Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: fdnjFlfEHdqwytYZR9xR1sPC75g/7Hhl2M/XupW16eE=
Subject key identifier: 2B:C4:E2:40:EC:36:CC:3B:E4:F7:C4:70:31:AD:C5:BD:8B:3C:80:11
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 0194BCAA127CCC47F71B22BACE424691D9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: HypxSidR5NIlIS2W2MezN1YeNtF9dxr0muOngbFW6QM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:12:7c:cc:47:f7:1b:22:ba:ce:42:46:91:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=2bc4e240ec36cc3be4f7c47031adc5bd8b3c8011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:d8:bc:03:1b:79:35:02:6e:a1:24:b9:9d:
4a:37:9b:71:fb:7e:b6:45:07:b6:04:50:cb:83:be:
9e:19:c8:4f:f7:f5:19:d0:13:42:f6:c9:cc:59:e9:
be:df:32:f0:99:32:3a:c6:3f:8f:54:8d:d2:1e:26:
7f:e0:55:2e:0d:79:e5:3e:ec:88:7d:ae:00:e4:55:
5e:28:24:44:49:0a:0a:82:41:6f:ca:50:82:aa:db:
0f:57:53:bb:b6:2a:93:5d:67:ea:32:c5:1c:90:27:
02:4f:3f:95:8d:17:23:ab:71:ce:86:70:a9:99:fc:
29:f4:13:1d:7f:53:0a:d6:db:90:05:a4:3f:f2:c1:
c6:fd:04:38:b8:68:5b:86:b1:39:39:dd:72:f6:95:
2c:11:03:f2:07:68:90:db:2f:70:4b:c7:01:13:a1:
32:99:a3:df:02:5a:2c:5e:b3:2c:5e:7c:d7:4c:a6:
98:cf:08:e4:ec:a2:0c:62:4c:c9:ec:d3:58:fa:9f:
88:21:0d:54:3c:7b:42:97:17:05:fa:0e:c5:0e:7f:
b2:a4:7b:cc:82:74:5b:b5:9d:62:db:c9:b7:32:e7:
d2:17:a5:c0:0f:31:2d:a1:4e:1f:0e:b7:86:1e:14:
22:ed:6a:6a:e3:27:6e:64:44:98:ff:de:52:9d:f3:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C4:E2:40:EC:36:CC:3B:E4:F7:C4:70:31:AD:C5:BD:8B:3C:80:11
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:38:9f:5e:d8:2c:d8:6a:0c:1e:cb:b0:9d:93:1c:10:9e:
49:d6:4b:14:f5:01:2c:92:9a:7d:e6:15:e9:69:8a:71:d5:35:
db:03:1e:25:b5:c6:0a:4e:94:45:88:24:8f:b5:68:ef:53:9b:
03:46:e8:66:ca:77:2b:45:d9:99:75:a8:f3:86:3d:9a:2e:be:
3c:10:34:a6:2c:63:09:b4:ac:cb:d6:f3:03:02:35:49:24:95:
3e:f4:f6:0e:67:2e:8f:cf:5a:c7:78:e5:d3:fb:2f:3e:03:bf:
3c:8e:57:39:26:bc:c1:0c:a6:fd:78:f4:2f:71:f9:d9:40:10:
d1:68:b3:dd:1d:a4:69:b8:8d:a9:4b:86:ae:37:c9:b2:3b:c5:
37:7e:ba:ab:f1:bb:8f:76:ed:16:7f:89:c2:23:0a:76:32:2e:
79:41:78:e2:70:16:30:ff:e7:1e:7b:ce:e4:cd:d3:59:dd:f3:
1c:34:55:17:4a:38:80:98:6c:95:be:9e:5c:7e:6a:5e:61:92:
fb:be:f1:d3:0b:50:42:99:65:c0:44:2d:e8:3c:46:73:64:a6:
29:61:69:1f:4a:72:31:89:fc:8b:36:1a:bc:52:48:9f:35:bd:
8d:79:55:01:05:10:65:98:a5:ed:bd:c2:36:6f:1c:63:6a:21:
2c:9d:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:10 2025 by rpki-client