
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: RtjA0q4iOFN6vp08crqU7xbdBEgeadI/XLDm+BSAto8=
Subject key identifier: E0:ED:B9:A5:67:36:95:2B:48:8F:2E:09:95:38:B8:9C:90:BE:C0:99
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 0194BCE0D5AE6067F0A1E4503FA7DEC01E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 040B
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: ajPzt7c2E2kfpfOiRrFj+ZRaXHMH3eEK+9Dlyu82wF0=)
2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d5:ae:60:67:f0:a1:e4:50:3f:a7:de:c0:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=e0edb9a56736952b488f2e099538b89c90bec099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:6f:da:f7:40:7e:e2:8f:58:81:7a:15:45:
14:67:cb:b1:16:c7:52:09:6b:71:f8:63:e4:85:91:
11:7d:f7:7a:28:88:0b:1e:a3:24:12:24:ca:0f:2a:
f9:d2:ba:48:1c:28:5d:2c:04:01:3e:8e:7b:47:0b:
86:d6:06:5e:27:2e:ef:a2:54:cd:4d:06:59:e7:b8:
65:f8:f3:66:61:b3:9d:22:cc:c4:58:e3:c4:8b:fe:
1f:a0:6f:7f:b5:82:b5:2f:93:12:83:90:5a:74:e1:
42:57:de:84:bd:d9:4b:bc:8a:a4:c5:64:b5:93:a6:
8e:60:e6:02:43:f7:a5:65:72:1c:33:65:8f:a8:20:
e2:74:90:16:66:06:aa:f7:0a:ef:26:c2:26:85:00:
78:2d:18:da:66:26:6c:8c:4d:c6:ef:fd:f1:14:da:
8a:27:57:ab:e1:ee:b1:95:36:f1:49:41:f4:51:6c:
03:64:8c:2a:f2:b2:b4:39:af:5d:a1:bc:e3:92:27:
eb:6a:1e:ce:c5:4d:c6:71:ac:fe:3e:75:41:9d:90:
54:9d:90:ce:45:7c:09:c3:f3:fc:c0:d8:4c:9d:37:
d7:f9:dc:49:a4:7f:1f:39:83:85:92:23:6f:4c:0a:
dc:b5:09:1e:a7:78:db:70:36:b2:aa:60:76:1c:2b:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:ED:B9:A5:67:36:95:2B:48:8F:2E:09:95:38:B8:9C:90:BE:C0:99
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ca:20:53:55:d4:8f:bf:39:63:94:e9:a2:29:13:fb:0b:e5:
9e:2e:af:74:5a:a0:6f:b5:25:ba:56:cb:96:56:35:3b:2c:5e:
d3:b9:94:9a:70:10:b1:f7:83:8f:a0:4a:ce:e7:db:73:32:a2:
f8:aa:8d:49:04:ba:c3:8d:0c:5f:05:a7:19:1c:19:9e:b4:a5:
8b:4f:c5:c1:23:a3:41:76:51:8d:21:84:bf:32:4a:a6:82:85:
4d:47:93:27:49:2a:93:de:fd:7f:0f:c3:58:15:74:4f:79:93:
38:5e:37:39:9c:c1:a5:06:d7:52:b8:b4:af:dc:3b:50:23:32:
81:24:ac:1e:5c:07:6b:0c:ca:c1:2c:3b:5b:06:e0:9a:78:0e:
83:10:a7:80:7b:e6:76:1c:33:fa:4c:0d:f7:d5:b0:ca:4f:86:
b4:71:af:ba:15:1d:e6:78:6e:44:82:49:be:cb:d2:82:f8:26:
cf:e4:df:df:1e:01:51:87:06:60:72:54:9a:60:d2:90:7a:d7:
6b:ac:9e:7f:1e:e1:0a:a5:b1:d7:62:38:c5:6f:e2:8d:7d:18:
6f:cd:08:5f:6e:58:93:12:3d:3e:f9:8c:5d:c5:9f:e0:d4:a2:
a0:e8:6a:7b:46:17:05:3d:97:ca:ea:21:f1:25:d0:1a:e0:fb:
0a:45:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:44 2025 by rpki-client