Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: lBBSXkwNfwWZfHgxVdvpsbFMsj5PeDwFfCs1pSfypuo=
Subject key identifier: 5B:0B:C0:34:D9:1A:36:98:2A:87:CE:EE:34:B3:A8:A7:A4:BC:35:F5
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0195E0B47A7977040F0D14C1E6DB4FA0AE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 14C9
Signing time: Sat 29 Mar 2025 07:01:18 +0000
Manifest this update: Sat 29 Mar 2025 07:01:18 +0000
Manifest next update: Sun 30 Mar 2025 07:01:18 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: Ny24EB1jw5sK2Cn/S2FcZOm/7WrFfB++MOkyZ6MfGgY=)
2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=)
3: dYsfx3N8F8Pa41InMzgd7Y-Nwv8.roa (hash: +2ick/BrqTQkAWkGD2npFbQdv9qSaL8sDhmWgVr+qIo=)
4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=)
5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=)
6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:7a:79:77:04:0f:0d:14:c1:e6:db:4f:a0:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Mar 29 07:01:18 2025 GMT
Not After : Mar 30 07:01:18 2025 GMT
Subject: CN=5b0bc034d91a36982a87ceee34b3a8a7a4bc35f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:75:3f:58:ef:17:a7:34:6b:b9:6f:20:f9:
d0:20:de:4a:7f:c2:4e:a9:c8:22:de:2b:6c:4b:5b:
03:65:55:2b:fe:8e:61:a9:6c:95:0b:a8:16:0a:c3:
9b:45:d5:43:53:1c:ec:30:cf:af:b0:47:aa:63:a2:
2d:39:5d:bd:22:ca:af:ca:73:30:a6:e4:a6:a1:54:
90:87:5c:e1:92:26:13:c0:c6:5e:af:9e:5e:0c:17:
9a:03:7f:1e:57:53:ef:71:66:d8:4b:10:fe:92:42:
2c:11:bc:e1:31:fd:30:92:74:77:75:e4:a1:fa:dd:
09:ac:39:ca:35:9e:45:8d:9e:41:f3:b2:5f:42:3f:
3c:a5:02:88:35:1e:22:40:04:b0:7b:88:9d:87:04:
2e:f2:c6:48:93:bd:7b:7b:44:8a:aa:08:4a:a5:80:
dc:9a:7f:49:f2:8a:63:00:e3:2e:be:44:22:19:d0:
f6:ec:a9:7b:56:c6:8a:18:7b:05:f4:1c:81:1e:9f:
06:fa:68:31:1b:58:18:dc:94:45:d3:dc:5d:7d:14:
c5:7a:61:e5:0b:40:f5:c4:f8:23:82:45:f5:39:e1:
0d:80:a9:48:5c:a8:07:6b:06:1a:b4:54:d4:7f:fe:
cf:fa:bf:05:88:ef:df:03:2c:92:5b:82:40:4b:fc:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:C0:34:D9:1A:36:98:2A:87:CE:EE:34:B3:A8:A7:A4:BC:35:F5
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b9:9f:2b:32:67:ba:bc:30:77:33:e0:8c:f7:80:a0:88:ce:
0e:ee:c6:dc:02:24:ca:a4:cc:04:86:3d:7b:bd:6d:9d:80:58:
0f:46:4d:99:72:cb:af:c3:c8:57:a8:40:4f:c3:05:31:14:8c:
02:e7:55:af:4b:03:4e:f9:33:2a:92:2b:a6:8e:74:ef:7d:97:
a2:a4:40:09:e2:f5:02:13:fc:02:45:be:ff:bb:88:0e:40:ab:
a2:56:ff:af:10:a8:c2:0a:0f:54:bb:ea:d2:46:d1:a6:18:7b:
d6:2a:1c:7b:dd:64:84:28:0e:90:f4:f7:40:cf:ab:76:fd:1b:
c0:06:cd:19:54:90:4e:c1:a5:31:96:ec:3d:46:1d:32:32:11:
57:e7:9f:74:82:b8:ac:95:11:f8:6a:d0:ef:3f:2e:22:28:28:
c1:fb:5e:fb:1a:0f:c7:a1:6d:6e:90:b1:bf:cf:03:15:5d:24:
3a:43:e5:70:e3:60:24:1c:87:9f:1f:bd:d4:d2:bd:da:36:ca:
9b:a3:6d:3a:b7:ca:f2:d5:0a:a1:47:30:0f:73:4e:4f:86:3f:
5c:b3:57:02:d3:39:00:a1:4b:7b:e7:ab:7d:fa:b4:c7:25:66:
4f:b1:6f:32:21:e1:4c:cc:0f:2b:ec:eb:2d:81:81:ef:1a:57:
06:73:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:58 2025 by rpki-client