Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json)
Hash identifier: JAwISTnFwFMS2/J9NAIp/nnhqJsDUxQIaZaqHCyFqXI=
Subject key identifier: 08:58:92:28:8E:37:E7:21:BA:8F:54:74:91:0F:8B:8B:DC:7B:75:B7
Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Certificate serial: 0194BBCE26EB7FED729D3ACB37DD9C9BAA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: t8nE1NoQV6k82/b0ADOswpLEMUWeucxW271aioQwztQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:eb:7f:ed:72:9d:3a:cb:37:dd:9c:9b:aa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=085892288e37e721ba8f5474910f8b8bdc7b75b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:37:f8:60:c6:89:8a:49:a0:c6:ec:84:eb:
93:95:08:66:13:32:91:d4:ce:96:e8:6d:2d:b3:4d:
71:5f:e0:ec:8d:4e:64:01:0c:e2:38:5e:86:07:ae:
f4:f9:5e:41:f2:ad:f3:01:b5:b7:e5:ee:60:a8:5b:
03:2d:b4:29:1c:c9:44:42:d2:23:29:b7:50:c1:bb:
3e:fa:27:35:4c:85:b3:46:65:8b:28:ca:43:de:cd:
ff:f2:0f:39:f1:71:08:d6:a8:61:50:3a:f4:a2:cb:
d6:17:81:d1:70:6e:ba:31:a9:57:28:d0:6b:c0:05:
2b:ab:0d:16:3a:0d:d7:28:60:0b:6a:fe:b6:62:2d:
32:d5:08:b3:b6:d6:58:93:28:9d:d8:5f:5f:d5:cd:
41:c4:67:8f:26:3e:e1:15:a6:a9:7c:d5:1f:eb:c9:
de:5d:91:e2:17:40:87:e1:c3:6a:d0:32:96:cb:be:
46:99:1a:1e:5b:b0:b7:a8:95:02:0d:81:bd:6c:00:
8d:88:79:9b:ce:1e:fe:ce:9b:77:95:36:1e:79:b7:
33:52:30:97:f6:77:60:bf:b5:33:78:5b:f0:7c:15:
c0:9b:a9:0b:e0:f6:cc:9d:75:2e:48:13:7c:e8:c4:
b4:d2:18:9a:c3:62:f8:c6:02:cc:4d:7c:28:4c:c5:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:58:92:28:8E:37:E7:21:BA:8F:54:74:91:0F:8B:8B:DC:7B:75:B7
X509v3 Authority Key Identifier:
keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:c3:0b:58:ea:b2:22:46:e4:2c:93:78:79:be:86:20:a2:
48:e9:16:d6:41:50:9d:2d:e3:3c:1e:b3:14:23:11:7a:cc:64:
63:0e:8b:0b:d1:71:f2:b8:dc:94:da:ff:15:e9:81:74:6b:fd:
e5:00:98:a8:c3:d4:e2:b0:aa:ff:11:3e:48:ab:33:63:af:3f:
0e:1d:d6:d2:17:1d:ac:ae:e7:36:9d:1c:08:f6:a3:e9:cd:9a:
71:32:60:7c:c8:21:37:57:77:e5:a4:0a:0e:4a:60:92:ff:f5:
e8:2d:5e:17:92:25:0e:07:73:c9:23:f3:7c:f9:65:e6:e0:c4:
71:f6:9d:87:87:ec:b8:7b:1c:41:ca:d6:e8:9f:f3:1b:98:21:
e3:20:08:25:2b:4e:03:b3:ff:5d:72:b9:a8:45:9a:a5:a0:a1:
2a:ad:ce:5c:b6:45:22:42:33:9b:41:04:0f:a5:6a:64:99:5c:
b0:bd:81:43:99:84:5b:29:af:f0:3b:d8:a8:b9:1c:d4:9a:d8:
35:6a:c9:5f:4e:bd:05:e5:05:e5:62:62:05:37:a3:bf:ae:9d:
74:47:82:77:d5:47:b9:58:ae:51:cb:09:3a:f6:b4:34:03:2f:
ec:28:08:e8:75:0c:4a:1e:13:96:f8:71:89:85:6e:45:e2:ba:
e3:12:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:30:12 2025 by rpki-client