cb:f4:65:8c:9d:70:45:3a:8e:da:92:d7:
12:5b:b3:81:42:08:33:01:24:81:82:56:ec:9f:15:
01:f8:ce:c1:38:54:a1:95:ff:16:ff:d2:66:cf:33:
ff:5c:b6:3b:1d:24:19:d3:b7:15:19:76:e9:94:79:
22:c4:a8:96:a7:fb:c8:f6:d1:c4:16:70:03:67:f8:
2a:0b:1c:c1:e7:ce:e9:7f:59:64:b6:ad:b8:1c:35:
dd:9f:a1:86:e8:62:19:15:e2:f3:f4:7c:aa:b8:0a:
b3:8d:f6:06:69:55:4f:af:94:24:2f:7a:90:5c:39:
f7:3d:aa:be:41:1c:d2:52:df:99:b6:ba:64:ad:5d:
bf:26:a4:a7:c6:e9:10:91:49:bb:00:eb:78:6e:3d:
77:71:ec:7a:b1:da:82:98:89:3e:e3:c7:2f:e6:ce:
40:15:8e:08:fb:9e:37:31:0b:ed:2e:48:b4:cd:11:
8d:39:97:b5:12:dc:93:5c:69:30:7e:c1:be:30:a9:
8b:11:c2:64:b0:e1:fb:20:21:5d:e3:cc:dd:1d:c3:
a0:0e:39:c4:b7:b3:7d:15:67:e4:0a:2d:9a:75:52:
19:43:33:d3:82:3c:4a:f9:e2:14:51:e4:97:99:75:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6A:7F:B6:99:4F:21:D0:63:1F:F4:F2:B7:4D:F2:7F:6B:93:F4:9F
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ef:65:ee:96:79:a5:6a:16:f9:ad:ea:df:4e:2e:98:af:14:
20:45:f1:e0:c8:47:47:43:bd:be:85:b7:d3:c9:35:70:a6:a2:
69:6f:63:00:10:01:8f:6d:29:05:f6:f1:16:8f:26:11:af:b1:
3e:f9:ce:f5:6c:39:c6:ac:2e:08:30:ff:15:a4:a1:36:a8:0a:
e7:bb:83:27:0d:21:49:c5:80:74:f4:29:63:7d:24:60:1f:4b:
52:1d:18:00:5d:d3:56:5b:0b:23:19:5e:ae:80:78:35:2e:b2:
14:a8:4b:8d:7a:f1:1d:18:15:76:4b:9a:cd:ea:c2:c3:28:90:
7c:cc:6a:89:45:9d:ff:a5:93:6b:07:41:0f:fe:1e:76:6f:ab:
a3:43:85:88:64:00:3b:15:ff:a3:9a:a4:cb:fc:6e:47:1f:86:
2a:10:ae:4f:b9:29:69:c0:d7:2c:90:1a:37:5c:b1:48:f7:08:
e8:be:c2:1d:14:d9:aa:f9:37:6e:9c:73:c4:74:5c:c4:95:52:
e2:8f:c5:74:24:94:2a:d3:6a:0f:d0:97:2a:f8:e4:2b:37:20:
8c:fc:fa:fe:0a:e3:7c:fe:ca:f6:24:61:fe:5f:cd:61:c6:41:
ee:ba:15:56:15:6d:a4:8c:23:35:59:a7:1d:f2:bf:ae:ca:a5:
3d:77:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:44 2025 by rpki-client