Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: h3jT7hTIdUbpyVFCBwqyVh6Q7qLRkOCQiBfEH6Kbdmc=
Subject key identifier: 34:A0:FA:63:EB:80:24:5A:8C:7E:D6:A4:F8:8F:1C:62:F8:08:29:96
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 0194BCE0C21744E1C99F7F04590FD3543215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 0FBA
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: K1yirsr-iaS7nREQciotspB8RVo.roa (hash: hy+JqcAOeQKytaM3EAomiIfLy4MHrS39bRFVCLNpTzc=)
2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: C9RJM8ud1pb7BbhfEBQ14eVY/YUraVOYGFMZD+j6ROM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c2:17:44:e1:c9:9f:7f:04:59:0f:d3:54:32:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=34a0fa63eb80245a8c7ed6a4f88f1c62f8082996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:75:47:f2:73:f0:44:59:78:f0:04:b9:68:
ec:f4:b1:27:a9:6a:cb:c4:38:20:30:5f:26:d0:ab:
af:70:04:5f:eb:e5:b1:d7:5c:8f:05:22:13:28:89:
cf:c6:10:c5:18:49:bf:63:2d:5b:07:1e:40:2e:f8:
ee:d2:f5:14:b1:6c:a0:51:d9:c7:93:39:9d:2d:73:
65:4c:fb:7d:d9:0e:1e:06:1d:27:46:28:85:51:c0:
2c:73:da:2e:30:cb:f8:c3:e7:8b:26:d7:0e:69:0a:
41:03:3f:7b:f4:9f:6c:cf:84:4b:ef:3c:7c:86:47:
f9:8c:aa:a3:33:71:ce:d6:4a:15:30:99:5f:f7:2e:
a3:91:96:b5:b6:ea:94:f1:14:63:38:1e:ae:e5:05:
18:82:88:a1:a0:5e:8f:57:33:d8:4b:01:36:68:50:
49:b3:02:2d:17:b1:60:4e:87:a6:bd:86:a4:7a:11:
45:e4:49:60:42:4c:6b:8f:58:8e:b9:22:6a:aa:66:
e6:2b:4d:e7:1f:b1:4f:bf:57:7e:18:9b:03:8f:a0:
f2:c7:b1:08:36:c0:2a:3c:6e:df:77:1e:08:82:98:
fa:9c:b1:7d:74:e8:a1:69:6a:62:0b:f3:ae:ef:33:
4b:bb:8f:e0:e3:be:7a:05:fa:38:19:6d:c8:24:9a:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A0:FA:63:EB:80:24:5A:8C:7E:D6:A4:F8:8F:1C:62:F8:08:29:96
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:40:9d:f9:20:81:11:60:8c:1e:61:d9:ce:8a:ef:21:26:
71:5d:06:79:7b:30:8f:72:fb:1f:dc:b5:05:01:42:b3:98:82:
da:2d:22:55:82:b4:f1:5a:58:43:ca:a1:d4:43:f0:a1:df:2d:
42:89:76:5c:a6:fe:38:b1:e5:db:c7:26:a9:f4:57:47:50:c6:
d5:e3:bc:b3:19:b8:0f:9e:63:bb:8a:f6:40:b0:94:c8:6b:c8:
30:ec:f9:c0:09:e5:ec:60:37:bf:e7:31:45:48:a5:32:13:ee:
8b:cd:25:39:ed:29:7e:b5:5c:0b:78:98:43:dd:aa:e7:17:3a:
16:fa:9d:61:03:da:75:e3:62:93:a8:a9:36:3e:ee:c1:73:c0:
16:72:b2:9e:6c:b6:e5:b7:fc:42:3b:aa:0f:82:05:14:a6:52:
58:a4:30:42:94:70:5a:1d:e9:bd:84:55:29:68:25:fb:46:2d:
0f:62:cf:19:de:6d:fb:46:8b:7b:21:2a:82:89:3d:9d:1e:5c:
6b:25:0b:4f:5c:49:52:fd:9e:72:a5:da:26:9b:af:d4:36:e3:
c9:5f:8f:ba:5e:a1:23:ee:f4:fe:72:61:5c:e5:17:60:68:12:
0e:2c:10:40:f7:b8:3c:b3:a7:f3:0c:f9:94:c6:a9:9f:07:1e:
57:a8:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:09 2025 by rpki-client