Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: Pkkb+qShy7dKdWlO+LLK/nYoaTs0bNlruNx31swMOxk=
Subject key identifier: 8F:F1:44:BE:DD:A3:55:15:F0:C4:0F:59:65:C4:99:F0:4F:4B:B7:93
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 0194BC3C13BD98DE74B91F89DE59D68F6CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0816
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: NQrFI1jyTgQwEMo7T/dUzrtGyAaUc7V0acRIKS3qE4Q=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:bd:98:de:74:b9:1f:89:de:59:d6:8f:6c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=8ff144bedda35515f0c40f5965c499f04f4bb793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:93:62:f1:b4:55:1a:3c:50:e2:82:16:c4:f0:
7e:3c:ed:d0:64:6a:1d:93:af:6e:20:c8:d8:e6:4f:
a8:cb:1f:38:92:df:ea:aa:33:95:ca:90:d2:aa:5e:
2f:1d:38:c3:3c:3f:e5:4d:e6:82:bd:d4:79:dd:c4:
44:31:2f:b4:68:b4:3c:0d:f9:e6:a4:96:98:d6:d6:
bf:0d:29:12:ac:2f:58:61:31:6d:cd:5b:44:95:f2:
07:f4:9b:e9:5b:cd:e7:76:a2:da:e3:ff:d0:23:75:
05:a6:79:bc:3c:5e:c2:c1:b1:86:69:36:06:aa:cb:
58:01:cf:0a:d9:5e:be:81:c2:a5:f0:77:b6:c4:39:
a8:4a:99:b8:70:20:13:91:03:bf:bf:bc:31:66:68:
e9:18:88:67:97:67:be:18:d3:33:d1:01:b1:35:a3:
3d:ae:fd:34:ac:ed:ec:d0:8d:09:11:b5:59:6e:f9:
39:ed:1a:0a:83:96:27:b1:13:71:39:5f:2a:e9:2c:
ca:cc:a0:a6:e5:4a:3a:17:a5:96:4f:c0:0e:6a:ab:
14:4f:fa:0d:45:3f:9f:d9:66:7b:2f:fc:db:95:54:
9e:5f:f9:57:cf:2c:00:9a:f1:85:a8:5d:81:1a:e3:
00:a7:1d:b2:19:46:a2:2a:cf:a2:32:54:61:18:83:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:44:BE:DD:A3:55:15:F0:C4:0F:59:65:C4:99:F0:4F:4B:B7:93
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:fa:78:97:19:f3:3c:72:a6:ba:90:5f:dc:57:f5:58:39:
c8:07:a0:52:b5:ef:33:f9:56:c1:42:b6:3d:e0:8e:38:8d:d0:
00:99:14:d8:49:4a:cf:48:d1:8a:c0:75:9f:97:4d:38:92:b9:
65:c1:1c:46:05:91:29:0e:7a:d2:53:b4:b9:9b:85:03:5d:a8:
c3:2b:13:55:f0:e5:6a:45:c8:f1:01:23:d1:04:c1:c2:c9:1a:
39:df:d8:68:33:83:22:b3:98:24:b0:f7:63:3a:95:95:34:35:
b7:56:d6:1b:e9:81:1d:ba:75:e2:0c:7e:2c:67:9c:55:28:c9:
44:06:6f:ce:44:40:98:a5:61:ea:10:d3:95:38:c3:c2:ac:1e:
0b:ab:2b:02:9a:e8:89:5c:1e:86:f0:8c:2e:1b:23:75:17:38:
85:37:b5:0e:ae:3a:bf:9d:fc:e3:d6:f8:0a:94:f9:d2:53:5c:
85:fa:6a:5e:39:1b:74:56:29:71:ef:50:82:07:e6:b0:be:87:
3d:dd:2f:7c:8b:4e:65:83:b5:3a:06:c7:5c:51:79:3d:75:c0:
0f:f5:2e:8d:06:d2:3a:d8:78:47:f1:e3:39:e5:5b:a8:89:3d:
fa:5f:5c:75:b8:c6:33:d3:39:95:46:8f:15:4c:5e:d8:cc:60:
fb:de:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:21 2025 by rpki-client