Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
File: nz-YcVNtYL90vfaQYMkNVBB9jjg.mft (raw, json)
Hash identifier: 4jODHrZ1vDtp2fkjhf+J+nof6RMoi5LMipfCjr6IfAM=
Subject key identifier: B8:56:99:98:31:94:8C:AA:DA:D4:01:16:2F:C8:19:73:E7:46:F3:A2
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial: 0194BCA99FF76F424D8987FDB1CA23148FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
Manifest number: 0CAA
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: cZq1EWW-Cck7oNh5z2nVrTYMRQM.roa (hash: ptcOLOBEIgDro10MJyiqeVzzPTgAas0GugoUSuUsWgQ=)
2: nz-YcVNtYL90vfaQYMkNVBB9jjg.crl (hash: ib9wQ0S0GQrra4lkq6Pz2RnDcqnu9uq8xo2C8c/pHbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9f:f7:6f:42:4d:89:87:fd:b1:ca:23:14:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=b856999831948caadad401162fc81973e746f3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:48:dd:08:b8:a2:e0:00:57:fc:7d:6c:a3:
a5:d3:0c:33:23:4b:65:91:e8:48:65:01:83:30:9f:
5f:79:89:2c:b4:02:b1:c0:bd:a6:a1:4c:ef:66:c9:
c1:66:5c:87:7f:f9:98:ed:e0:2f:ff:ca:15:14:a8:
31:36:3c:0b:68:85:08:8f:48:38:ee:f9:18:83:05:
af:5c:62:a3:6d:fc:4f:bb:4f:92:82:79:4a:cf:ee:
d8:0a:72:fe:6b:95:d7:fc:f6:be:06:b8:92:8b:b3:
f1:a6:6b:3a:14:18:da:77:8d:10:61:19:76:70:f6:
2f:2c:ae:47:08:39:47:d9:a4:a3:40:81:21:63:32:
84:df:a4:0f:5a:23:70:51:5a:be:28:59:0e:26:72:
e6:30:0c:65:dd:a5:d0:84:00:33:99:5a:74:e3:e8:
82:92:57:fe:8b:9a:e4:81:8b:eb:30:b3:3b:a4:dd:
e2:92:14:02:b8:59:4c:9a:f0:c3:a6:04:aa:a5:d5:
29:81:80:eb:ce:6a:53:ec:d1:53:98:c9:2a:46:3f:
ce:6b:5f:76:8d:ac:c3:cf:6c:cb:f8:f9:ef:29:ad:
22:76:37:e4:62:71:9e:9b:ee:37:6c:bb:e0:b9:96:
41:df:d2:e6:af:86:cc:e2:69:dd:d8:b3:e2:44:d2:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:56:99:98:31:94:8C:AA:DA:D4:01:16:2F:C8:19:73:E7:46:F3:A2
X509v3 Authority Key Identifier:
keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b4:8f:55:2d:52:3c:ba:fe:4c:14:d6:de:93:f6:03:33:ed:
5e:bf:f9:55:2d:e2:e1:f9:3a:da:b3:4a:ba:76:2a:ab:91:e7:
08:4f:65:2e:77:f3:2e:5f:f6:54:9d:00:d2:fa:d0:80:6f:0d:
49:0c:cf:a1:51:55:87:b1:68:61:0b:df:52:a7:00:f6:4d:31:
9d:29:c9:7d:dd:f9:2a:7c:6c:fb:95:26:7d:85:ce:da:13:10:
a1:d4:23:7d:7b:72:8e:ac:20:1f:9c:44:2d:60:d5:7f:1e:3c:
73:94:38:ff:94:43:e2:c7:8d:71:28:b4:2b:a3:c0:8c:62:24:
a8:fd:a1:79:6b:b5:73:49:67:28:41:04:5e:65:db:ee:73:29:
14:48:3d:d2:c2:b1:ff:05:51:23:b9:2e:84:ca:08:07:f7:25:
2a:ba:54:90:30:99:57:27:98:7d:53:95:b2:07:22:f0:a9:36:
e4:8a:8d:23:c2:bf:cc:09:4e:aa:2e:e8:e6:d3:a2:29:72:8f:
36:e1:6e:80:30:8b:41:13:b2:5d:64:18:8d:fe:a9:ba:ef:0b:
b8:5c:e8:da:d7:66:25:81:b7:bc:34:16:05:89:f1:f0:42:3d:
a9:d2:c7:8d:11:39:1a:2f:ff:9d:0b:ec:73:d8:b1:3b:bf:04:
0d:24:ea:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZ/3b0JNiYf9scojFI+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmM2Y5ODcxNTM2ZDYwYmY3NGJkZjY5MDYwYzkwZDU0MTA3
ZDhlMzgwHhcNMjUwMTMxMTQwMDIwWhcNMjUwMjAxMTQwMDIwWjAzMTEwLwYDVQQD
EyhiODU2OTk5ODMxOTQ4Y2FhZGFkNDAxMTYyZmM4MTk3M2U3NDZmM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0pI3Qi4ouAAV/x9bKOl0wwzI0tl
kehIZQGDMJ9feYkstAKxwL2moUzvZsnBZlyHf/mY7eAv/8oVFKgxNjwLaIUIj0g4
7vkYgwWvXGKjbfxPu0+SgnlKz+7YCnL+a5XX/Pa+BriSi7Pxpms6FBjad40QYRl2
cPYvLK5HCDlH2aSjQIEhYzKE36QPWiNwUVq+KFkOJnLmMAxl3aXQhAAzmVp04+iC
klf+i5rkgYvrMLM7pN3ikhQCuFlMmvDDpgSqpdUpgYDrzmpT7NFTmMkqRj/Oa192
jazDz2zL+PnvKa0idjfkYnGem+43bLvguZZB39Lmr4bM4mnd2LPiRNIRCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhWmZgxlIyq2tQBFi/IGXPnRvOiMB8GA1UdIwQY
MBaAFJ8/mHFTbWC/dL32kGDJDVQQfY44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNmJiZDMtYWUyNy00ZGM3LWI2Njkt
YzUyNjNiMzMwM2I5LzEvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNmJiZDMtYWUyNy00ZGM3LWI2NjktYzUyNjNiMzMwM2I5
LzEvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLSPVS1S
PLr+TBTW3pP2AzPtXr/5VS3i4fk62rNKunYqq5HnCE9lLnfzLl/2VJ0A0vrQgG8N
SQzPoVFVh7FoYQvfUqcA9k0xnSnJfd35Knxs+5UmfYXO2hMQodQjfXtyjqwgH5xE
LWDVfx48c5Q4/5RD4seNcSi0K6PAjGIkqP2heWu1c0lnKEEEXmXb7nMpFEg90sKx
/wVRI7kuhMoIB/clKrpUkDCZVyeYfVOVsgci8Kk25IqNI8K/zAlOqi7o5tOiKXKP
NuFugDCLQROyXWQYjf6puu8LuFzo2tdmJYG3vDQWBYnx8EI9qdLHjRE5Gi//nQvs
c9ixO78EDSTqLg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:08 2025 by rpki-client