Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: L3o0eca96iyTrBab8VhDJlUCTqWl8aOg6w/pYV9Qb4c=
Subject key identifier: 17:C4:6B:29:25:C1:34:46:7C:49:D6:04:54:97:6B:22:BC:48:3C:EC
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 0194BC3C02E7093D230F8D6BBE84AC9B2C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 116C
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: wWnqmt+oNSegn1L9DphzyCtM5vR+NWx6HFHpVlfPKK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:e7:09:3d:23:0f:8d:6b:be:84:ac:9b:2c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=17c46b2925c134467c49d60454976b22bc483cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:3a:98:c2:46:81:b5:0a:a5:4e:3c:7d:5a:
36:13:0e:64:fd:f7:c7:ba:c9:88:08:41:21:4f:95:
57:e6:dc:87:67:ef:56:1e:f9:09:32:67:d5:7b:02:
2f:b0:83:22:f6:9b:f8:ba:dd:d6:9e:97:d4:13:aa:
f8:ac:c7:8e:98:34:4f:b8:89:ff:61:0e:18:64:0c:
65:02:b4:eb:52:60:29:c5:c4:11:0e:8f:46:1c:89:
9f:9d:83:95:d1:bf:53:aa:bd:1d:57:dc:f3:78:8a:
af:54:cd:f2:ed:d0:eb:f1:d5:e3:a8:c0:72:ff:e4:
c6:1d:b1:c3:24:ce:ce:1c:d2:fe:06:8b:dd:93:be:
a5:c1:b1:06:ee:e7:b5:b6:cb:73:c4:de:a5:18:d6:
97:6f:b9:f7:0c:14:73:87:5c:8a:dd:bf:cf:21:6c:
4e:c6:6f:68:c8:f3:71:f6:42:56:22:23:dd:d0:1a:
56:a1:50:f3:ea:ff:5d:4c:18:4d:a8:59:10:0a:53:
dc:72:51:99:80:ac:f1:15:a6:28:12:5d:11:19:b1:
ed:da:1e:5e:36:70:6a:53:19:fc:02:16:e9:f3:1c:
9a:75:71:fb:d9:3a:60:c2:ab:e7:30:95:9d:4c:21:
e9:b5:45:ce:b4:a5:c4:6f:8b:3d:95:b3:c2:f7:87:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:6B:29:25:C1:34:46:7C:49:D6:04:54:97:6B:22:BC:48:3C:EC
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d7:81:8b:a9:93:95:0a:9d:40:d1:c3:9c:ca:b7:ec:6c:c0:
7f:f6:10:af:e0:ff:31:07:fd:75:07:ff:c7:53:99:b1:31:25:
f9:d1:ac:df:58:7c:55:93:38:ab:4f:59:0b:6f:20:80:de:90:
91:42:04:98:1c:b4:e8:46:8b:5d:7d:76:19:fc:1b:0e:e9:a0:
b2:71:d4:9d:f4:19:ba:98:82:16:5b:e4:06:c4:1a:44:10:2e:
61:ce:17:39:64:d5:0e:55:30:7d:2a:ef:d7:d0:5d:d8:be:82:
6b:78:e3:b2:d3:02:1b:31:f1:6f:8d:1c:d0:ef:a4:15:92:92:
5b:71:5d:64:df:4c:b3:04:ac:86:ff:b2:74:47:56:62:64:1e:
f5:58:25:45:5a:45:8c:00:b6:e5:70:4b:78:22:b8:19:19:3c:
1a:d7:91:75:38:3c:b7:a4:1e:c4:9b:fb:7c:3d:e1:e5:16:d4:
bb:28:ba:a7:81:e0:2e:7b:5c:be:2f:ed:ec:c4:93:86:01:8b:
28:69:e4:da:36:22:71:9b:40:17:2e:d1:d6:44:6c:d4:76:56:
ff:3e:35:5e:ed:f5:82:c9:3d:12:96:fc:b0:f4:74:fb:ea:62:
e8:12:ee:68:1f:13:0e:ff:24:a6:35:5f:11:6f:9d:5b:58:21:
91:22:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:56 2025 by rpki-client