Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft
File: Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft (raw, json)
Hash identifier: 2cCJeKTN7olwUl6n3dd2tbiKZObiFJwMgo9xp+Q7s38=
Subject key identifier: 44:11:19:63:2A:77:14:13:E6:D1:F7:C8:43:DE:F3:07:FE:1A:AE:F9
Authority key identifier: 35:F8:BC:08:4D:06:98:75:7C:82:FD:46:1E:99:B9:7C:14:2B:FB:22
Certificate issuer: /CN=35f8bc084d0698757c82fd461e99b97c142bfb22
Certificate serial: 018506748C3E4776A3B874128DC9A4AD2EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft
Manifest number: 096C
Signing time: Mon 12 Dec 2022 13:09:39 +0000
Manifest this update: Mon 12 Dec 2022 13:09:39 +0000
Manifest next update: Tue 13 Dec 2022 13:09:39 +0000
Files and hashes: 1: 7fbtb3nRfHCTT-befXJ4bImKv_E.roa (hash: Jh/NWQZQEiI4H2mfKnbWC3EoRx3bjU28L54d9OjDmRU=)
2: Nfi8CE0GmHV8gv1GHpm5fBQr-yI.crl (hash: kp4iUomX/lwKy2vGPgsNY0fIFYcvmocFIePZMEixu9E=)
3: OFzpJOHnD45PnjeIpRVrCw4sTz0.roa (hash: 8mp3Sw5MhTBOjLn7aNUc6XKGVPsSpxzh/11kndu3CQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:74:8c:3e:47:76:a3:b8:74:12:8d:c9:a4:ad:2e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f8bc084d0698757c82fd461e99b97c142bfb22
Validity
Not Before: Dec 12 13:09:39 2022 GMT
Not After : Dec 13 13:09:39 2022 GMT
Subject: CN=441119632a771413e6d1f7c843def307fe1aaef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:c1:4c:66:1f:a6:b6:9a:5d:6b:28:77:12:
4d:59:68:64:a8:d8:16:35:7c:af:cc:0b:77:64:93:
9c:c7:68:3b:0a:c0:16:1f:0f:1f:3c:27:56:b6:e9:
12:2c:2f:75:c9:55:68:7d:ed:b9:55:57:59:15:92:
ba:bc:dc:3d:6b:9b:50:57:e6:c3:eb:e0:09:67:b9:
95:80:dd:70:37:83:1d:8d:f3:b1:f9:60:0b:81:ad:
be:cb:d1:ec:5d:e7:36:7d:d9:a0:76:82:39:18:d2:
3c:38:e9:53:d9:c6:0d:dc:b9:fa:14:8b:cb:3e:6b:
98:e4:fa:0b:17:90:52:5c:e1:89:cc:5c:b6:91:9b:
26:8e:17:48:eb:be:d1:04:26:7e:95:93:af:06:55:
fe:5d:9b:9a:32:21:55:94:cc:34:66:27:e1:ae:25:
e6:38:7a:86:9c:fc:7b:26:c7:dd:27:73:b9:22:e5:
3d:c7:5c:64:fd:b7:df:d5:7b:b2:df:d2:f8:c1:c5:
d6:20:43:90:91:66:6e:27:5d:0f:03:5b:74:5b:43:
f4:a1:c2:28:39:1f:74:22:df:d7:4f:01:0e:9e:07:
44:e1:bb:b9:b5:ee:98:93:f1:94:4f:c4:55:3b:87:
01:93:09:ab:73:04:1b:7a:de:b6:f6:66:2c:c9:90:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:11:19:63:2A:77:14:13:E6:D1:F7:C8:43:DE:F3:07:FE:1A:AE:F9
X509v3 Authority Key Identifier:
keyid:35:F8:BC:08:4D:06:98:75:7C:82:FD:46:1E:99:B9:7C:14:2B:FB:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:83:83:5c:2c:03:aa:9d:f9:d5:39:05:f3:00:2f:c4:11:6b:
85:9d:44:fc:8e:9e:cd:d4:9c:b0:80:39:14:08:91:dd:3a:08:
42:8b:30:3a:c9:be:e8:c2:5a:4d:e8:4f:05:d8:2c:02:8a:09:
fb:01:3b:81:45:32:b4:8b:a9:a6:35:20:d5:72:61:5f:11:f4:
93:d3:95:2c:d9:ee:6a:ea:1e:c8:88:ca:f2:aa:17:15:43:2e:
e2:ce:82:55:e3:11:94:fd:01:dc:2a:b6:bb:45:71:43:c8:15:
4b:be:37:42:e3:19:0d:ca:87:50:c2:34:97:d0:e1:c2:32:3a:
8c:d5:39:46:0b:c1:a9:cc:b5:95:48:f6:29:0e:3b:61:f0:88:
11:5b:63:d5:84:10:e0:5a:ea:ac:e0:40:e4:65:d4:de:e9:4d:
08:ce:42:ad:26:26:85:b2:ff:ff:b9:51:67:d8:9d:5c:f9:c8:
82:4a:0b:f4:27:c6:e4:2a:22:53:9e:90:e2:87:fe:ec:e7:e6:
1b:bb:04:34:f3:f3:63:d4:77:39:49:6b:36:ed:04:b7:0a:b3:
0a:e5:aa:7e:52:a2:e4:8c:8a:52:10:1f:a7:66:b7:a8:f5:6b:
bd:3c:46:6e:dc:9c:b9:c5:bc:72:74:05:ff:d7:15:3a:20:dd:
8c:a6:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:25 2025 by rpki-client