Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: kr4Aq2qFJrN7933+vHISCg3SOGiY3tzlq3t0FY1kPoc=
Subject key identifier: 1C:13:3A:8B:6C:D7:9D:54:00:F9:5F:1E:32:30:D4:CD:58:11:67:95
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 0194BD17C9B8543F31D1077B10260501E9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 1014
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: a60XLzuPqj2oshfi0VoUQoG0o+/7+HKnqfr2M8I9S1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c9:b8:54:3f:31:d1:07:7b:10:26:05:01:e9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=1c133a8b6cd79d5400f95f1e3230d4cd58116795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:46:94:bc:89:34:9b:65:c2:70:aa:59:b8:
3e:00:26:ce:1a:ce:52:24:c8:3f:13:e8:1e:ce:b1:
43:fc:85:77:2e:7e:7e:5c:96:3f:e5:7b:d7:6c:d3:
2a:b9:a5:ec:d9:f9:32:16:7a:ac:8b:1c:58:29:7a:
ec:18:e1:7d:82:83:45:cc:db:9b:f9:d9:81:e3:26:
73:8f:25:cb:74:0c:6a:f0:06:eb:16:ba:bd:c1:0d:
5a:13:cc:9c:0c:05:cb:05:51:fe:b4:f9:a0:b3:f3:
3c:f6:35:2c:91:1a:cc:94:b1:90:54:57:f5:d8:29:
75:e9:bb:cd:bb:94:01:f3:8a:3f:a0:2f:04:87:8f:
c6:16:1a:27:de:35:db:92:99:d0:d7:30:38:6b:13:
0a:2a:bf:18:15:71:01:8d:18:87:2b:97:46:ae:80:
dc:aa:04:b3:a4:10:04:8c:39:a8:13:d7:13:64:79:
e6:2f:a6:94:6d:23:cd:bf:c3:d3:81:25:0a:ef:3e:
d3:fc:ba:69:6c:1b:fa:c0:0b:a4:cc:14:79:f0:83:
cd:54:ed:f6:4d:4e:ee:de:45:63:ae:6b:bc:61:df:
dd:88:dc:e4:a0:21:69:8d:bc:82:74:e3:85:03:62:
a1:83:65:14:1f:b4:72:22:5e:8f:5f:e5:a6:34:d0:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:13:3A:8B:6C:D7:9D:54:00:F9:5F:1E:32:30:D4:CD:58:11:67:95
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a6:73:14:80:42:c8:f5:35:c9:23:78:75:ba:36:a8:72:e3:
31:9d:d6:44:f7:1e:78:03:be:c3:19:56:77:e1:59:09:4f:b5:
94:c9:a3:11:cc:7a:fb:46:cb:86:6c:9b:5e:f4:eb:50:d7:9e:
9f:94:b4:d2:3e:d3:b3:18:ed:76:bc:41:a1:d0:ab:02:a3:fb:
89:00:68:b1:e5:82:16:08:ad:c2:94:9d:40:6f:c7:9d:8f:ae:
67:89:9e:8c:91:0a:ee:9b:4f:2c:ce:c9:9e:b8:63:84:0c:c5:
a3:55:21:aa:8e:a9:ad:7c:ad:4f:b2:86:90:14:c7:19:1b:0f:
f0:c0:c9:4b:8b:f5:ae:38:ad:d7:29:71:7b:ea:6e:2a:98:c1:
4f:f5:67:75:40:85:0d:ba:b0:25:c2:32:92:10:4a:cf:ab:d9:
54:c3:1e:fb:b7:75:1b:cd:7c:44:57:51:bc:9f:81:75:0e:33:
37:3c:c6:00:df:e6:73:dd:32:0e:a7:bb:ce:f7:d8:a6:6e:b0:
10:28:84:7b:40:ca:d0:a5:3d:dc:66:0c:73:4b:1b:dc:cc:0e:
0e:fd:73:96:9d:fe:fd:e5:fd:20:e1:c0:63:1c:ca:e9:d4:e3:
0e:8b:1b:ed:fc:e4:0b:da:02:0f:f2:a6:f2:0c:5f:19:54:31:
d5:0e:15:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:15 2025 by rpki-client