Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: CjGtHS4LgkFD1AKKlg8wHSNcSpt4VTRMQOrzZMLlXBg=
Subject key identifier: 50:46:20:CA:B9:71:8A:C2:20:65:A7:AC:CB:F7:AD:9F:F7:C8:84:7A
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 0194BD4EB5C2C927575951897466FF184555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: iOilGMR1qs7Sb4oPx+KeKsQ0rJhCcGM6ovIiKOtEGko=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b5:c2:c9:27:57:59:51:89:74:66:ff:18:45:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=504620cab9718ac22065a7accbf7ad9ff7c8847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:97:13:91:2a:54:3f:89:94:e4:0d:eb:9e:5f:
d4:9f:ea:c0:ce:b1:f2:d3:87:68:d1:e5:aa:26:fc:
fd:2c:a7:44:28:bb:f1:59:36:94:0e:38:ac:e7:37:
4c:67:8e:d2:15:16:5b:98:70:02:47:91:30:4b:c3:
5c:a8:17:05:42:31:d2:94:35:15:fc:5f:50:97:39:
82:07:91:68:2f:be:d1:c7:af:c5:e5:53:80:bd:c7:
0e:9f:29:a0:c7:20:ad:84:fc:e3:c7:b8:95:62:76:
eb:f5:68:a3:b6:31:ae:e6:6a:6e:81:d5:24:c8:17:
6f:ca:dc:e8:4f:a3:0c:c7:70:e9:54:e0:65:1b:89:
90:59:54:c2:30:ae:cd:78:1b:5d:46:c2:f3:50:c7:
7d:53:b9:ef:5e:39:8d:15:6e:2b:8f:0a:64:02:96:
9c:5d:aa:71:54:4d:84:5c:90:5e:48:b5:13:80:ff:
82:14:58:0b:13:75:a9:75:af:18:6a:ae:f9:9a:a9:
f4:36:0d:24:ae:ad:f4:e7:e8:1f:12:f7:b3:01:fd:
86:d2:1b:21:50:68:10:32:27:2f:38:2f:4c:8e:af:
c3:6c:9a:94:d3:9d:b6:23:21:19:f9:10:08:7a:84:
17:e1:68:d8:92:69:e2:cb:1b:e8:0d:46:ac:a7:47:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:20:CA:B9:71:8A:C2:20:65:A7:AC:CB:F7:AD:9F:F7:C8:84:7A
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:df:08:ca:ec:97:a0:64:e0:3b:4c:89:de:58:9e:69:89:
44:eb:30:1b:96:62:76:4a:9b:42:3e:e4:ec:6b:db:d5:86:43:
62:ff:88:8b:86:3d:03:4e:c3:0c:df:be:e0:47:f5:4e:2e:b3:
a1:c8:57:26:8b:ee:c5:b6:b6:5b:96:1e:2b:af:4a:26:9f:12:
ad:bc:06:2b:4d:88:ab:17:11:50:fa:27:9a:e9:86:01:bc:8f:
16:d5:b7:a6:ae:3f:4d:39:a4:79:ed:4c:18:c5:3d:e3:b8:3e:
47:ee:c5:11:07:ce:e4:88:ea:d6:98:83:e7:eb:f4:86:63:4d:
91:c2:b9:14:62:82:67:3a:c9:bf:34:fd:12:ab:6e:68:18:b5:
0f:27:80:13:fc:cf:38:9a:37:99:57:d0:b8:82:dd:18:4a:c4:
b9:42:e2:6e:63:82:b1:07:03:38:db:af:99:89:7c:fd:5f:6b:
81:2c:db:7c:b9:be:03:bc:ae:76:74:e0:fe:33:ef:89:95:21:
0d:81:7f:74:35:a7:ef:5e:8e:b4:03:d9:3d:7c:03:b5:fb:47:
98:f8:d9:ea:4a:32:0a:5c:02:61:c9:8a:a7:89:1f:53:08:8d:
5d:09:1a:c8:68:3e:04:12:10:71:0e:b8:1c:db:c0:66:46:ef:
eb:92:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:57 2025 by rpki-client