Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
File: x-nHqlNLEwC_ck__DwwbBRnVBbs.mft (raw, json)
Hash identifier: SZEbPJPeYryXOBy0CWhsNcnANmPRvhvjGYMvQBhfbQY=
Subject key identifier: 63:35:62:9A:A1:5A:92:14:21:0F:6B:A1:28:9D:FE:9B:38:40:B7:83
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 0194BCE09700E8BB12324E558407637875BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
Manifest number: 0CF4
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: 649lyIDC2UwkmHul2wRd4b1rCNs.roa (hash: p4ozwtIxeW7bNZvhNBKCuX30f4bEfNwl4a1UC3r5A8E=)
2: vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa (hash: NafLcW9ler7jv8ZnfOLoMEHPRe+4IL3+O4WsYS0XH1Y=)
3: x-nHqlNLEwC_ck__DwwbBRnVBbs.crl (hash: WYV8VQi0FyPEqr0FozmR8eE0PwKQtHjsVCL/irJWI5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:00:e8:bb:12:32:4e:55:84:07:63:78:75:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=6335629aa15a9214210f6ba1289dfe9b3840b783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:e8:a2:d0:0e:95:d0:bb:17:38:81:da:21:
4d:48:b0:19:13:20:3d:0d:2e:b3:78:ef:63:ae:f5:
dd:37:b3:3e:8e:3b:be:f3:9a:f8:37:cf:b8:33:16:
79:33:9e:0d:53:47:1a:b1:97:2f:94:67:a1:38:0a:
0f:3b:7e:dc:95:4d:b2:b3:6e:cd:e0:4a:4d:48:f0:
e8:fd:2f:ca:92:27:b2:f6:9c:6c:13:ba:56:b5:ac:
cd:90:c0:b8:63:77:63:72:86:b9:6e:7f:c6:fd:eb:
41:8f:3b:0d:56:1b:e1:42:9e:83:78:14:df:a3:80:
a7:ef:36:9a:e6:b8:4e:f2:a5:27:be:1a:b3:70:b6:
a0:ac:e9:71:bc:62:c2:1d:eb:13:a0:bb:e3:3f:d5:
34:6f:8b:bd:97:6e:34:c7:82:f6:81:75:39:cc:9e:
b1:46:f7:ea:72:53:f5:f8:20:89:4c:f3:c4:53:91:
9d:af:4e:24:31:82:3b:6c:a9:90:fb:28:43:19:de:
b9:fb:57:66:6e:4a:cc:63:90:e9:4a:f8:e1:36:35:
e8:4d:2b:c8:31:57:c4:64:eb:99:62:34:10:8d:25:
5a:d3:b4:c2:9e:7b:f6:aa:52:42:dc:c5:b4:a8:c0:
a3:d0:80:bd:81:60:00:70:45:d7:72:0b:d8:1e:3b:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:62:9A:A1:5A:92:14:21:0F:6B:A1:28:9D:FE:9B:38:40:B7:83
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:76:4a:38:d1:fb:30:25:e4:c8:4c:7e:ac:40:46:d6:50:1f:
ae:52:98:9e:7a:46:51:f2:7f:82:55:50:90:60:04:ac:3f:66:
3c:e8:55:8c:e5:24:24:16:6f:cc:16:de:25:fe:ec:77:ad:b6:
38:cb:5a:68:69:47:60:e6:53:a8:8c:9c:09:ce:e3:14:7b:e7:
de:b2:6c:5c:9c:72:30:e4:18:13:44:16:22:75:87:68:fb:e1:
ec:31:8f:f8:ac:cf:13:4a:3e:3b:25:a2:1b:19:2e:94:41:16:
30:e7:3f:ec:68:b4:61:78:b9:a2:f9:89:b3:19:db:22:fb:66:
0a:32:fc:cb:bb:22:de:ce:6e:a3:93:25:f0:54:aa:bc:c6:08:
0a:c2:dc:a8:42:76:ff:51:f4:14:4b:14:35:67:1c:3b:ab:6a:
b1:be:06:e9:fe:60:2f:ec:73:ec:5a:30:8b:6a:ab:d6:3a:a7:
38:b2:62:72:b3:1f:f0:f9:87:a6:e5:5c:d3:8d:3d:29:32:c1:
ce:93:e2:13:13:35:31:c4:79:cc:de:49:76:8c:78:b5:ed:aa:
ac:e3:6a:c0:85:b2:85:82:26:bd:33:84:fd:38:60:a2:86:ea:
b3:50:09:e6:46:e8:e7:4f:a3:d6:43:da:ba:ba:2c:c3:de:1e:
ef:dc:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:45 2025 by rpki-client