Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: CfoxNbVWd1PccCbgbmtM0j6Y0rWCzrsiaXrwhZOCUnM=
Subject key identifier: E3:50:53:B6:F7:74:91:63:E5:9B:0B:85:62:5D:C9:E9:F2:21:BE:5F
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 0194BCE0DA5B264155F207A4AFC54D66B895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: 5mROzkuzYvsof/9ypF7ACwo6rk3oTjIGdbR1tqy5awQ=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:da:5b:26:41:55:f2:07:a4:af:c5:4d:66:b8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=e35053b6f7749163e59b0b85625dc9e9f221be5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:57:bf:44:18:26:10:01:6d:1a:47:57:70:
f9:41:1c:94:68:61:c6:3d:5c:c3:02:b8:26:d3:22:
50:e2:b8:b8:08:a5:4d:d3:bd:59:9c:9e:c2:3f:0b:
fb:d8:ff:da:95:56:83:bf:31:38:a5:b7:e2:e7:96:
13:54:55:1b:7f:86:de:36:ac:1a:3f:96:a3:09:ac:
0f:9b:9f:0c:e9:f2:be:2a:fd:90:cc:15:5f:b1:2a:
2c:be:ef:a6:cb:4b:e4:a0:8c:e6:f3:a1:b8:8c:65:
d7:ab:a9:77:38:82:f0:28:5f:05:db:5e:44:02:19:
b6:c5:cc:89:2c:0a:7a:b9:90:02:37:11:fe:3d:42:
b3:3e:b7:2b:37:30:28:81:28:3a:65:2d:7e:3e:81:
50:85:4f:04:27:5b:fd:d0:e6:22:14:39:ea:5d:bf:
78:89:6b:3b:f8:29:72:57:0d:94:3c:ed:5e:ec:c4:
5a:79:20:43:58:7f:2f:8a:0c:ee:5c:43:2e:4f:be:
90:06:1d:af:1a:5e:17:fc:b5:6c:60:b6:d4:e1:92:
43:ed:f7:01:2b:4d:1c:19:75:b0:e0:72:8d:06:46:
28:fc:9c:d2:48:42:0a:74:cd:0b:e0:93:71:46:fa:
26:00:5f:9c:a3:8b:fa:23:02:da:9e:ca:65:82:4c:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:50:53:B6:F7:74:91:63:E5:9B:0B:85:62:5D:C9:E9:F2:21:BE:5F
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:78:d1:d2:25:b7:30:92:1e:f6:10:bb:ec:f7:16:8a:95:8f:
db:c2:5b:ea:69:78:85:7d:6b:58:44:81:8d:bc:a9:be:5e:ce:
6c:86:cb:40:af:75:4c:50:c6:2a:25:15:9e:32:7e:21:8b:2e:
c1:77:27:06:d9:5b:68:ea:8e:cc:14:c6:8e:84:f2:9e:57:1a:
6e:cc:7a:d1:53:cb:ee:a0:50:61:2c:30:f2:7d:ea:09:09:95:
94:89:35:11:29:7e:a8:e3:a0:e0:34:ab:2a:07:6e:04:74:06:
9e:2a:68:da:7e:33:b7:6b:75:c4:29:27:f6:83:b4:b2:0b:b4:
41:2d:ab:38:76:86:9c:26:17:1e:e5:46:49:a4:55:47:f7:ef:
13:6a:7e:3b:e4:2c:40:73:5f:84:29:df:fb:66:15:bc:51:7d:
17:d8:3f:e6:47:1b:48:16:1d:d6:54:82:7a:dc:dc:db:a9:2b:
1c:f9:af:56:77:ef:c2:93:13:2a:f9:64:c9:de:da:73:ea:6e:
0b:43:9f:0b:58:4b:da:ba:ea:e9:2c:15:25:63:90:b9:b4:f6:
f9:90:d3:5b:41:7c:14:be:55:70:2d:9b:77:2c:8b:26:19:c3:
5c:6f:ec:c8:86:fa:d5:4d:e8:76:e6:59:94:69:8b:8d:d2:76:
2b:e1:fb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:37 2025 by rpki-client