Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: FNmwaCN8ISA1LhGGDe0bUSh0w7IWdmVUTQ0OgQuy/xc=
Subject key identifier: 29:3D:78:00:DD:BF:27:A8:AB:2C:54:C1:22:86:C1:2F:8F:4B:E6:C6
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 01962FAB3FB6FB2211431D7823BF63898ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0AFC
Signing time: Sun 13 Apr 2025 15:01:14 +0000
Manifest this update: Sun 13 Apr 2025 15:01:14 +0000
Manifest next update: Mon 14 Apr 2025 15:01:14 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: VkNRBDLYwxKsXR5DWBknqxLmbipeYXm/9W693A30Fts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:3f:b6:fb:22:11:43:1d:78:23:bf:63:89:8a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Apr 13 15:01:14 2025 GMT
Not After : Apr 14 15:01:14 2025 GMT
Subject: CN=293d7800ddbf27a8ab2c54c12286c12f8f4be6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:30:e3:4c:2c:55:ef:22:72:16:6b:8f:1b:
09:18:b5:19:37:d9:0a:4f:11:b0:ab:c7:43:7a:de:
d3:88:e0:f1:bd:4f:59:0e:83:94:30:fa:34:16:9f:
59:e9:52:36:f6:36:53:45:b2:c8:0e:d9:fb:21:91:
a9:d8:28:08:cf:49:bd:35:19:d1:cc:df:58:65:3c:
6b:d0:85:c3:35:27:ba:53:fc:ec:1b:0e:41:47:cd:
0e:4a:a9:ef:72:3f:ec:6c:9e:44:13:e9:d2:01:d8:
aa:b2:21:5e:1d:4d:e5:cc:27:db:28:01:14:48:b7:
1e:13:a3:c3:6b:43:9b:f6:d7:6e:97:85:94:c7:24:
ca:f3:d9:4b:3e:fa:47:2d:b5:cb:58:5f:ff:6a:e8:
aa:21:cc:b6:c6:e3:4e:d2:ce:40:49:06:b2:4f:1b:
fb:0a:9f:55:c1:67:8f:77:ca:dc:fe:43:30:8f:6f:
ae:bd:b1:af:1b:36:45:8e:3c:3c:88:dd:69:28:5c:
03:b0:56:af:03:42:57:3d:47:3c:6a:cc:dc:eb:45:
83:d4:94:51:62:9b:6e:bf:32:da:d3:0c:5d:23:af:
9f:e4:35:76:9b:77:22:ce:3a:fa:6b:e1:eb:0b:4c:
96:6b:9d:bf:21:02:09:25:3d:8b:3b:eb:be:8e:5f:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3D:78:00:DD:BF:27:A8:AB:2C:54:C1:22:86:C1:2F:8F:4B:E6:C6
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:a0:3a:ed:56:17:0d:d3:6d:a3:5e:30:61:ce:e7:c3:78:
3a:60:59:1b:aa:b4:66:9e:91:b7:88:66:45:28:31:10:09:f5:
f1:aa:a3:d0:0c:00:6d:67:5e:1b:10:0b:2f:13:c1:b1:bc:34:
6f:a3:52:c4:69:b6:7d:fb:5d:1d:f5:69:06:f6:1a:a2:5e:35:
54:eb:e5:d7:a5:78:29:ec:fc:6b:67:8c:f8:90:e1:48:4b:ea:
ec:d2:e8:6e:67:22:1a:de:ea:88:b1:0c:5c:2d:d3:6c:db:9b:
22:31:bc:bd:f6:cc:15:d4:d5:34:d2:77:3a:d6:5c:8b:1f:e2:
b1:a4:8b:7c:41:0d:22:8c:b5:0e:18:da:48:08:1a:2b:18:b7:
a6:6e:1f:56:cc:c1:a7:fb:d2:68:cb:26:83:9e:a5:3b:43:24:
7b:f0:f5:ad:54:c4:e4:a9:a0:73:3e:1a:80:77:9b:4c:56:06:
71:ea:27:1b:dd:7b:8b:7d:1a:5a:46:19:a4:21:21:0d:ba:00:
41:2d:2c:85:ed:56:99:74:4b:25:88:01:4e:fa:7a:96:f5:1c:
d5:51:98:7b:03:ec:55:78:de:cc:c3:6f:75:bd:67:e0:8c:a9:
13:1e:40:d0:90:9f:ec:30:0b:88:a7:72:de:4c:26:0b:a0:b5:
31:a1:b3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net