Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
File: NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json)
Hash identifier: JJ1RkQz4Pv0NCoqJJwTCPibRgg0gz5DsntVm82YNtnI=
Subject key identifier: 66:A6:59:2F:61:49:BA:2C:EE:B1:F1:5A:7F:1C:DB:8E:4E:82:BC:B9
Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
Certificate issuer: /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Certificate serial: 01962F06F67226BD58BF1BF2E3DFA4CD249A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
Manifest number: 09F6
Signing time: Sun 13 Apr 2025 12:01:47 +0000
Manifest this update: Sun 13 Apr 2025 12:01:47 +0000
Manifest next update: Mon 14 Apr 2025 12:01:47 +0000
Files and hashes: 1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: RgQ9CSUtbjkrbL5dj1nua3bS3pNKgDh3zFfaan/kd7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:f6:72:26:bd:58:bf:1b:f2:e3:df:a4:cd:24:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Validity
Not Before: Apr 13 12:01:47 2025 GMT
Not After : Apr 14 12:01:47 2025 GMT
Subject: CN=66a6592f6149ba2ceeb1f15a7f1cdb8e4e82bcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:82:05:56:4f:99:13:79:2f:e8:7c:23:b1:
21:ca:08:99:fd:af:be:de:d6:7e:00:c7:32:fd:a9:
60:72:a3:1a:31:ca:82:1a:62:c2:02:dc:80:5d:56:
6e:ff:fc:1f:10:46:49:72:47:d8:a3:23:4a:df:99:
ab:b3:6e:8e:70:53:21:05:f3:d4:40:8c:1c:15:1d:
9d:f5:9c:42:12:b5:71:6d:0c:9c:01:a6:7b:fb:fc:
1c:72:73:0a:d1:0e:33:1d:9d:00:97:71:48:44:54:
6c:2b:d5:34:ca:08:af:f2:0a:5e:7f:5b:cf:c3:eb:
ca:5a:c9:16:b9:05:86:57:68:a3:f3:12:da:e6:f8:
ba:d3:d7:1c:62:df:91:4e:b4:36:78:d7:fa:93:15:
8e:7f:c0:34:18:ed:0f:27:b4:79:33:2b:68:95:1f:
bc:4b:8e:2c:b6:5a:9c:15:4a:6e:f2:68:14:51:ff:
52:10:f8:6c:bc:5d:7b:75:64:fb:92:1f:2a:2c:ad:
bf:c9:2a:bf:42:13:9f:3f:df:91:63:55:20:e7:60:
ac:ea:13:84:4f:0a:bb:bf:08:79:e6:e1:e8:7a:a7:
a6:69:31:44:44:df:56:9e:c4:41:41:18:58:64:19:
a3:d1:a1:1b:d2:bb:d1:7e:aa:a5:40:41:f9:bf:e6:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A6:59:2F:61:49:BA:2C:EE:B1:F1:5A:7F:1C:DB:8E:4E:82:BC:B9
X509v3 Authority Key Identifier:
keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6b:3c:5d:cb:17:17:7e:e2:da:64:78:cb:71:e1:6f:77:fb:
f5:32:6a:82:bb:0a:54:b0:d0:cc:1c:95:85:ff:cf:e7:61:90:
db:b6:0b:0b:c7:a0:5b:23:d5:b7:c3:cf:69:6c:cc:40:5a:c2:
be:8a:ee:67:a0:2e:7d:4f:33:53:36:8d:d7:7a:50:7a:0d:84:
36:02:93:cc:a3:5d:fb:e4:c8:86:eb:da:19:08:8b:07:43:7e:
80:7a:c5:e6:f0:22:e0:9f:c2:60:a9:c9:3e:42:d4:02:8c:45:
cf:6a:ca:ab:db:2a:ea:85:0f:05:56:a8:a9:4c:32:93:94:98:
39:69:d6:70:22:94:80:cc:10:fe:ad:4b:54:82:6c:cd:fd:3d:
ef:e7:e9:8a:fe:e9:a3:b9:f0:27:7f:98:18:24:b0:91:de:c7:
96:90:24:66:e5:b2:a6:82:56:e6:45:e9:ee:02:7c:a8:de:71:
1f:48:7b:9e:d4:87:5b:74:ae:57:e0:db:44:92:7a:44:e8:95:
17:5b:39:49:f3:4a:67:48:8a:76:24:20:48:94:75:14:8d:0e:
b1:dc:08:e2:c3:24:2f:89:7b:3f:da:56:e3:de:29:cf:41:46:
3d:23:ff:c4:57:d6:fc:b7:e3:2c:67:f6:c3:2c:11:3d:3d:d1:
4a:8c:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net