Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: XNOsxyiIDry3ik1iuNWD3Vz3+GTNsT0oHW72ztzRvZ8=
Subject key identifier: AB:C2:F8:09:F3:8F:01:B2:F4:73:9C:46:45:3E:4D:BF:91:8D:62:D9
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 0194BCA9DA4940871D8177E31C66B8BF1B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: 53YO9jCe1rJnTYIBae6L/fBfKS3grDNuphsyBBHQjeE=)
2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:da:49:40:87:1d:81:77:e3:1c:66:b8:bf:1b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=abc2f809f38f01b2f4739c46453e4dbf918d62d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:0d:35:73:bf:72:bb:97:d0:24:c7:03:89:
68:79:f0:50:77:37:61:d4:59:5e:d7:55:81:f8:8e:
0d:ba:26:05:51:2b:ac:c2:3b:9d:93:2e:38:ab:6c:
d2:3d:2f:47:f1:6c:88:a4:a8:4e:fa:52:4b:15:d7:
fb:09:bb:47:c7:e5:2b:97:43:da:0d:7a:4c:ab:11:
1c:a7:1e:b5:f7:3c:25:2c:1c:08:0e:8a:e3:20:f7:
4d:7d:e5:14:5b:34:22:2b:54:e5:73:6c:01:04:8a:
87:75:47:46:d4:2f:03:6f:cc:8c:a6:25:de:a0:26:
cd:4e:4c:0d:aa:b7:12:5c:1b:c2:05:36:c5:39:2e:
03:d0:bb:07:e9:d3:db:4d:14:14:96:60:c2:77:7f:
78:fc:27:8c:05:11:1e:06:56:7c:37:4a:4c:95:c5:
45:cd:cc:76:d7:c5:6f:c9:bc:e6:cd:06:01:88:18:
21:d6:81:53:85:02:b5:01:8e:07:2b:03:97:6f:d5:
11:15:0c:3a:97:96:19:9f:9b:93:78:41:94:67:f1:
c4:df:6a:70:2e:df:db:76:45:8a:30:f0:d6:c2:2e:
f5:90:e3:25:6b:a2:b8:88:5d:5c:0d:29:78:3e:97:
54:cc:61:48:f0:cf:b9:70:83:e1:29:7c:ac:70:9b:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:F8:09:F3:8F:01:B2:F4:73:9C:46:45:3E:4D:BF:91:8D:62:D9
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4e:36:f4:ef:37:76:6b:78:93:3d:6f:c3:72:18:f8:b8:30:
7f:d8:31:33:40:ce:26:c9:0d:c7:9a:05:ad:98:ab:ab:16:57:
91:25:ba:81:11:2f:07:79:04:19:19:56:5a:b7:a2:75:9e:13:
8e:34:ea:ca:1b:ab:45:49:7c:2e:3c:00:d2:0a:18:64:6b:1d:
9e:57:09:3f:2d:78:c7:28:2a:7d:0f:c3:38:c1:bb:4a:92:fd:
f9:da:7c:f1:ec:cb:7a:e1:79:82:ee:a9:2b:29:c2:27:30:59:
b9:be:57:4e:fa:ea:7f:8d:20:a9:cb:9f:64:78:e5:fc:a6:9f:
d7:00:c6:4c:92:8f:bb:fa:53:eb:f7:ac:a0:1a:c2:81:da:ff:
7a:44:d6:e4:f3:da:34:02:61:2f:6b:0d:ce:90:fb:a3:59:59:
73:69:8b:8c:d8:e8:71:e0:5d:10:86:70:a0:26:91:da:be:c5:
9f:83:6e:a1:ef:1c:92:e0:21:9d:ec:32:b9:89:3c:dd:17:20:
47:04:c7:93:55:29:07:46:a4:df:8b:2e:7c:32:78:e2:2d:fa:
6b:87:40:58:52:91:9a:96:ac:e2:f6:1d:8b:83:a2:af:d6:1f:
ef:5e:fe:9e:ec:07:29:48:98:97:c9:70:cb:d5:e3:a9:b2:94:
83:54:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:40 2025 by rpki-client