Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: DtDlLbVhUMxeIYr4xrrDzEb61ZZQOPtoPFCu2YtQXCE=
Subject key identifier: 83:80:40:74:B8:C6:07:87:FC:03:F6:EA:1F:10:A4:4D:D4:39:AF:4E
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 0194BCA9E04F2844B0C9D919E295CC5081D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: s7cBCJ8q6hiXxMs6/6eIi74vGGnsTYH87e2hRd5guUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e0:4f:28:44:b0:c9:d9:19:e2:95:cc:50:81:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=83804074b8c60787fc03f6ea1f10a44dd439af4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:8b:04:5e:db:c1:d5:fd:d2:e3:57:74:41:
c9:4a:ad:79:63:89:86:6a:93:b9:5c:8a:9e:a7:c1:
e0:76:6b:1e:a8:cb:9d:85:a7:4a:f1:80:2f:3e:e7:
54:17:33:57:6e:25:7d:47:57:b1:cc:b6:06:a0:05:
05:b2:c5:d0:b5:52:2b:66:1a:38:69:1a:97:fc:a0:
2f:78:06:18:a4:a6:02:fb:9a:3f:08:9a:f8:4e:54:
75:12:68:23:43:03:0b:2e:21:e2:1c:b5:68:b4:6a:
a1:b4:a6:55:4d:88:eb:dc:2c:99:16:16:8c:10:5a:
90:a3:63:07:a0:4c:b9:32:ca:5f:ae:67:01:8b:07:
d7:55:42:f6:c1:96:9a:bc:42:3b:1a:14:91:a9:7a:
a5:3c:b5:e6:26:27:c8:18:c8:6b:a7:e9:98:25:91:
1a:bb:43:f5:09:86:b0:36:c7:16:e0:b4:6f:ee:44:
42:2c:9a:72:56:1d:d6:eb:3e:71:63:55:63:d0:db:
2d:1c:dc:3e:d2:74:73:ef:f0:69:26:a0:5f:2a:0d:
1b:b1:cf:c7:38:9b:31:89:21:bf:f5:cc:fe:e1:da:
13:a9:ef:09:8c:e0:3a:cb:80:7c:93:23:bc:b8:0c:
c8:8a:28:60:78:2a:28:0e:ea:77:3a:0a:8e:73:e6:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:40:74:B8:C6:07:87:FC:03:F6:EA:1F:10:A4:4D:D4:39:AF:4E
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bf:94:e6:5b:dd:b2:d1:20:f6:c5:f2:18:14:d9:62:43:04:
91:ec:f5:62:30:fd:9b:75:55:d2:5d:e0:1a:e3:6c:e3:2d:ca:
dc:3b:45:80:c4:5a:77:8a:59:6e:ed:17:93:eb:68:27:1a:ec:
46:87:dd:7a:66:97:68:ea:42:f2:7f:62:9e:e9:8c:5d:c6:90:
5e:9f:60:48:d7:97:fc:24:f5:46:03:51:b5:2e:04:58:d9:23:
b4:f6:2e:0a:26:70:18:4a:c5:02:6c:9b:92:cb:a7:da:d8:c4:
de:5f:9d:ad:85:38:f4:af:a5:5c:f3:d1:78:ca:a7:de:1a:13:
30:81:a9:45:a1:fe:10:07:a5:e9:9e:e7:59:52:22:73:35:02:
4b:dc:68:91:61:5e:95:41:73:8a:5e:1c:35:f7:d0:61:69:b3:
6a:e1:95:13:f1:8a:9a:03:f8:55:0e:eb:17:99:30:19:77:7d:
55:19:0e:3e:c9:99:f6:a4:e8:25:9d:7b:07:a8:d5:79:77:61:
00:70:51:38:fa:bd:c0:9e:62:37:0f:0b:b6:6d:c2:0c:bc:0f:
18:ec:87:8b:f2:d7:1f:23:d3:ca:0c:bd:f3:a1:ed:e0:6b:aa:
05:76:6f:4c:bb:95:68:a8:b9:cd:62:64:e1:71:a3:23:3d:25:
01:ef:4a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:35:49 2025 by rpki-client