Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
File: NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json)
Hash identifier: gOOPq5HJM3oLzvFuQcp0Xvkb+nU7MukZxoB3VzPVZV4=
Subject key identifier: 78:A1:BB:4A:87:BF:4F:CA:33:B9:E9:91:2B:CC:49:82:E9:76:8A:50
Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
Certificate issuer: /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Certificate serial: 0194BC3BDB021819EA350AE45FB47D9545B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
Manifest number: 0936
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: 2Xtc4OFCMjZZKJKq11+4CoMP7LMEApLs566PHYBCJnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:02:18:19:ea:35:0a:e4:5f:b4:7d:95:45:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=78a1bb4a87bf4fca33b9e9912bcc4982e9768a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:aa:90:b2:62:3c:93:a8:61:5a:a3:01:c8:
b3:35:e2:a8:5f:38:72:09:ca:09:82:2d:39:b6:00:
7f:a3:43:ec:29:53:f7:b5:74:87:3a:02:bd:85:a0:
ea:5f:ad:b0:d8:ef:45:13:ca:48:e3:14:91:e5:7d:
da:73:a7:ac:7e:7c:2c:25:8c:b5:71:a1:92:b2:20:
fe:7f:76:9e:89:6e:f3:9f:9a:1a:30:a1:de:a1:b6:
09:f8:a8:b4:87:b5:ce:19:77:d7:48:33:4c:09:a6:
e6:0c:73:a8:54:4c:4f:12:8c:64:05:78:03:66:3e:
42:5f:79:dc:d9:e7:36:89:a3:16:0e:d3:02:99:77:
31:0f:c7:e0:41:a1:1c:a0:86:af:0d:11:4d:98:a7:
7d:09:46:cd:c2:4c:e0:94:3f:6c:30:83:96:88:fc:
3a:7a:22:e4:18:ae:92:71:29:a0:7f:a0:df:70:bb:
40:6d:f7:53:43:4f:93:2b:b7:7e:c3:6c:ab:8b:4f:
ea:97:04:95:93:0c:93:a2:15:a9:79:de:f7:2e:91:
a9:bf:3f:70:7f:f1:b3:cd:fb:60:32:88:6d:6d:b9:
6f:b2:14:2f:b5:57:69:de:72:7b:1d:81:13:8d:dd:
05:51:0e:5e:e1:87:38:f0:5b:e8:b7:57:37:37:00:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:BB:4A:87:BF:4F:CA:33:B9:E9:91:2B:CC:49:82:E9:76:8A:50
X509v3 Authority Key Identifier:
keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f3:c6:83:0e:aa:0d:12:07:7f:32:fa:78:5b:e3:26:07:92:
aa:64:3b:1c:4c:9f:a2:09:bf:50:01:4f:be:13:5d:b1:42:f3:
97:28:40:93:73:73:dd:66:bb:8f:6b:e0:7c:c0:a1:4c:0d:c3:
16:c6:ad:fd:15:78:9b:fe:a7:55:c9:fc:62:57:35:5c:5f:b3:
e3:95:2b:09:16:4a:19:f8:63:f4:dd:95:58:dc:03:8f:77:1f:
1a:96:f4:52:d4:5e:71:68:e8:5a:35:8b:0f:f7:1d:15:44:cc:
46:91:8e:11:15:fa:ba:dd:64:25:0e:10:f1:b1:fa:e4:60:86:
ea:7b:aa:d4:03:5e:b3:95:1f:83:84:76:98:fd:c7:93:67:1b:
2d:1c:bf:bd:e3:89:d4:53:b8:66:45:4a:aa:c9:26:b8:8f:b0:
8f:09:91:cc:b1:37:8f:20:d9:07:e4:de:cf:57:4f:77:1d:f6:
ec:c1:09:c5:0f:e5:c9:d3:d4:7e:6a:4c:22:07:e6:c0:73:79:
f2:40:bc:0d:1f:67:6f:3d:74:04:55:6f:74:d6:36:95:6f:ce:
b0:52:b4:df:bb:70:d1:32:33:80:79:b2:98:d6:41:cc:65:d0:
19:89:48:d9:a5:f4:d8:9f:1a:fd:e6:05:83:a0:f1:81:a1:c9:
7d:c6:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:43 2025 by rpki-client