Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: JtoHYSykR9ekgVK/mrjburRRTAcx6Qs5tgBMSlccjno=
Subject key identifier: CF:CD:84:7F:AB:F3:B6:2E:20:38:03:15:63:BD:10:74:38:BB:6C:29
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 0194BBCE2176A17D25E60A2F71941828D6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: JUoLuzZ1hyKAtFAzWacI27LPl/eH6YrAQy055SDNbn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:21:76:a1:7d:25:e6:0a:2f:71:94:18:28:d6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=cfcd847fabf3b62e2038031563bd107438bb6c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:3f:b5:38:b1:0d:0a:06:88:e7:91:1e:4c:
03:ae:19:c9:45:b8:4f:55:b9:b4:59:5f:ec:90:2e:
95:7c:0e:64:1e:68:01:38:3f:ec:5b:67:63:21:c8:
15:59:5f:17:14:f1:20:af:e9:f5:ff:6d:78:78:7a:
5a:23:45:e4:e4:dd:de:81:40:bf:cb:3a:45:e0:f8:
d7:a0:d6:ee:6f:7a:15:ec:54:41:b3:37:78:a3:99:
16:12:32:23:b5:a5:62:05:8e:76:d9:5d:13:62:1d:
72:11:51:f9:0e:1e:f8:92:40:6a:f5:6d:9c:23:5a:
23:a9:13:29:0b:b2:83:69:a0:7f:2d:9e:04:38:ef:
d1:90:e9:c2:d2:6f:62:24:9e:f9:fa:05:d1:44:dd:
3d:75:9e:e2:ad:18:ba:14:fd:87:1c:6c:24:fe:8e:
5e:fd:69:ea:ec:20:12:17:f6:f4:d6:d3:56:08:da:
7c:ef:bb:e5:6d:10:2d:15:83:c0:84:d1:d6:d2:d1:
61:a2:2d:0a:f6:a3:3b:e7:36:91:39:81:cf:e7:8e:
e6:ea:58:0c:9f:9b:56:6e:25:8c:03:47:e2:df:d4:
eb:d1:0b:61:41:e4:0a:8f:bb:83:40:6a:fa:12:c5:
e0:a4:cb:6a:84:59:d2:be:b4:b0:4a:6a:24:92:5a:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:84:7F:AB:F3:B6:2E:20:38:03:15:63:BD:10:74:38:BB:6C:29
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ca:e8:e2:86:1d:3d:47:a9:af:68:2d:9a:0e:2a:30:e2:73:
e9:43:01:c8:e9:42:b0:9f:16:d4:a2:40:81:2a:a8:8a:df:3f:
bf:82:ba:03:db:f6:7a:46:43:c0:89:48:c8:dc:a2:77:1b:ea:
9b:70:91:62:ec:1d:2c:ca:4e:44:18:35:1a:22:49:fd:7f:00:
0b:bb:75:98:af:c7:30:93:c3:92:71:06:53:da:12:ad:fe:63:
44:b2:2c:74:2f:29:1f:65:da:66:6e:db:a8:d6:88:9e:e4:e4:
24:58:54:1e:ca:6c:e2:f2:e1:b7:e4:0e:29:2f:59:a0:3d:17:
26:d7:d9:a5:ee:d5:1b:c8:60:aa:a6:55:f0:a3:44:75:92:f5:
a6:33:a6:39:46:9a:ef:b0:3e:44:84:38:2e:70:1d:86:bf:e9:
5e:d7:41:e6:bd:2a:6c:63:2c:cf:80:47:32:ff:df:9a:79:34:
aa:23:80:cd:87:ba:bb:25:61:dc:c9:74:58:de:08:f3:f2:f7:
66:23:4a:e1:d6:bd:22:64:ab:92:f0:b5:5b:77:fc:dd:ed:c2:
71:21:c6:35:f2:cf:6f:9b:10:14:dd:96:a5:28:68:94:ff:3d:
1c:01:37:f8:9d:8c:d9:1b:48:ab:5f:20:9a:a3:3c:08:bc:97:
85:d6:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:59 2025 by rpki-client