Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: D35dstcBozYEGHE5f2e9+bYJIkYfwTU90ZZjPIwFmZ4=
Subject key identifier: 2A:97:D0:E9:E9:63:E9:79:16:49:6C:E7:8B:BD:C9:12:3D:78:AC:1A
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 0194BCE06F8806082061B8517002E3B7DE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 0EF1
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: kzVpCbuoY4ckeRqvC/hCa3XBBheaxVTuXIdGRrFik58=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6f:88:06:08:20:61:b8:51:70:02:e3:b7:de:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=2a97d0e9e963e97916496ce78bbdc9123d78ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:d3:ee:13:03:2a:64:22:d6:8c:92:16:a0:
96:c3:06:c4:5f:d0:21:d7:4f:ae:06:16:93:3e:ce:
b9:45:e6:b2:59:df:ac:f4:d6:29:68:47:ad:f3:e1:
68:07:2d:24:9b:b2:dd:e0:37:3e:53:6a:45:0a:5a:
79:af:ee:a5:3c:cf:2c:b1:cf:ed:8b:5c:fc:17:05:
85:21:5f:2d:60:2d:47:1e:0e:13:1f:03:bd:10:45:
98:88:42:9b:1e:2a:03:92:37:da:56:ed:79:bc:65:
ac:00:d2:c3:c4:83:cf:d7:52:77:aa:c7:d1:c7:5b:
a6:0d:8f:87:5d:5f:b6:d4:a5:f4:a7:e2:2b:e9:d6:
b8:d2:e0:d8:4a:47:4e:3e:a0:00:f1:43:4a:42:e5:
eb:68:0a:9d:ca:8e:20:80:75:0c:07:1b:f7:76:6f:
6b:6d:23:46:0b:1d:47:0b:b8:0d:cd:e2:9f:5c:41:
5f:f8:a5:b9:00:ef:19:cf:2d:16:58:24:e0:10:a6:
56:97:4d:07:87:f1:4f:da:0e:ea:ac:85:b2:f7:32:
28:0b:9d:4c:37:0d:59:82:d5:76:01:5b:01:7f:7c:
d3:2c:10:da:ee:aa:f8:b4:8f:06:af:ea:bc:54:88:
b6:17:59:1a:f8:b6:64:1a:20:ab:3d:1e:77:ee:2c:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:D0:E9:E9:63:E9:79:16:49:6C:E7:8B:BD:C9:12:3D:78:AC:1A
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f0:46:27:fe:bd:05:7d:6b:2d:aa:df:ff:3c:8e:2b:bf:65:
b3:e1:d2:38:f5:ec:63:61:d5:f2:45:40:93:38:a4:33:f6:d0:
5d:e1:8b:1e:36:97:31:dc:9a:20:0b:50:54:04:91:c0:3f:f3:
18:59:92:bc:07:a6:e3:8f:c6:f2:98:aa:a0:35:7f:79:5a:7e:
eb:df:71:da:5c:63:bb:54:9f:a7:73:ff:94:59:3d:11:62:7f:
6f:a6:5a:b7:55:af:8a:61:0c:23:e5:90:e3:d3:13:0f:62:04:
26:bb:a3:33:d4:26:5e:30:3d:61:61:83:c1:b3:02:89:e1:7d:
77:37:cc:7d:fa:eb:e1:9f:4f:03:cf:89:b8:8c:34:08:87:e9:
7f:37:f4:21:4d:2a:2f:58:4f:48:84:2c:00:2b:de:e4:03:63:
57:53:69:34:bc:45:9c:b7:53:89:e7:5b:9c:34:aa:d2:d2:05:
ce:27:ca:8e:75:0f:a3:06:89:ef:73:65:dc:3c:3d:b7:32:99:
69:a8:34:63:0b:9d:98:ca:c6:64:2b:71:19:49:87:87:de:47:
c6:e0:b2:2d:2a:27:09:95:47:5e:83:fa:86:7a:fb:e4:38:24:
92:a3:20:3e:7d:bc:e4:3f:dd:7d:f7:64:77:27:5f:5a:c6:c1:
6e:26:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:31 2025 by rpki-client