Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: fio3dOScaE1EwSTpcq/BB1ov0M7pnazLjFkHQuMi7pU=
Subject key identifier: F2:C6:30:B7:8B:35:9A:34:91:8D:1F:54:B6:E7:21:A6:E3:52:25:48
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 0194BC3BC8A01E8285433C776AE10EF5AA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: HI5bhroHTAd2JOvu5YSZV3u06FM.roa (hash: Sccuti/fJ5690EYg+UXdl+hwT8LmoHMXCPxrbV1XvfA=)
2: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: mWAJ8d4so6RUeELah1Rax19YNWr/ioHo888HowZSsEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c8:a0:1e:82:85:43:3c:77:6a:e1:0e:f5:aa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=f2c630b78b359a34918d1f54b6e721a6e3522548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:6f:94:f2:c6:0d:36:fa:5b:5d:b3:41:8a:
9f:77:c8:01:cf:84:86:7c:60:24:1d:10:d9:c4:af:
8c:e8:ce:5b:cb:81:2f:ed:af:a5:52:da:7f:4f:65:
28:0b:f7:a0:c4:10:45:ab:60:50:a8:33:fd:53:97:
ba:2a:10:e9:c7:23:7d:8a:66:c5:a3:3c:b3:58:b5:
6c:e4:a8:58:fa:22:3b:84:b0:b6:49:ef:c2:2e:e8:
ba:fc:f5:6c:01:97:4e:08:54:0b:d9:cb:f7:04:29:
44:11:cb:25:da:5e:09:bd:50:f4:0b:9a:12:0c:15:
85:0f:ab:9f:c7:cd:e6:81:f4:46:10:9c:f2:a6:7a:
73:92:39:2a:01:d2:60:43:d5:1a:fc:2a:a7:f7:7c:
99:b4:ea:4c:fa:14:a7:dd:c4:26:01:4f:9a:98:61:
fb:93:23:ca:a5:78:48:0d:98:71:aa:60:80:ba:84:
5a:1a:3c:29:ec:1c:25:f3:02:eb:71:93:33:7a:5a:
1b:78:e3:65:9b:d3:ff:e1:dd:02:40:dd:ad:65:bf:
c3:00:60:28:16:fb:36:55:ce:03:f0:06:78:26:85:
40:1c:a1:a9:60:91:12:54:1d:17:ec:6b:9a:b9:49:
7b:86:81:2b:92:ea:a1:81:76:a4:99:35:e4:d7:ee:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C6:30:B7:8B:35:9A:34:91:8D:1F:54:B6:E7:21:A6:E3:52:25:48
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:bb:93:a2:61:1a:c3:b5:f8:11:e7:92:de:b2:80:90:1d:05:
2b:01:0c:9e:c9:14:0b:3d:50:19:08:64:63:50:a3:67:b2:24:
fd:59:88:69:40:81:41:30:ee:c1:e1:46:b6:8b:72:b8:85:ad:
1f:98:42:a1:bf:37:04:3d:eb:50:d1:bb:f2:7e:01:2d:c1:a6:
18:4b:5e:1b:c6:89:28:0e:0c:3c:29:95:6a:15:57:f5:42:1e:
3e:d7:d2:51:2f:df:6d:48:1a:af:a9:a1:52:87:e1:2d:fc:9a:
57:8f:88:18:5f:6d:d2:5a:4f:5c:b3:0e:4d:98:47:89:43:78:
cc:0a:1c:b3:eb:7a:fa:a3:99:4b:6c:53:df:e3:b1:eb:c2:fa:
c3:a2:c2:58:f5:de:59:93:eb:35:45:10:47:22:b5:ff:df:16:
dd:2e:a9:ec:77:7c:b5:43:6e:1a:57:85:31:5f:5f:04:94:8e:
9c:e0:d6:17:36:ca:ce:53:d6:89:e2:b1:95:e0:53:41:a7:6b:
a3:f5:18:88:e2:c7:e3:a0:29:f9:2f:2f:a8:cb:c2:57:df:f5:
f7:36:cd:07:6c:ea:40:dd:de:b0:8f:40:04:70:1b:fe:de:c0:
ff:66:44:11:b9:8b:d9:c3:c3:1e:89:8e:4d:ce:b6:a2:0e:21:
56:46:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:06 2025 by rpki-client