Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: /knsFb67Vj3p4gC8U5N6xyi9NiKtAVXPkei9eNS+nC4=
Subject key identifier: CB:79:EA:15:4B:0E:93:FF:8F:CC:29:DC:91:C4:A1:FF:D4:07:0E:3A
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 0194BC3C702AA9B1396645772B29A921162A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1378
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: 08nzW9/MA7n2hg/jEcbISYkUiAs9CbG40XhtcLKd6ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:70:2a:a9:b1:39:66:45:77:2b:29:a9:21:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=cb79ea154b0e93ff8fcc29dc91c4a1ffd4070e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:60:bc:f1:86:02:46:f3:ed:af:e9:55:dc:
fc:c6:df:1c:ff:6b:a3:0b:50:b0:7b:e9:a7:f1:13:
2a:9e:d8:a9:c6:37:60:6c:44:3c:f9:66:c3:40:8c:
85:4e:6d:9d:fa:21:61:de:2c:ce:33:80:cc:b0:a9:
10:6e:4c:03:48:80:7c:24:80:36:53:e9:b6:a6:d4:
ab:79:92:d1:04:6e:44:f1:c3:86:be:0c:3c:3e:9d:
ad:10:a4:18:5a:5a:31:4f:3f:a3:02:e2:bb:4d:a8:
75:32:96:a1:0b:8a:f9:f2:7c:60:56:34:78:90:2e:
2e:97:c5:70:af:f2:6c:61:a0:03:16:73:b7:fb:d4:
2f:b4:b1:1d:0b:f8:f2:c1:dc:32:36:d8:f4:18:70:
c4:3e:0e:25:b9:dc:9e:48:f6:30:af:87:f3:2a:1a:
f7:27:64:80:a6:9f:f8:90:6c:90:c6:88:ec:49:8b:
e0:88:45:3a:f6:5c:68:99:2a:de:c5:40:e2:2b:29:
5b:40:95:09:a9:ab:33:ba:31:7a:18:27:22:01:ab:
7e:b3:8c:fb:54:e9:6e:83:f8:2d:be:27:f2:e3:13:
d1:4d:4b:e0:ba:3e:9b:ad:88:ad:b9:3b:96:f6:34:
fd:7c:b9:af:da:e4:bc:6b:b9:65:50:c0:30:2f:4c:
3b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:79:EA:15:4B:0E:93:FF:8F:CC:29:DC:91:C4:A1:FF:D4:07:0E:3A
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:00:a2:4c:ac:6f:c2:49:71:e0:ac:8b:cd:d9:dd:62:50:e3:
8b:cd:7a:b7:12:bf:47:fa:e1:62:02:41:b2:ad:d7:91:15:94:
7b:e3:74:1a:0b:c8:ea:7d:eb:9e:c2:6b:86:dc:47:7b:6d:1a:
0f:04:43:ee:09:95:41:62:18:1e:4e:c6:ae:95:3f:9d:6e:78:
08:fb:f4:89:e7:b9:14:5f:dd:dc:1c:35:db:38:f0:1e:92:9b:
c4:e0:67:3a:de:cf:7b:be:1c:88:e4:c2:45:97:f6:7c:8b:bb:
af:e4:fb:ac:89:62:73:0b:1d:7a:1a:10:d9:69:ca:43:17:d5:
01:4e:d9:d0:84:34:d3:c7:b3:2e:89:f2:59:93:24:de:ac:78:
6f:dc:b8:5d:6a:51:6e:65:9b:6d:c0:55:d0:cb:7d:84:96:25:
a9:84:9f:08:0f:00:f3:0d:b8:2c:e2:1a:02:cb:db:86:29:5f:
1e:60:8a:27:98:4a:7d:43:10:76:09:5e:ee:fa:03:09:db:db:
10:0f:b3:ec:d9:3d:68:29:d0:b1:ce:85:00:0e:df:b2:b5:19:
5a:3f:d6:3d:88:50:07:d7:9b:e1:69:2a:d3:c3:9b:d1:ef:5c:
e2:15:cd:13:9d:29:20:0f:53:25:a8:49:2a:d2:53:ed:40:c0:
f8:fd:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:16 2025 by rpki-client