Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: GMaXqt6zD7hs41FQ60BFZru2W9Ma1vAUFupUf9+KJrk=
Subject key identifier: FF:E6:85:D5:8C:6D:09:92:96:E8:DA:F6:8D:40:D4:C5:BB:64:21:45
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 0194BC730AF09E3B2B1D344B5C1C10144E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0A1B
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: 51x/2NAgtgdGuNREgaPFZzOg97UEwzwOhJY70Rh3qdo=)
2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0a:f0:9e:3b:2b:1d:34:4b:5c:1c:10:14:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=ffe685d58c6d099296e8daf68d40d4c5bb642145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:f2:08:20:ad:0c:50:dd:0f:1d:79:b8:c0:
aa:d3:94:10:42:99:28:bc:29:d4:b9:ee:11:dd:37:
dc:b1:df:20:72:bb:c6:ae:36:05:ee:44:db:96:8e:
14:f2:61:d1:1d:8d:05:28:be:a7:49:78:14:90:22:
cd:78:a1:33:c3:12:65:5f:3a:f8:46:0c:2c:95:4e:
77:d1:fc:5e:46:2c:e7:83:73:30:72:0b:be:e2:0a:
27:34:17:ed:1e:7d:ca:78:43:46:d9:29:46:03:34:
72:cb:c5:e1:bc:8c:2f:49:a0:ac:2c:14:f9:0e:49:
3f:39:db:cb:cf:bc:4a:b1:74:db:b9:ee:ae:5d:c2:
72:4c:49:3b:63:6b:47:a7:5d:bc:2a:54:93:5b:20:
e0:a4:a7:8d:bf:f0:59:43:fb:0f:92:a5:93:b0:07:
bb:11:be:b6:11:42:ab:f2:e3:f5:9a:64:8a:44:a6:
40:dc:2c:12:83:ce:68:ca:04:dc:f5:64:31:e6:07:
5d:59:07:5e:ce:4e:d9:6a:dc:c2:89:c2:4e:7f:41:
cf:10:d8:08:4d:d2:de:0d:4f:38:a0:82:53:04:27:
b2:ba:e1:a9:ce:c2:4e:39:b4:54:46:30:9c:a3:82:
d4:72:da:a1:df:be:2a:50:7e:d2:d6:0e:b6:22:04:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:85:D5:8C:6D:09:92:96:E8:DA:F6:8D:40:D4:C5:BB:64:21:45
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b6:3d:9d:cc:a4:66:00:cb:d0:50:fa:b8:e1:b0:59:65:a5:
ed:4b:76:8e:09:45:73:7b:d5:47:90:2f:4d:6d:4d:7e:2e:3f:
f4:6d:a0:45:cb:3b:17:7e:6a:69:9c:5c:fd:e2:88:be:8e:51:
ac:5c:30:d8:a0:1a:d2:50:82:df:a9:2d:32:c6:8e:50:0d:03:
65:0c:2e:3a:13:1c:69:14:97:09:e9:a2:bf:e3:3b:1a:75:8e:
e5:10:4f:a6:a5:73:63:69:a1:3f:da:53:5a:de:14:a2:40:88:
e8:f9:4e:1c:06:c8:01:41:78:06:50:3c:25:07:94:4f:22:f0:
23:b9:0c:34:ad:68:3d:75:d0:a2:4e:b1:c7:50:b3:87:73:36:
cd:b5:08:a6:77:f5:b3:0a:ae:74:f0:80:a8:40:1f:66:9c:fe:
d9:58:df:9b:b1:4f:d9:2b:31:ea:71:f9:34:f3:9e:1d:f4:fe:
8c:0e:18:ed:40:98:87:a0:a8:f7:9b:51:b0:b0:7c:56:42:63:
ed:80:7c:f0:96:58:78:ae:62:b8:b0:e6:6d:8b:83:47:04:3e:
32:da:45:1b:73:e9:ff:f7:dc:3d:d9:00:9d:e6:a6:66:a0:91:
4a:29:d8:99:36:9d:6a:19:f0:9d:69:12:c6:ec:3a:0e:62:06:
4f:e0:e4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:40 2025 by rpki-client