Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: VJ7fO36d3xqABc333nFftBvFa/ylbaCA8DoObepRP2Y=
Subject key identifier: 0D:B3:DB:24:07:18:91:AA:3C:01:E2:C5:ED:BD:30:75:5A:2D:AD:14
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 0194BD17C4F39E5BD536827C9661995FDC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0AD2
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: jSQ0uED3Px2xrAAYhXHkDb0Ij_s.roa (hash: dCq52P7Yb/gWqvUXElUT6cMg1EUH+47g7scN8nXQaZo=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: K6Yhk8NYkUpF6S5JnUaQaVCQQH/AkCJJ+KeFqxPalzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:f3:9e:5b:d5:36:82:7c:96:61:99:5f:dc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=0db3db24071891aa3c01e2c5edbd30755a2dad14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:3a:84:9c:04:66:97:f1:18:3c:98:42:ec:
77:95:f4:9f:70:c2:f0:22:8b:c2:1e:d0:6a:b7:9d:
7d:93:27:c4:59:00:49:3f:7e:e4:14:77:5d:ba:ed:
a0:3c:86:5b:23:c2:27:fa:c5:40:54:0c:48:54:a5:
6d:6c:c7:12:95:c9:fa:d4:9b:d6:c8:05:4c:4c:35:
2d:17:b7:0d:b6:8b:bd:21:1d:72:56:53:94:b1:8d:
25:15:28:ab:9d:4a:b6:86:4c:bf:39:86:68:aa:fb:
18:cc:f6:d3:c0:de:f6:8f:7e:d8:f4:9d:6f:ee:98:
c3:37:43:b5:b9:dc:c2:a7:c8:74:48:41:83:dd:98:
91:ed:b7:be:14:ea:d1:1c:29:a9:20:ba:63:6d:e4:
d5:ea:c3:cf:79:f7:45:42:6a:a9:b9:21:25:2b:8b:
e6:2c:87:14:ff:71:47:e3:c1:76:fd:6d:a3:b2:4c:
a6:43:58:ac:09:f9:51:9c:24:39:83:6d:cc:0b:84:
22:53:fa:17:ff:2a:b2:c7:19:b9:38:f9:02:88:ab:
3c:ec:85:d1:da:16:33:54:4e:f2:94:1e:c8:bd:1c:
f1:ba:dd:81:03:05:61:4e:6e:89:a1:aa:4b:ec:9f:
dd:87:bc:89:40:f8:3b:29:1a:01:1f:09:b2:54:68:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:DB:24:07:18:91:AA:3C:01:E2:C5:ED:BD:30:75:5A:2D:AD:14
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:70:d5:d7:8c:67:dc:4e:da:cc:47:ad:d5:c4:f6:1e:5c:17:
ca:ee:8d:55:1b:82:96:7c:0c:1b:9c:14:7e:7e:8a:f6:f9:47:
25:c8:3e:64:f6:7f:1b:eb:ff:84:52:07:ab:1f:f1:de:1e:c0:
c1:2c:85:d4:02:28:2c:bf:7a:85:35:93:03:0e:f2:4b:d4:d2:
52:07:7e:48:7d:8b:76:2b:79:3c:1c:e1:9f:63:3a:56:ef:59:
d3:56:8c:71:b6:55:13:49:63:91:a2:ae:4d:f6:a7:17:1f:fa:
6d:97:a7:f7:29:ef:d4:42:18:d2:97:ac:ff:48:d6:2e:99:1f:
d5:19:00:a2:74:fa:50:93:ff:e0:e3:93:40:c2:d3:72:81:cb:
ba:4f:3a:e6:06:c8:f6:20:bc:86:13:fa:96:ba:3f:dc:e8:c6:
7f:db:1b:34:81:24:d7:ae:9e:b2:fc:86:ae:a9:b3:62:95:7e:
7f:17:f5:64:8e:60:68:be:11:dc:60:64:dd:7b:d5:5f:98:e8:
f4:d4:1d:fb:a9:9a:6f:2c:4b:67:be:64:78:2a:43:20:78:62:
bd:2d:d0:39:a6:7d:73:de:0d:85:5e:c0:b7:c3:09:8b:0d:cf:
ee:82:1b:96:8c:06:8f:c3:4d:a7:fd:9d:9e:79:6f:09:3f:2a:
72:2e:49:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:20 2025 by rpki-client