Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: H6+Qtwq+Ze+yofWExm3puKNyqKJFADvMk1bZ7QTDbIk=
Subject key identifier: A1:FC:1B:B2:8B:95:78:FE:16:4A:80:EE:12:23:1B:7C:AB:B2:E4:C8
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 0195DFD8B10CF1F459F8C4BAE2BBF4287B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 0774
Signing time: Sat 29 Mar 2025 03:01:14 +0000
Manifest this update: Sat 29 Mar 2025 03:01:14 +0000
Manifest next update: Sun 30 Mar 2025 03:01:14 +0000
Files and hashes: 1: egM_lo5hkg5KA7_uP-5h7pmD4BM.roa (hash: LWEk9cOjEXdGtew0n3bgwHhe3Zn8McfotK81AHI+3M0=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: Y8i4gFiQhR8rU9j6SKgPAjnzDSa9qkpoxq9LXstLwmI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:b1:0c:f1:f4:59:f8:c4:ba:e2:bb:f4:28:7b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Mar 29 03:01:14 2025 GMT
Not After : Mar 30 03:01:14 2025 GMT
Subject: CN=a1fc1bb28b9578fe164a80ee12231b7cabb2e4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:ee:7a:a3:5a:a5:79:b7:97:0c:cc:96:5e:
e3:5e:a9:5e:b8:24:12:3c:dd:e3:45:f3:98:bd:f8:
bd:8a:2a:49:68:f6:06:e2:85:5d:5d:77:04:83:02:
22:b2:4c:b2:6a:a7:71:c2:a5:62:ea:c1:95:99:ef:
ad:b7:76:36:d6:44:a6:77:f9:39:cd:6f:43:d5:04:
61:82:47:1a:e7:39:82:f4:e5:9b:a7:2d:0f:ca:bd:
4d:58:4c:45:50:1e:9d:db:69:85:ea:30:db:c0:a5:
a2:44:29:55:62:f5:c0:f1:7e:df:e2:da:de:63:7d:
a0:ee:60:57:71:41:40:ca:64:ab:37:73:4e:3f:a1:
7a:5d:8f:d3:b6:99:2e:ed:81:15:c7:8f:7e:d9:e9:
77:c0:7a:87:29:5c:f7:57:ef:18:e4:1b:27:cd:a6:
28:21:6f:57:80:53:71:24:81:15:01:a7:a5:17:1d:
02:32:61:a7:76:3a:0a:ac:e3:89:ea:86:bb:6c:05:
d0:a8:fd:cd:02:eb:1b:1f:11:6b:87:8a:3d:bd:75:
67:9e:0f:d1:9a:03:e3:5e:aa:d0:9a:5e:b8:99:5b:
f4:ea:c1:55:ab:d1:14:57:2f:4b:12:88:c7:3c:0a:
e9:7e:18:a9:c3:30:42:33:53:30:6e:15:28:d1:b3:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FC:1B:B2:8B:95:78:FE:16:4A:80:EE:12:23:1B:7C:AB:B2:E4:C8
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:74:2b:18:7b:02:1d:60:90:f9:e1:ef:1c:21:ee:c8:99:3c:
3c:46:da:76:de:f8:44:09:b1:63:f2:97:ca:dd:dd:6d:25:96:
69:4c:da:58:9a:b1:6b:30:c8:db:6b:38:2f:ae:d4:bb:00:2f:
2f:96:db:9c:5f:62:61:05:d3:d9:b1:27:63:fb:63:67:ed:d3:
3a:ad:6e:e0:36:22:37:79:d6:6c:a3:db:b0:82:3d:4d:04:8f:
1b:48:3e:b7:75:94:9b:5b:29:b2:a0:45:47:3b:de:45:2d:4a:
fb:2a:5f:2b:bd:d1:b4:a8:5b:92:30:b1:98:ed:cf:7b:a0:e2:
04:a5:55:58:54:4d:88:9d:ee:77:2d:64:95:86:38:cc:2e:c1:
b3:13:03:df:fc:54:89:87:b4:85:cd:66:f5:52:2b:82:fc:d4:
df:e2:bb:fc:dc:ce:e3:2c:7b:4c:00:c2:5f:9a:5d:1d:74:c7:
48:c5:03:c3:05:29:3c:4c:44:af:c3:bf:0f:bd:ce:30:5e:3a:
04:d6:22:af:8b:8b:91:b8:3a:89:0b:a5:8a:29:08:0a:6b:33:
bf:75:8b:02:6e:95:fc:81:9a:c2:ab:a9:7e:b4:80:6b:6a:98:
7e:e5:20:9b:1d:f9:fa:5c:5c:a2:43:bb:b2:71:1a:e7:28:4c:
00:3c:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:20:41 2025 by rpki-client