Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: pl8oEsKJmU8u5pxdB6bAShjMPzyUh0uD2EzxiH3pJt8=
Subject key identifier: B6:28:C8:B3:23:8C:4B:C9:02:8F:0B:72:C2:E6:32:6F:5A:D5:2F:38
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 0194BC3BDB14769B2AA260AA3532ABFF6A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: Alm41NnEWw22CZaIbYFoXXXZ7dIwENDKruotUJA6mgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:14:76:9b:2a:a2:60:aa:35:32:ab:ff:6a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=b628c8b3238c4bc9028f0b72c2e6326f5ad52f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:cc:41:89:0f:24:84:b5:e8:93:fe:fc:c3:
55:9d:14:07:22:91:aa:25:67:43:ec:84:7c:ba:24:
fc:81:69:52:d0:66:4a:fb:99:3c:83:c8:f8:14:eb:
40:af:87:a5:f5:11:a6:4e:95:07:dd:e0:96:d0:47:
7e:65:69:7a:a5:b2:c8:00:2e:e5:04:b6:44:5d:b2:
28:a4:8f:b4:22:c4:db:2c:e4:6e:e4:21:12:54:14:
af:10:b0:5b:44:10:04:da:2a:56:9b:20:71:43:77:
ea:fc:ec:58:d2:8f:85:76:c9:fa:ec:47:02:b5:a3:
a3:4f:cc:d3:9f:5f:44:5e:3d:ff:d4:b6:2e:de:f3:
cb:8f:9d:e0:79:bb:79:7c:0a:9c:b1:49:99:58:ca:
d6:fb:cd:85:95:07:a6:50:fc:59:e2:99:4f:ee:4f:
92:7b:f0:fb:e0:31:e8:20:9a:70:bc:98:16:4f:0d:
d9:a4:eb:56:c2:0f:89:b3:8e:0e:6d:1b:b7:39:2a:
eb:3a:48:c4:04:6a:6f:de:b1:b6:f4:8f:f8:a1:e5:
0a:10:13:de:78:28:cb:31:af:3e:fb:19:66:50:1b:
6e:4e:76:b2:ca:c8:30:db:42:1f:e3:c8:f8:9c:61:
1a:6c:21:cc:2b:99:27:6d:a0:9d:18:6d:e5:6f:66:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:28:C8:B3:23:8C:4B:C9:02:8F:0B:72:C2:E6:32:6F:5A:D5:2F:38
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:28:42:e4:9f:de:0e:24:65:c0:f1:a1:38:f7:64:a7:4d:ec:
73:99:1e:2e:4b:95:6b:a9:22:b5:c3:1e:db:ff:31:d0:08:38:
88:e3:b3:08:b7:63:bc:42:2a:d2:15:2a:ec:04:de:8b:da:da:
1a:6e:af:70:31:52:d4:2c:3a:df:2f:0c:2c:1f:f5:06:4d:fc:
70:26:a4:7e:3b:79:37:22:7c:3e:c1:bd:7c:e8:7d:7f:34:d1:
6e:8d:10:11:53:82:8e:bd:10:ad:17:22:10:ec:54:b0:ac:94:
1f:39:bf:23:1a:f2:5c:11:8c:3d:52:29:ad:df:0f:1a:72:f8:
08:4b:0c:fd:e6:0b:e1:aa:58:03:c9:f9:25:5c:52:2f:9c:c0:
8e:91:fc:50:ef:96:7e:88:7b:23:01:9e:df:31:96:c2:8f:77:
b0:36:74:c7:c9:fa:97:16:09:45:61:c5:07:42:9f:5e:43:cd:
f3:25:4a:b4:48:85:58:61:93:17:0c:b4:b4:2a:9b:0c:37:fe:
a4:88:60:ab:ad:9d:e8:26:d0:1c:8b:24:8e:b3:d2:02:7b:27:
9a:7b:5e:99:bf:b2:59:1c:44:a7:ca:d2:2b:db:18:d8:87:15:
b2:32:66:78:00:c2:eb:3f:93:38:1f:5b:7d:7f:fd:e3:6d:0a:
6f:0b:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:58 2025 by rpki-client