Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: tTV0YVq/2gjpCYPNRZbWcd2mizWURPSSXJaESSWh+nw=
Subject key identifier: A0:2F:73:78:CD:9D:FD:3E:EC:F5:E9:29:F2:74:44:E9:BE:C1:75:5E
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 0194BC3C2B1BEA40709E9ECBB73FF1E9997A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: 03od21t49GLurvJjaZ3Yc+7M6VAPIM6Q64e1v3IcOIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2b:1b:ea:40:70:9e:9e:cb:b7:3f:f1:e9:99:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=a02f7378cd9dfd3eecf5e929f27444e9bec1755e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:79:17:ce:82:18:b4:54:b0:eb:50:46:79:
aa:fd:cf:f6:85:17:60:b6:9c:81:f1:ef:3a:45:e2:
2d:e8:d8:66:d0:62:be:7d:36:a8:e2:ee:44:ff:94:
d4:50:04:dd:a6:bc:4c:15:28:35:41:d6:e5:19:64:
6c:41:87:92:cb:05:68:b4:12:09:85:87:5f:01:1b:
d2:22:98:06:85:29:a0:0c:38:ca:e9:06:47:54:1e:
d7:9d:9b:08:40:84:2d:ff:51:0d:0b:81:c2:99:2a:
66:b7:c5:23:b9:07:c8:10:32:e6:0c:59:bf:79:dc:
87:d6:df:c2:c1:40:8f:d0:7b:05:d0:6b:7b:a8:2f:
aa:55:13:24:6c:cb:10:5d:08:a9:e9:c4:c6:fb:a7:
e1:0b:43:cc:57:6e:24:b3:ba:fd:e9:e0:7c:3e:99:
31:5b:6e:70:24:db:ad:77:6a:40:f4:42:d1:0a:65:
23:7d:ce:2e:9e:eb:1e:f3:d9:81:35:7f:60:10:e5:
e4:11:1b:85:62:1c:fd:48:aa:2f:34:b4:21:76:a2:
c8:05:0b:44:e2:96:32:78:37:26:01:99:14:28:90:
78:88:08:27:73:ae:9c:66:a1:98:92:de:26:23:9b:
e2:0b:02:93:62:5c:7a:b8:4a:7c:dc:0c:50:d2:55:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:73:78:CD:9D:FD:3E:EC:F5:E9:29:F2:74:44:E9:BE:C1:75:5E
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:84:b0:8a:fa:f4:54:07:97:a3:25:50:d7:b1:d0:96:61:
6f:3c:76:83:44:9b:d6:32:4d:d5:ba:75:7f:06:73:6e:de:2f:
d4:b8:c5:53:05:62:46:bc:1f:95:c4:20:b5:1b:ff:5b:6c:5b:
04:bc:55:97:72:37:a5:6b:63:42:35:d4:46:65:d2:07:b3:f1:
bb:70:f5:7e:72:ab:96:23:c7:12:26:fc:35:c0:46:ba:17:c6:
26:9d:af:02:51:2c:94:c6:4d:7f:35:84:75:ca:0b:97:c1:d7:
3f:0d:e0:9f:2c:94:16:05:5c:2b:c8:c0:dd:75:c4:30:c2:16:
6c:87:70:bd:e3:e9:67:da:bf:47:9a:c8:88:83:30:22:81:2b:
86:27:b7:f0:76:44:60:cf:91:cb:db:fa:8e:35:48:f7:98:6a:
f7:04:fe:27:26:9c:87:a2:43:e2:48:38:cc:ae:59:02:a5:ad:
07:a4:58:a7:25:d9:7b:0f:c7:30:02:9a:a3:41:67:a6:53:ba:
cc:80:95:69:7a:2d:af:7c:d2:28:e5:0e:37:64:98:df:3d:13:
24:28:1b:05:57:86:2f:42:bd:68:ce:ce:7b:58:e9:07:cc:8b:
d8:87:77:ff:9a:d3:08:cf:19:26:0d:72:38:db:b4:90:10:62:
86:dd:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:30 2025 by rpki-client