Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: lxENQDJ/h2Rxu3vNOrHj1yTbo6INjg7Hwt8idKu/9/k=
Subject key identifier: 97:D0:E6:B0:04:13:DE:F8:AF:22:B9:F3:D8:ED:0C:74:6F:25:60:C3
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 0194BC3C75132711E455DFE754121221347F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: i6+QyXg/NSb8I7ULG8oK+pMM3pFl85+iAcU2S0eTw+0=)
2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:75:13:27:11:e4:55:df:e7:54:12:12:21:34:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=97d0e6b00413def8af22b9f3d8ed0c746f2560c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:97:3c:81:6a:c8:d8:3e:6e:b9:bf:3a:62:
c6:e2:60:bc:21:01:30:43:45:93:57:5d:90:ec:22:
40:98:40:a1:f4:0f:44:5c:d1:75:48:0f:b5:62:b8:
2c:1d:52:11:95:19:43:77:ff:99:04:f4:b6:92:3c:
64:77:9f:47:03:f4:ed:0e:e8:d2:55:6d:bc:69:c7:
65:22:0a:c6:af:7f:ab:2d:d5:f5:a4:7a:ea:ff:7e:
94:dc:9c:be:bc:85:61:2d:11:df:08:82:7a:85:82:
57:5e:ae:f3:57:2e:57:e6:f3:1c:fd:e7:61:d7:d0:
86:2b:bb:91:ee:50:32:4e:d1:29:02:bc:90:b8:b0:
35:0f:61:98:63:c9:67:64:f4:c4:5d:53:d4:db:ca:
30:b9:ef:67:b6:11:e1:0d:5a:30:f2:76:4e:b2:7f:
db:b7:5b:29:f1:32:ad:21:2b:b0:b3:d0:97:27:ad:
b2:06:d2:2f:5f:e4:31:0e:85:ea:3a:30:7b:89:4a:
8b:27:42:d8:c4:30:bd:93:f6:35:82:01:d2:39:2e:
35:bd:37:82:42:2d:f4:a1:d1:33:a9:1d:e0:3f:c8:
ad:03:08:59:9c:05:b0:68:bd:6e:e4:ad:95:ec:5c:
56:6a:0f:b0:07:b1:dc:ee:11:5d:b5:f6:f1:2f:e8:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:E6:B0:04:13:DE:F8:AF:22:B9:F3:D8:ED:0C:74:6F:25:60:C3
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:20:73:26:9d:d2:5d:f0:7a:e4:1c:99:41:c4:df:c7:01:40:
94:b4:21:f9:64:da:13:c0:2c:ca:73:33:f4:a3:33:b7:a3:8a:
87:4d:bf:3d:bf:ec:1e:3a:e6:60:89:fd:71:56:b6:d9:fa:c2:
74:e4:4e:3b:f5:ab:3d:82:b9:fc:f3:1e:3d:b9:4a:aa:ca:28:
9a:01:1a:d8:fb:bf:20:db:ce:9d:49:9b:4d:cd:72:ac:15:ca:
a9:29:77:7b:16:33:a9:4b:4c:d5:54:a4:80:26:a7:43:c1:0b:
e3:e6:22:d4:57:80:18:cb:07:e8:6f:27:97:ca:f2:25:bc:37:
89:5b:c5:f7:6a:5c:93:18:aa:0f:6c:de:22:40:5e:4a:09:7e:
f4:9a:9f:0c:ac:45:c2:8a:16:62:e5:76:38:a2:c4:b5:eb:c9:
0b:84:3a:b2:8c:0c:d6:38:53:5f:06:20:a6:ae:59:30:12:5e:
fb:78:4c:11:30:89:15:7c:ea:21:64:10:00:1f:31:f6:93:20:
ef:23:3f:51:12:f2:3f:e9:cc:8c:5d:ee:6f:8d:29:13:fb:94:
db:a3:b3:21:38:79:88:09:6e:ae:8d:df:06:4c:79:6d:c0:92:
b8:94:d9:8f:de:96:4e:dd:20:bc:97:9d:a7:dc:62:ec:0a:6f:
41:f4:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:37 2025 by rpki-client