Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: eR1za6ZGSt0bASvVmxzyWCkjh31WftTYqnbCxB/3qJg=
Subject key identifier: 09:0C:0B:3E:2F:DC:09:7A:CA:DF:C4:5E:06:D5:1B:DD:1B:6B:CC:6D
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 0194BBCE1903F3BEA658AF985176D872E5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: Vs/9tNZc3ZaiegYTEFXw19JwtJQSQvkFqo+YykdKQkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:19:03:f3:be:a6:58:af:98:51:76:d8:72:e5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=090c0b3e2fdc097acadfc45e06d51bdd1b6bcc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:83:da:f4:e1:84:6d:8b:03:07:f1:8d:d2:
2e:78:27:21:98:37:43:f8:5d:0d:64:df:0b:19:7e:
6c:e6:80:e6:6d:08:23:d7:21:b2:d1:58:97:2d:55:
f1:21:28:ad:ad:6a:a5:11:11:6d:6f:63:ee:b3:ba:
5e:2a:2c:02:d3:f6:da:bc:b0:44:de:80:f6:2f:9d:
8e:a6:2b:e6:ff:56:78:3f:5d:f0:78:3b:1d:da:8d:
24:3c:1d:ae:64:ec:91:11:1e:a1:fb:95:7b:19:f7:
19:a8:11:f8:60:65:7b:02:d7:38:8a:79:ef:6d:c1:
09:00:8a:4a:ba:34:d4:32:99:1a:fa:90:0e:f9:64:
8f:5d:7e:13:ab:cb:41:04:89:6a:a7:48:a5:bf:d1:
fa:d2:f2:2e:d8:53:b0:9d:e8:ca:26:99:2e:06:b7:
15:33:11:33:63:ec:9a:aa:10:e5:12:35:b2:26:2d:
de:7d:49:6c:e7:8d:dd:91:88:98:44:7a:45:5b:86:
6e:b5:51:5d:45:4b:98:9f:50:78:95:b3:46:c0:eb:
e4:38:97:36:ac:6f:36:08:33:27:33:bc:11:f4:81:
8a:5d:91:88:cd:af:17:00:f3:0a:50:24:f0:94:ee:
86:51:31:c1:70:5b:91:76:1d:f1:a8:5f:f0:74:78:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:0B:3E:2F:DC:09:7A:CA:DF:C4:5E:06:D5:1B:DD:1B:6B:CC:6D
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:9a:e5:87:30:02:ad:f8:14:d8:3d:81:ee:98:8e:07:82:
30:d6:e4:4c:b3:70:fb:b6:85:4d:89:1a:b6:b9:80:4e:c3:35:
e4:e8:e3:c3:f2:39:c8:00:48:86:1e:32:72:a4:cb:34:f6:1d:
33:b0:9f:08:6d:1b:32:64:85:93:ab:2b:52:fd:b7:f7:03:4e:
02:70:0e:c3:a2:aa:54:53:c3:13:f6:39:8c:c4:81:63:ae:be:
78:34:f3:a2:1c:27:32:39:88:86:de:18:cb:3a:3b:17:80:98:
88:07:42:f0:4a:82:e1:08:56:5b:75:99:32:6c:8c:38:e2:21:
8a:1c:8d:dc:b6:e5:b0:b0:63:3c:1d:17:0d:32:51:8d:d7:5d:
ad:7d:73:f6:ff:eb:9b:1c:6e:be:53:23:49:26:fe:b7:ae:70:
67:a0:1f:7d:b0:01:59:ab:5a:92:eb:68:d4:10:8e:47:87:bd:
cd:9e:08:a2:db:91:a0:27:0c:4a:67:9e:aa:88:92:74:0a:df:
5b:79:fd:9e:75:87:ab:3c:6c:07:43:30:98:69:c5:6b:99:96:
ee:2e:2a:af:8e:06:ae:91:9c:a5:83:c4:c1:76:53:a8:20:15:
67:be:9e:3e:b9:1f:f4:91:18:8d:36:06:f9:df:d0:28:e3:3b:
6c:ec:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:09 2025 by rpki-client