Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: +8xNMZe2m2jiet0FDL0s/DgupMGxo6uz92toZEtaIsM=
Subject key identifier: AE:F4:F3:2C:FB:28:A2:8F:5B:A6:5E:BF:C1:B1:8D:72:BA:12:E6:01
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 0194BCA99484B9AC31D29620D9C369831574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0BC7
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: N2dmmkzC3/m9Cpj9Vy30zL/wI8FVMjQnPupPcrb/Yxo=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:94:84:b9:ac:31:d2:96:20:d9:c3:69:83:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=aef4f32cfb28a28f5ba65ebfc1b18d72ba12e601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:30:cd:83:39:58:e5:fc:ef:96:ec:d5:dd:
8a:1e:04:03:38:b9:a9:75:a7:f2:7e:d0:c8:60:ed:
8c:20:e5:63:21:b5:37:67:b9:e3:f1:3e:b8:c6:c5:
0c:12:ce:92:a8:67:30:97:57:f6:f9:b3:8a:d6:06:
cf:4c:a8:48:91:cc:b6:7b:c9:f9:e5:4a:55:e6:80:
b2:ec:2d:9f:ac:9f:fd:57:25:2b:a0:21:f8:06:91:
19:f7:da:22:9c:c2:ea:13:d6:bf:b7:38:9d:24:11:
72:26:d2:ed:4b:1b:91:ec:4d:37:eb:b3:6d:bc:63:
9c:3a:35:7c:88:e9:fe:df:59:00:38:4b:57:d4:e2:
94:e2:e1:2d:ad:fe:9f:1f:7c:14:0b:1d:e2:09:5c:
97:b0:3f:26:2f:16:c6:64:e1:77:ec:d8:a8:5e:e6:
7b:ba:2a:1c:f1:4e:18:6c:0d:fc:a2:0f:27:0d:a6:
88:0d:9b:6e:4b:8f:57:c1:59:91:3e:b6:65:d7:cd:
91:2b:8c:cd:ed:65:f5:76:00:30:6a:54:62:ae:0c:
61:a9:7a:71:1c:40:92:36:f7:88:8b:30:ea:f4:bf:
5f:e6:d5:03:88:91:e2:f5:27:6a:38:99:62:5d:34:
62:7f:e4:87:f1:2f:d8:81:4a:84:f8:ea:bc:31:76:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:F3:2C:FB:28:A2:8F:5B:A6:5E:BF:C1:B1:8D:72:BA:12:E6:01
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1e:20:4e:f2:ac:a1:1c:75:9b:50:90:33:af:6d:a9:5b:cc:
f3:c1:7a:29:09:37:73:f2:f2:c9:bb:f9:f0:84:d6:fe:d6:26:
4c:13:70:7d:eb:f7:77:51:d2:8e:dc:18:74:29:e0:12:e0:1c:
49:b2:8d:64:46:ec:d9:ad:db:86:d5:6d:af:e5:b0:fa:1e:56:
ad:af:a3:ec:3c:5a:5d:09:fb:94:f9:b3:f6:f5:eb:cb:bd:20:
11:07:75:c8:47:27:22:f1:d4:55:2c:5b:f3:6a:c1:07:90:60:
ae:21:79:ff:95:cd:ab:76:35:fa:2f:f0:52:7d:38:13:70:5b:
62:4c:e6:b9:bb:a2:a0:90:eb:0b:68:56:33:04:ad:0b:e2:4c:
2b:b4:64:48:3f:d0:c8:3c:5b:65:51:f5:c4:48:60:62:8c:88:
66:37:4c:54:e1:33:be:7f:8f:63:24:bc:2b:46:7f:aa:0b:1c:
c3:cf:fd:12:40:9b:e3:c5:93:e9:3b:6c:f1:a5:4f:c0:11:2d:
96:3e:bb:a3:1c:9b:da:ba:16:66:7c:86:26:92:62:65:2b:5e:
78:8a:2a:29:a4:f8:e4:dc:ee:a4:50:6f:45:80:22:fb:6c:53:
c4:2e:31:7e:d9:54:4a:b1:00:dd:ce:07:b5:ee:5f:4a:99:48:
15:09:59:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:02 2025 by rpki-client