Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.mft
File: nL21tzqDMNIl80EMgbY40oPEDR8.mft (raw, json)
Hash identifier: bYqwxH8R325C5ruZtj813H5Gjnjm8BIq9b7sut2aCX8=
Subject key identifier: 8F:9A:E0:58:1D:0D:96:1C:92:09:40:1C:5B:43:C0:F7:A1:15:6D:4B
Authority key identifier: 9C:BD:B5:B7:3A:83:30:D2:25:F3:41:0C:81:B6:38:D2:83:C4:0D:1F
Certificate issuer: /CN=9cbdb5b73a8330d225f3410c81b638d283c40d1f
Certificate serial: 019251D38E7CC8A8CDF9616AB510FC8BCC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL21tzqDMNIl80EMgbY40oPEDR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.mft
Manifest number: 0EF7
Signing time: Thu 03 Oct 2024 10:01:11 +0000
Manifest this update: Thu 03 Oct 2024 10:01:11 +0000
Manifest next update: Fri 04 Oct 2024 10:01:11 +0000
Files and hashes: 1: Na8sW_DHiQT24Q3-aonz8hz8WqI.roa (hash: eMw6Sd57TTrnc0QtEgRwXg+wTilafrlCiLtMotv7cEA=)
2: nL21tzqDMNIl80EMgbY40oPEDR8.crl (hash: pp2JnepCwhCSoeMOJPFZYpxfq6wpXd1+qAEysbTbRec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:d3:8e:7c:c8:a8:cd:f9:61:6a:b5:10:fc:8b:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbdb5b73a8330d225f3410c81b638d283c40d1f
Validity
Not Before: Oct 3 10:01:11 2024 GMT
Not After : Oct 4 10:01:11 2024 GMT
Subject: CN=8f9ae0581d0d961c9209401c5b43c0f7a1156d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:2e:e9:d1:bc:ca:7f:0f:71:cc:ed:46:3e:
31:51:bd:ac:f4:d1:a9:9e:0e:39:15:b5:31:4f:4d:
1b:4b:c5:9f:85:76:09:77:2a:cf:f6:d9:5c:df:6f:
5f:0f:6c:6d:f3:68:e1:46:d4:b7:1d:3e:2e:dd:a4:
0b:e5:16:5c:7d:83:cb:2a:c9:88:ff:4d:91:fc:df:
c5:18:3d:86:7b:3d:a5:0f:85:bf:ba:84:67:23:13:
e1:99:b5:2d:ca:4d:8f:d3:ed:c4:9b:3b:e3:8c:63:
83:ea:54:b5:5e:6b:06:8c:66:3d:3b:6f:3b:db:c4:
b5:e6:99:20:4e:83:42:f3:b9:e8:8f:d5:27:d3:60:
0b:2d:07:54:36:90:cc:dd:f3:2e:1a:80:87:1d:b4:
a5:40:20:61:3b:09:bc:ef:7e:f0:32:99:e3:7f:e9:
ed:c2:e6:11:c1:08:b3:cf:55:d2:20:7c:94:d6:8f:
20:f3:9b:af:48:49:cd:79:17:64:26:9d:62:5a:59:
0f:ed:40:af:0a:1d:77:62:6c:af:d3:2b:0f:b9:17:
32:a0:fd:5c:07:4e:97:91:05:48:22:13:e9:49:0a:
ac:90:db:00:56:94:ec:d9:f3:52:a3:14:5e:d3:53:
50:20:5d:de:9d:36:e2:7c:bb:05:fc:55:41:8a:c6:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:E0:58:1D:0D:96:1C:92:09:40:1C:5B:43:C0:F7:A1:15:6D:4B
X509v3 Authority Key Identifier:
keyid:9C:BD:B5:B7:3A:83:30:D2:25:F3:41:0C:81:B6:38:D2:83:C4:0D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL21tzqDMNIl80EMgbY40oPEDR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:fc:d1:f8:70:e9:bf:ef:a1:2a:ed:4a:d2:8e:bb:49:61:
5d:b9:b3:2b:54:d3:7e:54:9d:c8:57:0a:ff:c6:fc:62:ca:15:
bd:04:7f:18:fd:59:22:d8:27:89:6e:83:01:b0:c2:7d:9f:23:
13:22:d0:1c:b4:a0:32:33:d2:ff:45:96:28:20:61:d4:8e:1b:
6f:cb:29:bf:8d:cc:2e:a9:3b:4f:4d:75:74:f7:64:5a:1f:62:
4b:2a:c9:d7:98:24:a3:ef:47:e9:b8:12:3f:8a:e2:66:b5:a4:
45:85:01:d5:dc:17:8a:19:c7:f2:6f:ef:31:55:fa:e4:1a:6a:
47:19:6b:04:93:b6:6b:df:16:9e:1b:bf:92:de:16:1d:12:a2:
3b:15:75:c1:83:7a:1e:e7:45:41:43:03:3f:a2:b5:a8:03:ed:
db:53:b7:d7:a3:35:5e:74:1e:bb:ad:74:c9:48:cd:40:a7:27:
58:a9:28:09:5a:12:be:e5:02:de:02:91:92:1b:f6:3f:df:fb:
d3:54:37:65:d9:30:b6:70:bb:35:07:e6:01:a4:5e:e8:31:17:
9a:99:08:a1:50:ef:f0:bd:2c:fe:bb:a6:52:13:d3:0e:e1:ab:
c4:33:ff:ed:5e:ae:3a:a3:5c:71:91:fb:cf:5d:b0:76:5a:6d:
b9:4c:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:47 2025 by rpki-client