Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: XpBn2GI/7TsrhD2R7t/45V7Y/T0rbEIPga8zxcPR6+0=
Subject key identifier: 21:4E:2A:17:33:09:26:96:26:C9:A8:71:89:90:43:A9:05:78:5C:C2
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 0194BC04F2003DBFF2CCBFF31B5BEB1A428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 0868
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: aHC5pxt2scyZXlP7ym8VorJe1uonS8FpS2MuJ3c7FMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:00:3d:bf:f2:cc:bf:f3:1b:5b:eb:1a:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=214e2a173309269626c9a871899043a905785cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:b3:15:12:17:96:79:24:af:de:f6:ec:93:
ce:11:9e:85:eb:d5:51:3a:2a:c7:03:15:cb:8d:74:
b8:df:eb:db:d4:12:81:cf:f0:af:51:73:a1:51:77:
6e:ac:04:f8:26:65:50:ba:47:d1:88:c5:8b:49:06:
c8:3c:45:4f:15:cb:6f:5f:cb:80:d7:f7:b0:88:ad:
ba:9d:d1:32:d6:02:fa:a1:8d:90:41:93:ec:90:8e:
8c:bd:9e:43:4f:fd:d1:11:c6:7e:41:65:b9:da:c1:
11:77:d3:3d:3d:49:d4:31:11:a4:3f:05:76:c0:00:
7b:c2:1f:74:15:07:e0:5d:1c:f7:3c:60:28:ac:15:
ea:b2:cd:cf:80:be:83:40:73:44:7d:de:a2:68:88:
f4:de:80:45:12:cd:b5:bc:9f:f1:ed:d7:64:c3:50:
55:81:f4:2c:e7:d2:b2:1a:b5:08:08:19:d5:43:30:
eb:3f:d1:7e:05:e2:c5:aa:01:58:7a:42:14:69:bf:
b3:c6:3c:ef:ba:d1:87:82:96:79:af:47:3c:39:5b:
6f:0e:26:a5:32:35:86:69:e8:4f:53:54:93:c6:86:
31:75:f3:24:d6:13:e3:01:e1:ce:7f:c7:49:af:a9:
ed:62:73:58:be:f0:19:3c:07:d7:0c:05:26:81:59:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:2A:17:33:09:26:96:26:C9:A8:71:89:90:43:A9:05:78:5C:C2
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9b:26:c9:c4:0e:69:77:20:1d:8a:f5:f5:d8:c8:2d:f7:82:
d2:74:19:63:3b:38:36:ee:6d:ae:06:20:7b:fd:59:a8:1c:94:
0e:f2:6a:53:48:79:cd:8d:30:58:45:e2:a3:6f:06:bf:71:17:
4d:26:50:f2:c6:ea:36:98:a3:76:4f:41:79:d1:79:1b:ee:55:
fe:c9:e6:70:c7:25:1e:44:4c:2d:3e:74:21:b3:d0:d7:98:4c:
34:cb:1e:25:eb:df:93:2f:22:f1:8d:98:74:6c:f3:ca:b2:70:
9f:01:fe:5f:9a:fb:cb:d8:33:05:2e:7c:31:8b:35:40:fa:92:
83:06:1d:6f:ff:db:d7:7c:95:fc:30:e7:81:bb:83:a8:17:9f:
2d:f9:8e:c2:39:c0:bf:3a:86:ce:80:9e:1d:72:f0:8c:90:e7:
d8:5b:9c:e0:11:18:54:fa:55:17:ac:96:07:8f:c8:f8:a4:f7:
70:d7:61:dc:1a:b4:5a:ad:26:77:23:dd:94:f6:78:4e:82:34:
67:cc:5b:ea:e4:b0:88:61:04:ff:45:61:d4:0e:b5:70:77:44:
3f:15:e8:30:23:f8:63:cf:58:7a:31:11:96:0f:79:82:09:34:
61:7f:40:ef:a6:6f:fb:76:b3:d5:cd:fd:16:b5:41:9f:8a:5f:
7c:f4:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:13 2025 by rpki-client