Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
File: nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft (raw, json)
Hash identifier: ev4s7a5I18crGUGv8zSFVI1ClCOq30YPqTmgXdSW30U=
Subject key identifier: 45:DC:1B:5C:58:23:EE:FF:54:0D:AB:C9:19:53:87:13:B7:6A:89:96
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 01962F0690295AF167CC9C2BE1E8559BEB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 12:01:21 +0000
Manifest this update: Sun 13 Apr 2025 12:01:21 +0000
Manifest next update: Mon 14 Apr 2025 12:01:21 +0000
Files and hashes: 1: CPqSq0ytAxDio98lkjeb_dYwRZ4.roa (hash: DBQ2P8ThG/7CNm8RF8WiO7psAqOGJ9hYf3OIiBNBEtw=)
2: nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl (hash: 57rOQpbZG419yoYn15sAXvLsBZnbN8xz9wg3EmzDVxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:90:29:5a:f1:67:cc:9c:2b:e1:e8:55:9b:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Apr 13 12:01:21 2025 GMT
Not After : Apr 14 12:01:21 2025 GMT
Subject: CN=45dc1b5c5823eeff540dabc919538713b76a8996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:20:18:67:b9:33:a4:01:d6:99:df:b8:36:
55:4d:9c:1d:b2:fa:1b:3e:d3:6d:06:0b:c2:90:92:
6e:f9:e8:86:d8:4b:8c:6c:82:4a:be:7d:2a:6e:24:
d0:e9:18:5c:95:24:cc:f5:3a:21:f0:74:4f:17:18:
d2:fd:11:69:99:c5:75:69:85:cf:cd:f2:0f:83:83:
ff:d2:8c:37:f8:e2:fd:99:9c:ef:38:0e:7b:71:bc:
e3:35:12:ca:48:0e:da:d0:8e:23:b3:34:35:23:99:
93:1f:da:eb:d7:1b:3d:23:c3:b0:1e:00:f9:3d:70:
0e:4a:c1:2a:64:f1:d4:11:7a:f6:cf:ea:41:ea:72:
44:af:8b:83:f0:9b:5c:4b:fc:32:5b:a9:b8:ca:00:
2a:95:1f:84:6d:bc:bf:78:52:3f:c7:5b:9c:4b:45:
2d:8e:a2:b1:4a:5e:43:49:c4:e0:bd:b7:6b:f2:c8:
c1:11:d6:94:e5:22:9f:cb:02:a8:65:f3:72:de:7d:
85:9c:ca:00:0b:76:85:9f:4d:36:bb:b4:f1:71:72:
92:1a:29:22:de:32:21:85:4a:c5:94:65:87:66:e1:
bf:c1:55:48:2a:1d:76:06:4a:59:75:02:6a:11:eb:
8e:0c:7d:85:b0:32:31:71:38:0d:15:b8:34:2d:8e:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:1B:5C:58:23:EE:FF:54:0D:AB:C9:19:53:87:13:B7:6A:89:96
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3d:d6:8e:ca:6b:d6:5d:cc:33:cf:da:b5:dc:2e:44:d2:4f:
8c:ba:ad:68:e4:d9:11:7d:a1:d0:6a:7c:23:2d:61:84:ed:2a:
95:cd:ae:80:bf:84:17:55:74:8f:b4:58:cd:ee:2c:6e:e0:14:
f2:df:ae:a7:74:8b:3c:27:5f:57:99:28:b5:0b:98:38:c4:1c:
04:fd:a8:72:d4:6f:67:4a:e5:82:5c:60:7e:3f:0a:30:1b:46:
54:b2:7d:a6:9f:63:3a:73:a6:cb:da:b7:9f:8c:76:7d:fe:e5:
97:48:25:ef:f2:5c:78:7e:b3:3d:10:c8:f4:94:0f:bb:64:21:
a6:bf:f2:07:1c:22:5e:ce:99:35:a2:4b:09:3d:e9:1c:90:2d:
cf:a8:81:7a:ef:67:20:09:5d:b4:db:79:32:66:20:1e:a6:d4:
5f:c5:67:14:6f:c2:41:5a:88:5c:e8:f4:47:f3:c7:61:f8:be:
03:7c:1a:cc:d5:24:94:73:4e:74:75:45:f2:8c:24:76:52:1e:
a0:62:83:93:a7:dd:16:3a:91:c7:94:05:19:a8:ab:4d:1f:b2:
89:f6:a2:af:d7:20:8f:05:03:ad:cd:ac:0a:6f:48:57:04:a5:
6e:08:d7:59:3e:56:ce:d6:ab:be:82:7b:4a:03:b3:39:8e:2b:
e2:eb:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:46 2025 by rpki-client on console.sobornost.net