Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: nyh/9qrWd3nA9XZS6tUVCn9NmBAtlI3pp54sH3XmdSA=
Subject key identifier: 96:70:4C:E2:D4:4C:0D:17:11:5A:8C:6E:F0:1D:AA:2F:3E:3C:05:6F
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 0194BD178F4C6876E338AFF80457EF38B135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 0250
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: cgoOUWyNXdhI9m9+kjPB3G6X3GfICmpfgS37vlKsNhk=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:4c:68:76:e3:38:af:f8:04:57:ef:38:b1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=96704ce2d44c0d17115a8c6ef01daa2f3e3c056f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:75:91:31:eb:91:f8:20:83:42:1c:1d:bd:
ba:ef:5f:a0:f5:c2:ec:76:2b:9f:b1:72:fb:cc:03:
b3:72:73:71:77:18:2b:a5:38:90:36:81:1b:88:26:
1a:19:25:1c:96:8e:3f:92:2f:e8:ce:5f:ad:01:db:
ff:17:0b:c8:d2:b0:ab:ee:ab:db:75:b0:93:fa:88:
02:84:24:20:3f:29:dd:ed:f7:c3:f2:7d:6f:f7:3d:
d4:9a:a7:43:0b:cd:7e:3c:a1:fd:15:50:b5:30:61:
ea:9f:b4:bc:a3:18:03:25:5f:fa:31:64:9b:3b:0b:
f3:7b:cc:ba:0e:3f:44:22:08:d0:cb:d3:f9:64:1a:
ba:85:34:3c:cf:be:da:65:f8:6a:ba:eb:ff:0b:ce:
24:41:5f:e9:93:4d:27:90:58:b1:78:11:c8:ae:cd:
6b:ec:29:7d:f3:b8:08:95:99:d1:d4:9e:31:f9:35:
56:78:b0:06:ed:78:45:5a:a5:09:9a:a2:5f:f6:b6:
99:52:51:dd:0f:a9:4f:40:e2:93:1f:67:af:5f:e3:
7d:37:02:5d:15:32:45:20:c4:f1:ff:59:47:d2:b5:
4c:94:9a:d7:32:b0:0b:43:7d:ef:e1:15:91:60:ac:
fb:56:c3:71:68:fa:de:00:7e:b4:68:71:3c:a5:51:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:70:4C:E2:D4:4C:0D:17:11:5A:8C:6E:F0:1D:AA:2F:3E:3C:05:6F
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f8:c1:1c:5a:bb:2d:ba:48:86:e7:c5:11:cd:8e:59:60:6c:
c0:01:84:90:51:b1:64:9c:a2:d2:db:83:cc:4d:cd:69:66:4a:
83:28:73:1d:50:1c:10:a3:97:b8:6a:34:3d:22:09:fe:bb:fc:
30:3d:30:6c:76:29:08:d1:f7:e9:67:d9:4e:f8:3b:b9:b2:90:
f7:fb:cd:1d:5a:29:45:f6:6b:cc:b0:ca:a5:a5:d2:db:ed:a9:
1e:17:e6:97:32:85:c8:7e:7d:1d:f1:cf:0b:ad:34:44:2d:73:
ce:6e:38:93:a2:33:c9:c6:d5:91:3e:22:85:58:a9:af:9e:2a:
70:20:87:36:61:96:0b:ed:7b:1d:b5:25:3b:2b:38:52:6d:a3:
8e:a3:14:74:f3:70:71:23:36:90:08:a1:09:8e:d1:d4:9b:5a:
e8:1b:20:45:dd:a7:96:5f:8d:a2:70:1a:a3:80:d9:82:bc:90:
86:d6:3f:c3:e4:06:0a:e5:b7:6a:5f:27:ec:e6:7c:e6:28:15:
27:fe:61:d4:ee:d3:d6:6b:e9:01:f3:34:10:ec:93:99:a2:f8:
4c:9c:db:0b:30:a8:bb:46:e5:70:11:0d:85:8f:43:b2:d2:6c:
9e:89:1b:ce:c8:58:bc:82:c8:87:72:fc:70:35:1b:93:dc:e2:
3b:36:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:09 2025 by rpki-client