Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: h4T7zoCWRX1lDFhczANsByPZwW3ZkUDwYgrCjHnHUcU=
Subject key identifier: 85:4A:78:58:C6:95:9E:28:E2:C6:F2:C6:E2:18:76:F2:C2:DA:C0:C6
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 0194BC72B0E32D47AB2961D055743E8853DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 13AE
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: Bkh6HAHb06BPYfHAqgroYx5DMoDL/rkvz1Xh3Az22SU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b0:e3:2d:47:ab:29:61:d0:55:74:3e:88:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=854a7858c6959e28e2c6f2c6e21876f2c2dac0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:1b:01:f1:a6:5f:e6:7f:2d:23:32:3e:01:
2f:6b:f0:60:fb:78:fd:dd:25:9d:2b:75:2f:b8:9d:
55:4e:d3:c2:e6:51:3f:fc:07:be:88:37:c7:bb:6b:
aa:ed:12:fa:9e:96:4c:7b:32:63:a9:a5:c5:6a:d1:
40:a3:a1:d2:21:bb:c6:c0:ca:ea:cc:d7:3d:fa:01:
99:83:d7:e0:75:09:c4:6b:23:22:9d:8c:fd:f9:bd:
33:2e:a6:bf:68:60:d2:a0:b2:76:a0:50:aa:70:32:
2a:6e:9e:fc:e4:79:c6:c5:d6:41:bb:94:0a:34:03:
f2:59:10:8a:d4:45:63:5d:82:da:c3:c6:2b:36:33:
7c:4d:3a:25:b6:1a:ba:31:f7:2a:1a:80:6d:b1:8d:
0f:8b:be:50:31:f6:6b:40:5d:ce:2e:7e:26:ed:b7:
5b:a5:57:d1:48:ce:6d:ad:99:31:e3:a7:2c:42:7f:
8a:c8:34:31:cc:d9:56:1d:fb:1e:f4:c3:7f:29:14:
5d:83:9b:bf:5d:a6:eb:49:d1:ba:8e:ba:2b:3e:4f:
ee:89:06:a7:7d:d1:dc:86:e2:4c:45:be:34:21:db:
28:49:c6:c9:db:62:11:71:70:ac:0e:e0:c6:a4:a5:
66:01:63:46:d9:ae:80:8c:f9:26:71:9c:91:2d:f6:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4A:78:58:C6:95:9E:28:E2:C6:F2:C6:E2:18:76:F2:C2:DA:C0:C6
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:47:83:e1:34:34:44:33:ff:3e:38:25:83:85:71:67:fc:f7:
13:a9:11:cb:5d:3e:96:78:57:1f:e2:67:be:2f:72:1f:94:e5:
0b:9b:72:b0:b2:83:bd:93:89:f7:4b:65:97:20:fe:54:fd:dd:
23:42:52:70:2d:3c:75:5c:89:df:6d:31:b5:b8:c5:62:2d:ac:
c7:cd:9d:81:e6:19:b6:2a:04:a9:6e:c5:83:e9:4b:71:f8:09:
ad:75:b5:c5:2d:6d:25:bc:f0:3d:21:94:f3:62:67:20:20:f4:
b7:d4:48:84:e0:24:dc:bb:b4:f3:8c:93:b7:4d:d7:8d:c3:34:
d5:3e:bb:f8:46:7c:95:c9:29:85:1c:91:b8:71:80:74:b2:8a:
54:ac:60:76:4a:e0:77:bb:6d:70:55:99:6f:a7:f2:21:f6:cd:
77:14:f0:0c:04:df:43:b9:cf:fa:66:7c:24:73:f9:15:45:10:
ea:a0:2b:91:3c:e3:68:58:37:39:6a:53:ef:ad:4b:67:93:fd:
9b:76:c4:a1:3d:da:73:a1:ec:7b:72:60:2d:40:0f:f1:94:d7:
f1:39:59:75:03:30:7a:7f:e9:ce:65:14:80:3b:bf:22:6a:46:
31:55:c4:4e:41:c6:e8:d1:f2:b8:9e:18:be:75:23:6d:1b:6f:
8f:bc:b8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:26 2025 by rpki-client