Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
File: N4ezJLDTL7GjZ4sCxIIobUwmug8.mft (raw, json)
Hash identifier: B5dTixT6LKnkZJWAwa4D5nsh+OmkoJQexC8u0HGZCAw=
Subject key identifier: 89:4C:14:94:04:92:EA:20:C5:95:49:35:A7:7B:15:42:27:E3:A1:50
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 0194BC051ED6226CFD58CB4F77A17D8F8300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: N4ezJLDTL7GjZ4sCxIIobUwmug8.crl (hash: okArNoCsea8yy81zlCWbLVy7UT1YFzg+kZTyVktOOd0=)
2: OpF39dteeAgdG0uMSaeSye2QMl4.roa (hash: 6AawtRpq3DsNtx6xd7OyKZI4o4kWWfOmTgahYICncm4=)
3: iddMiGg8ovKZ_KW8pvcXVd9RE60.roa (hash: tlHNfQDbOnq01Er7SY3BPzZvcVpBmTMeqa5ifXXCQPU=)
4: jPdoFO28ZYmIy0FwhFbaKyywLn4.roa (hash: 2DMBsYGpILPZ83xfOVSe8IYb5O9R3Gf6YlNKmTmqMeg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1e:d6:22:6c:fd:58:cb:4f:77:a1:7d:8f:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=894c14940492ea20c5954935a77b154227e3a150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:a2:49:aa:ec:1c:cc:96:19:a0:ec:b5:e6:
90:57:37:d9:7e:95:e0:16:09:a7:32:f9:38:61:e5:
f0:86:28:cd:e8:44:ea:3c:e3:1f:3d:4c:c3:dc:0e:
dc:55:a4:e9:9b:40:4a:c0:7c:98:97:2a:44:3c:f7:
7f:57:c4:6f:90:c6:0a:3a:9e:c6:19:c1:c5:c8:25:
27:75:d0:f7:8a:86:dd:30:bf:37:40:46:2d:fe:89:
f3:7d:50:ca:25:31:3b:6d:d7:3d:f7:9c:28:79:ee:
ae:ad:4d:61:da:01:93:69:e8:5d:1f:1b:65:3a:c7:
e6:15:cf:42:43:b8:e9:30:21:dc:48:80:3f:f6:06:
e7:3a:63:77:45:23:03:05:a3:80:81:04:be:5e:d4:
88:02:90:8a:75:0a:3f:b5:7c:97:70:43:95:30:a5:
8f:fd:d5:05:0f:1a:c3:d8:28:30:bb:38:83:6c:6f:
bf:6f:21:92:5f:4e:03:f6:c6:40:9c:ed:33:84:84:
ad:ba:76:11:ed:8a:2a:1c:1a:c8:67:f0:53:44:79:
13:5f:34:1d:58:8d:d9:ac:c5:48:ae:98:d1:e3:93:
d5:a4:30:6a:d0:19:57:4b:36:7a:f7:61:f5:21:a3:
14:0f:6d:f7:e5:b4:62:fa:4e:68:84:11:58:98:25:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4C:14:94:04:92:EA:20:C5:95:49:35:A7:7B:15:42:27:E3:A1:50
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c7:42:80:3e:2e:61:7d:e0:f3:8c:f9:c3:9b:0c:11:cb:00:
5d:fc:6c:8c:28:74:a1:ad:80:92:3a:c1:f9:31:3a:0e:10:9f:
85:fc:74:cb:47:de:34:ec:c9:33:82:3f:b4:00:64:d0:79:a7:
d8:27:24:a7:55:6f:9e:31:59:86:e5:b1:d1:79:f3:b6:33:6e:
ee:8d:fe:38:a1:bc:5e:05:62:fa:7f:c3:52:05:ca:42:e5:7a:
5b:6e:33:15:e9:9f:38:28:69:eb:54:a0:07:4d:95:e5:df:00:
a9:d6:dd:95:82:7c:1a:9d:ad:27:bb:02:34:fb:d4:78:50:0c:
c4:d2:00:43:b7:7e:b6:58:25:49:93:a0:ea:45:15:c7:26:a9:
5f:8c:4b:5e:b7:90:d8:74:94:65:ba:10:22:dc:94:85:e5:79:
a1:de:aa:a4:1d:40:95:ae:04:cb:8f:58:72:02:f0:46:b4:50:
ab:e4:26:b3:14:ed:61:b6:29:e6:d4:f2:c5:23:08:a8:34:31:
f2:f2:36:85:24:51:0d:04:b7:da:3d:73:4d:f6:13:4e:16:3f:
98:df:d9:97:20:12:b2:a2:27:7d:f3:da:bb:d7:b4:0c:a7:04:
67:fe:6d:b8:9e:5f:ec:66:9d:93:db:58:b6:96:e7:78:ea:ca:
c3:24:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:36 2025 by rpki-client