Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
File: ny4CE8HB23M97spK4mFsqv-lFXA.mft (raw, json)
Hash identifier: +v/yGm7Zy1PkZxpq/PzaATCEHf90nrBs8T+1vOHevDc=
Subject key identifier: 03:23:76:01:D8:D8:9A:33:7B:61:C6:0A:44:10:5B:6B:0C:A3:3E:2C
Authority key identifier: 9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
Certificate issuer: /CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Certificate serial: 0194BCA9810EE1792826F8FEBE06C9739A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
Manifest number: 10D8
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: ny4CE8HB23M97spK4mFsqv-lFXA.crl (hash: FqGKJt8sjkekR7tryM5eJSSfsEve5wigQF+MVh8+BBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:0e:e1:79:28:26:f8:fe:be:06:c9:73:9a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=03237601d8d89a337b61c60a44105b6b0ca33e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:88:28:95:ed:ae:5a:51:6e:22:89:dd:99:3d:
4f:57:b5:82:a8:5e:7d:ae:87:65:e2:4e:2b:58:b3:
7e:c5:a5:88:82:0d:55:a1:de:d0:58:7c:27:f0:15:
13:3f:ce:55:47:c6:75:bd:19:86:f7:5f:b5:b2:80:
49:88:79:e9:4f:f4:d8:92:39:6e:de:93:fd:4c:09:
2f:95:fc:47:54:24:18:3b:98:f6:a7:55:69:6b:65:
54:43:8c:a5:36:a9:60:0f:6f:95:cc:4e:45:7a:40:
69:fc:b1:87:bd:0f:95:8a:88:60:b5:57:20:e8:1c:
e1:2f:2a:30:e2:4d:00:24:00:9b:62:06:35:12:d7:
18:7c:8d:1d:7a:9b:6b:6d:47:12:57:eb:52:5b:51:
b7:7b:0c:9f:c1:a3:62:2d:99:9d:61:31:50:f9:54:
70:13:c9:4e:b0:13:ed:06:89:0a:8e:8c:45:50:c3:
4e:3e:54:71:f0:4c:0f:6c:fe:df:b3:1f:83:2b:ba:
00:83:b0:34:a2:33:bc:a8:d6:98:ad:d8:23:0f:a2:
ff:5b:5f:ad:3a:01:fa:5b:27:00:57:53:6f:2f:bd:
26:f3:18:5a:f6:1b:28:d6:43:78:1f:04:32:47:d9:
e1:33:64:1c:d6:95:f2:59:d7:22:1b:6e:2f:34:76:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:23:76:01:D8:D8:9A:33:7B:61:C6:0A:44:10:5B:6B:0C:A3:3E:2C
X509v3 Authority Key Identifier:
keyid:9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:02:00:3d:eb:2b:ff:45:2d:5e:52:61:48:06:da:f4:22:13:
07:a7:6f:c0:7b:34:85:48:76:2d:71:e4:a7:58:4f:bb:ad:ff:
8f:0f:1e:4f:b2:78:e2:ea:d0:8a:79:93:3e:94:a2:e0:84:fa:
96:81:d3:d6:f7:a5:dd:17:25:63:8e:2f:78:64:11:fd:85:8d:
4c:df:9f:b7:c5:a1:d2:bd:7c:24:2b:85:50:ed:45:23:5d:ba:
ee:5a:3e:c3:82:77:17:bf:37:8e:0f:7a:08:fe:84:87:e9:00:
f2:b3:db:2e:7b:4f:9f:70:1b:69:e9:70:80:79:1e:d6:0e:02:
65:d8:a4:ec:0a:6a:a5:35:d1:62:c7:7d:ba:4d:64:74:d2:50:
0a:b9:df:b3:f5:1e:65:f2:c6:b1:eb:28:26:5a:c6:a6:c5:2a:
d3:ad:88:d3:30:bb:7e:1d:d3:1d:87:b1:f4:32:3f:6a:fa:49:
58:eb:59:10:8f:8c:99:49:2f:c9:cb:d6:54:5a:d4:a4:96:d1:
af:1b:c1:ae:a8:81:92:06:cf:a5:d6:ff:a2:c5:1d:1a:56:da:
d7:47:45:c5:66:b5:45:9c:f5:81:22:dc:6d:6d:d2:97:21:d8:
e5:17:44:12:34:10:d8:e1:b1:b1:ba:5a:ef:60:00:aa:31:d5:
25:0d:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:50 2025 by rpki-client