Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: 8kcVB3wFWLlBhifBlsg8McCYXv6YSNXx38RXrqcW04Y=
Subject key identifier: 16:40:86:5E:78:8B:A7:57:EF:D5:6D:49:40:BD:BA:52:6A:F8:6E:4F
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 0194BC3C5F356D30DE6FA53915B311B9236C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: o5sWZMKgtpDPVTZfOSryG2swR2PKBuNIkmrQ7iBNw/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5f:35:6d:30:de:6f:a5:39:15:b3:11:b9:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=1640865e788ba757efd56d4940bdba526af86e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:3d:f1:86:14:6c:ca:36:c0:d3:ed:3a:9b:
d0:a5:6a:ed:47:8b:6f:93:8c:d0:21:37:52:c3:24:
cc:87:40:dd:a9:f4:01:0c:e8:04:16:35:6c:0a:b4:
cd:1c:f3:7d:b3:4a:79:d0:f0:0d:aa:b8:a5:c2:2d:
c9:92:d6:d9:cc:8e:c5:fa:18:ab:ec:eb:b5:ae:21:
60:19:c9:ab:a1:ad:b3:83:8c:bb:a3:b7:9b:48:42:
cd:10:3e:2f:53:47:e1:28:9f:80:99:af:22:77:90:
f5:dc:ab:ba:be:95:9b:26:4f:92:c4:ed:3c:75:ad:
39:b8:36:aa:6e:2d:64:7b:53:52:a7:50:82:a0:c1:
33:1d:e7:93:69:95:52:c5:91:da:3e:77:b8:33:2d:
d8:b7:78:0d:a6:21:a7:ba:1f:25:c0:a1:2a:e5:0c:
d4:cf:45:4c:d1:cd:11:1c:8e:9d:b7:23:76:a7:9c:
f6:c6:1e:ac:b1:72:46:7a:c8:39:63:f6:c3:85:90:
78:57:16:76:b3:a4:cc:2d:34:80:3f:f4:8b:d8:29:
f6:54:92:41:92:28:de:ed:af:6e:3d:aa:ac:78:e4:
8a:14:57:f6:8f:9d:c9:f0:a4:9d:84:91:4b:a8:c2:
b6:d1:b8:9c:f9:63:f5:74:de:a8:b6:a2:78:fe:7f:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:40:86:5E:78:8B:A7:57:EF:D5:6D:49:40:BD:BA:52:6A:F8:6E:4F
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a9:ba:80:b9:7e:02:c2:bf:dc:ab:06:df:1a:8b:d0:e8:e5:
ad:14:66:e4:49:c7:69:08:5a:e5:29:ea:3a:54:6b:78:15:50:
ab:84:3e:cf:8f:b4:98:d5:2b:b8:f6:4d:b0:98:53:04:df:03:
89:36:37:bb:a9:0a:98:2a:48:74:ec:92:a4:38:f7:7e:2c:1b:
84:96:b0:76:87:84:45:61:10:7c:94:de:4e:15:5d:60:55:b5:
aa:ba:a0:24:56:c8:a1:5e:51:99:01:cc:a7:8b:40:db:27:dc:
18:97:79:98:f7:45:89:a9:88:3c:c1:e1:19:b9:51:c4:ec:e4:
22:c0:04:6e:4d:26:96:c1:ea:0e:e2:9b:76:6a:7e:4e:12:75:
83:9c:22:dd:a4:03:68:3e:ca:22:64:74:e7:65:34:43:4d:d9:
7e:e8:81:ee:d0:69:24:de:92:ab:67:de:21:34:b1:fd:d3:3e:
d6:9e:a1:21:47:66:8f:29:07:fa:b8:4d:a2:a5:3a:10:9e:ac:
98:e5:a2:6c:76:77:3f:ad:c1:bf:79:04:45:2d:89:60:57:c8:
f0:93:f6:67:30:35:c5:23:ab:6e:07:23:11:80:eb:1a:bb:62:
63:d4:71:53:d4:9e:f3:e1:13:ea:30:f8:d1:28:4c:c9:ba:34:
5d:bc:3f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:48 2025 by rpki-client