Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: VTkEjuQ/TUlboYOih2rU0jPzrZAU8HAMt0hEZdmWQpo=
Subject key identifier: AD:49:D5:14:11:B8:E7:4E:3E:E2:9E:35:F1:CC:28:3B:06:EF:69:04
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 0195E1598EC1E65CD054003C8E13327561FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0BA3
Signing time: Sat 29 Mar 2025 10:01:37 +0000
Manifest this update: Sat 29 Mar 2025 10:01:37 +0000
Manifest next update: Sun 30 Mar 2025 10:01:37 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: KjheepRqj3+yAUnGqVhFg2cMU9k/lEUjkR9dmeWNAaw=)
2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:8e:c1:e6:5c:d0:54:00:3c:8e:13:32:75:61:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Mar 29 10:01:37 2025 GMT
Not After : Mar 30 10:01:37 2025 GMT
Subject: CN=ad49d51411b8e74e3ee29e35f1cc283b06ef6904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:a0:d4:10:fb:f3:b7:b5:ea:03:0e:58:12:
62:59:52:fe:72:bb:35:31:35:ee:7c:b4:50:80:7a:
c0:f7:97:ba:cc:b6:8d:f4:09:b8:db:0c:7f:8f:f3:
9b:38:80:93:91:bc:08:9d:c5:f6:f8:b2:2a:d1:56:
39:7b:e9:c9:33:37:2d:8e:3e:76:49:29:65:f8:9c:
cc:cf:4c:e2:17:15:ea:c3:5d:13:22:7d:a8:65:e0:
5c:c5:5a:8b:88:ba:c6:9a:64:27:a3:62:36:71:20:
90:68:e3:ac:b4:e0:7f:b2:ec:7b:52:8f:35:03:ec:
4f:f5:20:18:b6:69:95:aa:02:71:69:09:5a:5d:3c:
7e:61:54:11:14:4f:8c:05:f2:75:a5:56:e4:c4:2e:
c3:0f:3f:bc:35:4a:46:41:61:4d:7c:f9:77:75:86:
e1:af:ac:e2:87:a6:c4:e3:5d:3f:8f:67:d8:6d:c6:
46:2e:d5:33:4d:87:30:2c:8a:21:a6:11:f0:c4:f9:
51:c3:53:18:3b:1f:b5:45:6a:4c:28:62:c0:b8:e8:
d2:07:55:1e:8d:14:27:53:32:da:ed:c1:4e:f2:33:
6d:45:b3:06:08:43:48:ec:71:f2:a9:0f:1f:64:08:
dc:46:e2:52:55:e6:39:f0:97:0c:8d:ea:23:8c:20:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:D5:14:11:B8:E7:4E:3E:E2:9E:35:F1:CC:28:3B:06:EF:69:04
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:38:25:72:05:49:89:71:00:78:04:f9:43:9c:f9:c8:70:65:
d4:07:c2:55:65:0f:65:14:ab:35:cc:a5:a1:29:32:a0:ba:fd:
5a:03:de:f2:8b:bf:f1:8d:08:7c:01:ff:b0:c6:c3:f3:a6:6f:
0b:92:7b:02:21:3f:8a:4f:00:e3:0a:fc:80:f8:68:3e:08:3b:
ff:48:cd:d9:68:c2:b5:b9:d1:57:fe:69:a0:fc:ec:d4:3f:f6:
20:30:3f:d5:99:ca:cc:b2:41:94:84:f5:fc:4c:30:e8:b8:01:
2c:73:80:ed:21:6a:34:3e:04:ab:a4:5c:26:fc:20:a9:d6:c4:
4c:c4:38:95:3c:0c:cf:73:8b:5f:9f:d8:58:8d:ce:b1:81:da:
09:fe:28:c7:c6:69:88:ea:1f:81:98:71:34:a8:a4:50:6c:93:
d5:d5:aa:5b:4d:39:02:38:91:13:38:11:ec:cd:d8:54:2f:7c:
1c:7b:31:1d:dd:08:61:f3:7d:8a:ad:a4:98:46:98:41:74:5b:
5f:20:cf:11:9f:80:36:e5:0f:e9:9c:ad:0a:d2:54:b2:10:17:
93:c9:b5:e8:af:38:57:32:a3:cd:0f:8a:1a:b2:7d:4c:cd:6c:
aa:2b:16:e3:41:ba:ce:43:3c:75:72:e1:25:38:de:9d:46:15:
7d:5d:4a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:17 2025 by rpki-client