Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier: VCjDPSXXP8R8sWH3ymUvt2RxJ/pby1M4qaUEgOk6mpA=
Subject key identifier: D6:F2:2E:4B:9A:6E:04:A8:6E:EC:5C:6A:5A:A1:C4:A5:6E:D1:DE:B0
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 0195E0EB749ABEFC1F975E937644B8073394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number: 11D1
Signing time: Sat 29 Mar 2025 08:01:21 +0000
Manifest this update: Sat 29 Mar 2025 08:01:21 +0000
Manifest next update: Sun 30 Mar 2025 08:01:21 +0000
Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: P4ek2WLUwzB7XroaDl5dnelJ6kWIboHo5XlynWIwcH8=)
2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:74:9a:be:fc:1f:97:5e:93:76:44:b8:07:33:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Mar 29 08:01:21 2025 GMT
Not After : Mar 30 08:01:21 2025 GMT
Subject: CN=d6f22e4b9a6e04a86eec5c6a5aa1c4a56ed1deb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:82:d7:c0:7a:5e:d6:48:b6:7c:41:8f:43:
9c:db:04:6c:2c:ac:52:06:93:a2:09:9d:01:4f:9b:
e6:4d:40:56:a1:d8:87:ee:7e:20:4e:bb:c4:5a:b0:
1a:ff:a6:ce:9e:fe:33:40:58:ec:06:53:bf:55:d0:
6d:97:40:17:40:d7:31:fc:d4:22:11:9a:92:fd:80:
48:75:5a:3c:9b:d7:e2:a3:d5:bd:17:31:b9:65:ce:
f6:1e:4a:ed:2c:9c:dc:4a:33:bf:c2:14:0a:80:4c:
af:5a:d3:ca:6c:72:a9:c3:6f:76:06:f4:53:15:f1:
99:81:4b:75:60:00:e5:12:d5:3c:2c:2d:20:cf:48:
b1:cd:da:18:2e:1d:12:47:d1:9d:da:97:85:e7:92:
24:48:9c:87:aa:43:00:7d:a7:c8:6a:6b:6b:e0:e9:
de:21:0a:28:c3:8d:45:55:44:7f:82:3b:47:a9:06:
8d:c3:d5:47:2f:f9:7b:8a:28:79:49:00:ef:92:66:
3f:79:8e:7d:3d:12:0d:0e:45:74:59:41:14:6e:bf:
3e:18:6d:87:93:64:9b:4a:f9:97:2c:3f:38:54:47:
69:4e:8f:43:fd:aa:20:74:70:8d:1c:66:ef:8e:6d:
4f:bf:26:f6:53:55:8f:1a:47:81:8b:9c:41:63:7c:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:2E:4B:9A:6E:04:A8:6E:EC:5C:6A:5A:A1:C4:A5:6E:D1:DE:B0
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:49:1a:8f:c5:f0:d7:07:70:50:58:3e:4d:59:64:41:1b:
3d:c9:a4:cb:6a:96:d6:0a:a8:e3:73:41:83:96:fd:2b:46:98:
1c:59:1d:4f:43:cd:1f:56:4b:b1:61:9e:ea:f7:26:f4:3e:db:
63:00:8d:6f:a2:ea:f4:92:1b:db:4e:20:82:7c:03:1f:af:1e:
3d:a5:a1:14:02:8e:a6:ed:93:41:7b:03:48:6a:36:f8:37:00:
d3:0c:9a:56:1a:4e:79:3f:0a:f7:35:39:fb:99:3c:f4:8d:cb:
3b:0e:0c:60:be:35:4f:89:25:0a:f8:98:d3:94:17:84:90:41:
33:ae:2c:33:4c:00:3d:1f:33:17:39:db:a9:fe:0f:db:47:ee:
cf:bc:7f:fb:25:36:b6:b0:ee:b0:3f:d0:d3:16:e5:00:25:ec:
fc:ac:50:69:f9:c7:6c:ad:61:6b:77:7b:fe:22:54:5f:d0:43:
1b:49:0e:8d:0f:42:92:ca:17:b8:3a:7a:53:bb:01:5e:4f:3d:
20:2c:d9:de:7d:5e:12:bd:ad:14:81:bb:5d:bc:eb:e3:d6:42:
cf:fa:11:01:19:ad:a6:0d:1a:38:0b:e1:26:21:ed:e6:38:f1:
e0:3c:f7:b3:7d:cd:e0:fb:d2:dd:69:13:20:18:cf:cb:99:e8:
d0:02:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:33 2025 by rpki-client