Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: TyIEHoa9p/rU2ZZBZ6HjGl3MSzozuqOGad03pTpM9f8=
Subject key identifier: C2:1B:B3:EB:DC:11:5B:08:6E:63:9F:69:44:7A:10:97:85:D2:A9:B8
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 0194BD4E841B262D31E5924138EBD54156EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 090F
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: goS1EP9RyxRmlB/4CN6hJBhAGDzqUiThD7zAXNiB9YI=)
2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:1b:26:2d:31:e5:92:41:38:eb:d5:41:56:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=c21bb3ebdc115b086e639f69447a109785d2a9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:fc:32:d8:26:d3:34:34:fb:c9:e5:6f:0e:
ad:87:d1:63:30:99:de:66:a1:f5:83:9c:27:dc:58:
82:ee:ec:10:78:bf:59:ae:59:96:5d:dd:62:94:76:
61:59:98:0b:f1:87:5f:c0:9e:15:c2:e1:25:bc:ef:
7c:25:cb:7d:c5:3e:fb:f1:05:b5:11:ec:31:de:e1:
cd:b4:9d:88:a8:2e:27:77:ce:df:13:be:78:cb:79:
f5:52:c5:8d:e3:9d:92:6c:fe:fd:3d:ec:72:12:31:
97:5d:34:77:60:3e:4e:9d:75:09:ec:c0:b7:9b:53:
89:92:68:a7:0d:69:0b:54:a2:06:a8:0c:d8:1a:ba:
09:62:78:0c:b4:8c:9a:85:84:a3:a6:5e:e5:44:6f:
7f:96:76:b9:5f:61:5d:db:ee:3a:5b:b6:0d:b9:c0:
04:7a:50:74:a1:5a:32:1f:73:e3:6e:d7:d0:07:62:
22:4d:78:44:9e:a8:e1:79:a2:9f:3d:15:e5:6b:73:
a6:a8:57:91:c0:31:f5:22:54:c2:bc:56:81:1d:f2:
0a:f7:22:49:ab:da:9c:7d:51:c7:04:25:75:68:48:
de:52:19:7c:7c:2d:e5:b8:30:b7:b7:82:4a:59:62:
c9:8b:08:6a:21:83:16:52:3f:0e:7b:ef:de:7f:7b:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:B3:EB:DC:11:5B:08:6E:63:9F:69:44:7A:10:97:85:D2:A9:B8
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8a:f6:7b:bc:17:22:1e:6d:ab:55:39:ee:4c:04:2e:b0:49:
25:44:86:7d:a6:dd:f4:ea:6a:97:8b:dc:59:93:3f:a4:e8:a5:
2e:d5:1d:55:7f:22:6e:f2:eb:12:db:cb:c5:f7:0e:84:8a:c8:
4d:72:c3:14:89:54:db:c6:90:92:6f:23:5b:62:55:1c:e3:9d:
da:f3:b8:c8:39:73:66:e2:30:80:d5:53:ee:2c:72:2c:19:a2:
6c:31:24:26:80:ba:bd:10:5d:29:8e:7c:42:d2:43:12:f3:d6:
3d:68:45:bc:42:db:48:2c:37:49:2b:4c:96:ef:81:0e:f3:a6:
b4:f6:1b:5e:ed:c2:6d:c6:02:a1:6f:33:ee:97:02:76:68:29:
bb:72:df:78:b4:83:71:01:e3:ee:6c:83:eb:92:67:ec:d2:df:
64:cb:6f:d6:68:fb:8b:36:3b:8d:ab:51:ee:62:c1:b5:43:f3:
8f:76:37:57:a1:31:be:e0:a6:b3:a5:2b:bd:5f:1c:e5:4a:cb:
59:09:3e:37:95:90:55:fc:89:e5:d1:ee:54:ab:33:a3:03:18:
fe:5b:b0:3d:1a:5f:bd:c1:6d:cf:39:25:f5:fd:ff:f5:50:2c:
1c:d6:e4:32:af:69:06:42:f7:44:61:22:dc:7d:97:99:82:76:
48:36:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:40 2025 by rpki-client