Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
File: NpABg88IpuW8gHhGKUpGBi4ZDjs.mft (raw, json)
Hash identifier: DbY7hyXdFK5HlMXhGsjb9sX90+u12yTmMEwGP/v3hS0=
Subject key identifier: 6E:08:B3:DC:E3:CC:4C:67:1B:EC:13:20:0E:D4:30:E2:7C:EF:DB:86
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 01948F99DCF6E0E46739AC0A88EA2970A783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
Manifest number: 0C97
Signing time: Wed 22 Jan 2025 20:00:12 +0000
Manifest this update: Wed 22 Jan 2025 20:00:12 +0000
Manifest next update: Thu 23 Jan 2025 20:00:12 +0000
Files and hashes: 1: NpABg88IpuW8gHhGKUpGBi4ZDjs.crl (hash: bnE7eBTq+LNufWjjHhFTzcIXXHF9dUbBiHVnjJmpnWI=)
2: fmzabX1wC9LzCnDTVmQlla1G-ik.roa (hash: 5edD7nsA4go10ucsw6zlFnHtoaEROs34laMuf3Q628U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:99:dc:f6:e0:e4:67:39:ac:0a:88:ea:29:70:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 22 20:00:12 2025 GMT
Not After : Jan 23 20:00:12 2025 GMT
Subject: CN=6e08b3dce3cc4c671bec13200ed430e27cefdb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:8a:14:3d:23:52:5b:62:d1:b2:ad:16:59:
1c:6b:91:ac:32:fb:c9:63:8a:19:e3:56:13:4a:6a:
fd:c0:28:7c:69:c5:70:cf:bc:72:e9:97:21:4e:c5:
69:eb:8d:6e:57:5b:4a:4f:48:99:e4:56:32:eb:f9:
50:5a:7b:7e:73:e8:f2:c2:5c:1d:04:3b:3b:85:68:
1a:8a:70:c0:08:a4:f8:cc:b2:f5:7f:76:1c:46:4a:
a0:af:b0:bb:d7:76:cb:92:1d:6d:9f:fa:55:1c:98:
1b:72:e1:e9:3c:8e:53:8d:14:da:a6:68:73:a8:56:
c2:81:3b:75:30:9e:55:f6:ab:47:6a:50:27:f5:99:
fe:2c:99:42:6b:7e:84:e9:1e:38:13:64:e4:d3:51:
60:04:36:51:6c:28:a7:38:2b:94:ea:36:20:d0:17:
d9:5f:f4:f2:bb:20:33:b3:b8:5b:4e:c8:34:15:37:
23:e9:41:ee:7f:d9:5c:79:eb:35:82:fe:42:f3:e1:
9e:af:7d:d0:85:1f:31:90:3c:1c:fb:bb:cf:08:77:
0b:91:e5:52:9a:32:bb:75:26:39:0f:47:b5:ea:4c:
c2:f5:1d:fc:6c:9c:52:55:40:d4:73:c1:e2:a7:90:
c9:46:4b:79:46:a6:c9:7b:8b:04:95:85:01:f3:9e:
78:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:08:B3:DC:E3:CC:4C:67:1B:EC:13:20:0E:D4:30:E2:7C:EF:DB:86
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ac:2d:0e:22:7e:88:46:48:2b:85:79:42:c1:38:73:26:2a:
94:21:04:e9:5a:42:51:32:c8:02:e0:23:f3:e1:ce:62:d1:c5:
7f:92:20:03:39:d5:81:36:ba:ee:01:62:6f:d3:ac:62:77:92:
20:85:8e:5b:48:ea:9f:74:ee:ca:dc:c5:d9:92:20:bd:5a:29:
c8:8f:6e:a2:53:ce:f8:9c:3d:33:1f:15:ac:6b:4e:22:9b:49:
9d:fc:7d:9d:05:29:d4:e4:5f:6a:d7:08:4a:2a:cc:a9:99:aa:
df:5f:b5:e3:0b:51:52:98:36:77:18:a1:e2:ff:a6:09:b1:65:
5a:e4:9c:e8:36:50:6a:9e:53:29:fe:1d:e4:e8:e6:8b:f4:b4:
32:c3:87:96:66:ef:94:15:30:de:4a:e9:5b:97:86:f2:b6:6e:
78:22:4f:62:3f:8f:ce:da:bd:de:a1:93:da:b0:36:bd:a9:b0:
13:41:50:0f:64:d0:61:eb:cc:db:6e:eb:da:be:0f:10:53:b2:
24:9a:7e:ef:88:1a:73:37:1c:4d:76:ed:b3:89:f0:05:61:e3:
1d:30:60:88:de:17:09:06:2b:55:6d:94:78:ec:9a:19:ef:41:
b5:d7:94:d2:76:c6:d3:ff:2a:cf:38:26:1a:80:f9:95:61:74:
58:5b:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:18 2025 by rpki-client on console.sobornost.net