Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: 7jlaQm12k+awVYhMEe/Wva9FLOR9H3Wh53Z67Z2ESx4=
Subject key identifier: 3E:57:E6:F2:AD:7A:9D:CC:7A:E8:F4:78:C0:E9:ED:54:08:F3:51:40
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 0194BD8593E5BB247A5C90300878370F4FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 099F
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: rHiqREtunAyerWy3HUXPsouFG6ud9EppUdQzmsWfdO0=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:93:e5:bb:24:7a:5c:90:30:08:78:37:0f:4f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=3e57e6f2ad7a9dcc7ae8f478c0e9ed5408f35140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:20:0d:7e:d1:39:37:de:a2:0c:0f:bf:11:
d9:e3:ab:19:6c:1c:4a:09:2a:eb:33:13:44:50:54:
72:48:27:2f:e8:58:e9:79:3d:c0:1c:2a:2d:7b:20:
0e:61:bf:15:73:db:e7:dc:69:92:56:b3:36:3f:24:
04:63:2b:83:ab:dc:8d:b3:79:a5:cc:20:d5:ee:54:
f4:95:b7:7d:25:f6:bb:e9:5e:cc:9f:50:27:19:96:
1b:8c:ae:2e:74:21:05:b2:77:d7:74:b6:1b:b5:7a:
b6:1c:a3:be:f9:ce:79:28:e7:80:aa:9d:fb:10:9b:
34:d0:03:78:4f:20:df:7c:a1:9d:2a:aa:3f:5b:28:
c2:f8:36:f1:4c:8b:99:0a:81:b0:88:fd:9e:63:d2:
31:77:b8:7d:9b:fa:61:01:58:99:fd:93:4f:66:d1:
17:50:06:97:70:8b:c0:8e:30:c4:ba:5e:54:3a:e8:
43:13:c5:17:43:5c:4e:7d:6e:db:b3:e9:d7:2f:bb:
b2:aa:60:45:81:d4:35:91:6f:0e:b4:01:74:0d:19:
12:74:d6:54:08:73:e7:59:fd:27:1d:7a:06:bd:78:
84:1c:71:1f:6f:eb:67:25:cb:58:ac:2a:ee:25:84:
e6:18:8e:94:55:80:37:5d:b8:71:3b:6c:06:64:78:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:E6:F2:AD:7A:9D:CC:7A:E8:F4:78:C0:E9:ED:54:08:F3:51:40
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1e:f4:07:b5:a4:a9:71:42:57:59:1f:48:1d:29:ee:19:aa:
7b:7c:48:21:58:7e:98:fa:ad:f1:10:9e:36:d9:a7:c9:e8:2d:
39:8f:bb:ae:b9:ea:0d:49:95:5d:af:3f:40:74:fd:82:85:c4:
72:2a:d2:2a:b2:e5:5a:5b:cc:ec:b9:66:e6:55:d9:f9:ef:8d:
40:f0:c3:3e:e4:87:41:bc:20:05:c2:13:7f:24:d9:b6:54:de:
2b:72:c2:03:3b:09:41:68:71:ec:6a:3e:62:fe:69:81:50:a3:
22:d9:b1:bd:d6:8b:79:ed:1e:d7:3d:49:35:14:5e:14:02:19:
e4:a8:ec:ec:af:36:f0:81:bd:8c:a0:e7:52:91:8d:c2:0a:ab:
a1:f4:86:5c:44:8c:6b:32:41:f5:dd:d1:5d:1e:35:2a:5f:4a:
d0:1f:66:b3:0f:bd:ec:3b:25:c1:4a:39:c5:99:06:04:8d:f8:
51:77:41:8f:41:a6:6a:3c:ed:58:2d:13:f6:4b:8b:d7:7e:92:
fa:7f:e2:58:00:5f:79:dd:d0:dd:c1:2d:ef:4f:9b:33:21:a4:
1d:ad:4c:7f:55:fc:9d:57:e4:cf:dc:2c:1a:d9:2c:3a:b2:d6:
38:0a:55:c0:c0:da:41:78:a2:29:d4:27:1d:19:f6:8f:32:75:
e0:f1:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:39 2025 by rpki-client