Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File: n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier: TDLXBcgg3FPgKgChCSYzwZNCR2EXTXcu1QKrdo5lJdY=
Subject key identifier: 8B:74:DD:06:4D:F3:F1:A9:10:11:5F:7F:B3:FD:C9:8C:B1:72:6F:29
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer: /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial: 0194BBCEA9EA98218FE20CE351F4142E137C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number: 7E
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=)
2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: TpmzW8kcPg8wLASoAx/dvhlJa4n+PSauF5gE0TibN/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a9:ea:98:21:8f:e2:0c:e3:51:f4:14:2e:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=8b74dd064df3f1a910115f7fb3fdc98cb1726f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:11:e2:f1:09:79:41:9b:6a:75:fd:b1:ce:
e8:7d:cc:c9:41:58:6f:45:ed:5b:2d:e0:a9:00:fa:
79:81:fe:d1:a2:02:09:9d:5a:27:18:ff:54:80:a2:
77:ee:0f:3e:93:38:c0:c6:6e:c7:b5:81:25:95:fc:
24:dc:ad:e8:d7:fe:cd:dc:c2:05:17:e9:6c:93:56:
48:60:97:fb:ac:d2:8f:a6:aa:53:09:05:84:81:71:
78:7f:a2:ba:10:04:bf:1e:96:a5:50:c0:07:b9:fb:
80:62:5d:52:24:44:ba:a8:26:ce:94:24:53:33:26:
d2:46:f6:29:e8:bd:eb:df:14:fe:d5:1c:d8:b5:e4:
57:e2:4a:47:fe:6d:dc:cc:e9:a1:de:7c:6e:88:5f:
b0:ab:a8:c5:d8:43:4c:3d:91:5a:ae:a2:b3:36:c8:
1d:9d:d5:9f:3e:c5:bd:ee:01:42:42:5f:6a:55:b5:
39:cb:a5:03:f7:27:a9:cc:c8:be:ea:7a:85:08:38:
45:8d:34:16:40:a2:2d:22:4f:9d:54:01:a2:df:67:
c7:6b:c2:3a:84:43:c6:95:1a:39:f7:40:7f:3a:28:
ea:38:5f:54:38:53:ef:9e:b8:89:d5:28:6e:29:85:
62:7d:6b:e5:80:35:35:62:5d:21:0a:75:ce:5c:3b:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:DD:06:4D:F3:F1:A9:10:11:5F:7F:B3:FD:C9:8C:B1:72:6F:29
X509v3 Authority Key Identifier:
keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:26:d0:e9:f1:18:33:e2:d5:b3:44:be:68:18:64:1d:32:
20:5b:c7:a2:f3:c3:e2:92:37:42:fc:b9:3a:c6:6a:23:63:34:
88:de:e9:bb:a5:24:79:7e:d3:8e:24:79:45:77:ab:30:66:9c:
ff:33:7a:af:c7:da:9c:1b:66:5d:4a:71:67:63:30:c9:9e:e2:
c0:61:49:80:88:0c:ad:53:75:90:f3:3a:e2:83:e2:fa:40:b5:
fb:bd:1d:ca:6f:c5:2f:28:6e:71:2d:f6:0c:8b:69:fe:f0:4a:
59:b2:98:ca:38:e6:e7:a6:37:67:6b:c9:1d:8b:61:20:48:e5:
e3:39:01:a1:28:d1:be:b0:11:ad:32:69:5a:7d:8f:8d:cf:08:
6f:4d:8d:63:09:d6:81:ff:3d:f4:93:63:cc:b0:e9:37:3d:d4:
61:54:fa:69:a5:99:11:a8:d4:2f:09:5b:80:7c:70:3e:85:50:
ec:a1:a0:14:93:0b:22:fc:95:ad:cb:66:05:6d:38:87:73:02:
52:bd:3f:79:82:67:8e:da:7b:1f:8b:24:19:92:86:b1:63:ef:
62:a8:30:ab:43:4e:4e:95:1d:b2:da:c7:3d:f1:14:9e:98:f2:
f3:0f:6a:ca:5b:34:5e:ab:60:93:d2:3c:31:41:72:4a:11:b1:
3f:fd:04:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:02 2025 by rpki-client