Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: uBUWBmPc2qJvWps5hV9v4qToSHvop3vzzJ8waCyOsHQ=
Subject key identifier: 9F:90:57:FD:50:08:E8:53:2E:25:8B:0A:86:AE:26:9C:05:F1:2E:01
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 0194BD1760A56120022802B45BD5C6B180A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0BF5
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: T2dFlbGcXVD6cfeQgx4bHabBu+YKG7aIFppsfK+jvus=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:60:a5:61:20:02:28:02:b4:5b:d5:c6:b1:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=9f9057fd5008e8532e258b0a86ae269c05f12e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:92:46:76:59:06:99:00:7d:09:58:a0:46:
a9:1e:91:9e:49:22:ec:54:18:c8:3f:bf:42:e1:7c:
1f:9f:2c:ad:46:42:6c:34:95:d1:35:77:c9:8f:87:
de:b2:d6:e8:8d:3a:a0:5b:db:95:c9:0b:eb:ba:d1:
f7:5e:82:37:e1:09:48:2f:5b:47:ec:e1:a5:47:17:
c7:35:bc:0b:0d:a3:3c:ab:24:5d:2e:7a:9c:bf:d8:
2c:1b:0a:fe:b3:23:83:90:3c:5a:84:58:ae:5d:8f:
15:92:65:80:8e:16:15:27:c4:79:9a:cf:67:a0:ce:
b5:83:35:f1:7a:6f:78:95:6a:de:32:0e:6a:9a:92:
27:a6:08:77:d2:a8:2b:46:cb:b3:35:f9:e4:a8:a5:
72:67:a6:ed:61:16:1c:ed:db:90:05:3d:62:13:48:
90:ff:e6:e7:f4:b0:c8:36:a6:19:43:a1:18:9a:5f:
e4:ba:78:f6:db:eb:a2:13:18:93:c8:e4:f2:21:49:
18:cf:cd:90:c1:c3:1b:aa:fb:e6:bf:a9:03:31:e7:
32:73:70:b4:d2:7a:6c:4b:61:d7:d7:a9:85:68:c5:
cb:9c:cd:eb:0d:a5:93:6c:c3:43:45:b7:08:fb:46:
4d:eb:e8:8c:d1:02:ae:b6:b0:87:81:d5:bb:21:8c:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:90:57:FD:50:08:E8:53:2E:25:8B:0A:86:AE:26:9C:05:F1:2E:01
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:31:2c:4d:ab:57:35:1b:87:81:2d:09:95:88:92:02:ee:61:
c7:03:56:2a:6d:f0:66:55:9a:ea:b2:14:98:a4:df:15:db:18:
db:40:0a:83:08:f7:54:b9:1f:74:f6:cf:96:e8:e8:75:f2:b9:
35:e6:61:75:7a:36:b5:32:25:57:9f:9b:8c:2a:b7:88:74:b4:
ad:ab:c5:a7:b6:f6:c7:4c:2b:03:99:40:ce:c8:3d:8b:4f:af:
99:97:76:a8:9e:cb:73:a3:98:78:67:0d:27:6f:eb:9a:1f:d8:
51:8a:c1:51:8d:2b:62:29:5a:22:18:09:59:14:22:80:43:a2:
9e:ca:5e:74:76:20:6a:ec:f5:83:08:48:90:96:6e:c8:5f:41:
65:5a:30:f2:42:c7:3e:a9:12:52:c2:f4:9a:b3:68:22:e9:d9:
91:0d:19:ff:cd:95:a4:f6:07:73:85:2a:6f:5a:8f:35:8a:d3:
2c:df:df:04:c1:5f:e1:93:66:87:76:7d:5e:67:ac:10:78:61:
8c:f8:5f:b3:44:c4:2c:db:51:97:c6:bb:98:6f:14:d7:b6:82:
cc:34:01:e1:8d:5d:4d:fd:fe:50:6e:22:7b:10:70:51:cd:93:
24:6e:b0:82:6f:67:1a:7f:80:68:e6:5c:8b:98:b6:41:c6:1b:
68:bd:7b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:53 2025 by rpki-client