Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier: oG7xNCM079+2Cp3uBt5VtQ0X/IHn2fHlwmQEzaQ3/pM=
Subject key identifier: 93:C1:88:60:0E:BB:0E:EA:DF:90:70:4E:04:33:81:54:5B:1B:EB:AE
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial: 0194BC72D57AD4974ABDDBB5D47CCAC979FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number: 1062
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: RUsA7zOSan1e/meUdeU6kMlSsguQtRzvHNQFGeoIjd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d5:7a:d4:97:4a:bd:db:b5:d4:7c:ca:c9:79:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=93c188600ebb0eeadf90704e043381545b1bebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:32:67:86:e0:0c:a9:d1:4c:1f:67:0f:9b:
66:83:e4:5f:8c:52:e5:3d:79:8c:13:cf:dc:dc:48:
f0:85:b5:af:68:e2:aa:fd:93:7f:8f:2b:aa:3a:7e:
2e:70:0b:15:b1:f2:a2:05:e1:ea:e4:a1:4b:a5:0d:
87:41:bd:08:f9:ab:ed:cc:9c:d5:dc:57:e8:b9:3b:
5e:fa:7c:81:48:18:7c:df:67:3b:bc:7b:40:b9:f5:
4a:6e:3b:54:ee:8d:a6:0a:ae:86:d7:2b:81:02:de:
a0:5b:6c:f4:d7:98:b3:ce:d0:30:61:3b:3e:17:60:
9d:fe:c1:a0:64:87:fe:e2:8d:49:64:b3:fb:ba:e9:
20:45:84:ac:a2:0b:48:c0:cd:1b:00:6c:03:d3:27:
bf:9b:a5:d2:88:05:8a:28:d3:84:5b:8e:e2:9c:49:
6a:e6:3e:42:4c:89:5a:2c:08:e7:1a:f6:d6:f2:d6:
03:d6:02:b5:9e:45:f8:38:c2:6d:c1:33:f1:41:2d:
8d:2f:5f:45:b1:ca:89:00:40:16:62:fa:f0:43:16:
fa:4e:ac:ef:40:a9:a3:14:c2:2c:8a:c8:02:c7:c1:
ab:7f:1e:41:97:bb:00:32:04:f6:7e:75:5a:da:e9:
fe:e0:26:44:22:93:c1:cf:9f:35:e7:83:43:1a:a7:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C1:88:60:0E:BB:0E:EA:DF:90:70:4E:04:33:81:54:5B:1B:EB:AE
X509v3 Authority Key Identifier:
keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7a:30:c9:0d:2b:88:6e:9a:d5:cd:9e:82:70:70:13:cf:8d:
57:5a:9b:3d:ee:2f:dc:25:ae:94:ab:8d:57:32:7d:b3:49:a8:
f2:a5:59:c3:6c:51:88:ca:35:cc:3a:c3:40:3d:4e:6d:20:8a:
5c:14:d9:31:2a:0b:9e:9c:af:89:a6:b7:cd:ab:8a:ec:fe:17:
4d:86:ae:fa:76:91:67:5f:3b:71:39:7b:c5:f8:cb:c0:d3:fc:
31:c3:71:6e:12:0a:45:30:69:cc:ae:8e:fc:0c:96:3c:09:fa:
98:b3:1b:6f:33:e7:85:75:de:1a:82:9e:de:50:ee:90:94:a9:
63:25:a0:46:36:ad:c2:d9:59:e0:33:17:26:be:2e:b6:8f:96:
bc:21:a8:3e:95:54:4f:e8:07:6f:25:61:fa:d7:c8:3d:94:ef:
20:dd:ef:e3:a0:24:c6:f5:bd:3a:6e:cc:07:41:ab:72:d4:8a:
f8:e6:d5:7c:b4:89:61:75:ea:c3:f1:b2:cb:6d:ee:c3:4e:26:
25:c5:ff:37:10:0c:e7:b4:75:9e:62:46:c8:c7:27:92:a9:b1:
be:da:94:5a:a9:9f:d0:be:90:6d:bd:0d:36:bb:88:4f:87:e7:
0e:42:36:e4:94:e6:ca:2c:d5:9c:35:90:c7:c2:32:45:e8:30:
49:c0:ec:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctV61JdKvdu11HzKyXn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OGFlNTgwYjJmN2I0NWMzZDJhZTlmMTlmM2MxYmU5N2U4
MzlhYWEwHhcNMjUwMTMxMTMwMDI5WhcNMjUwMjAxMTMwMDI5WjAzMTEwLwYDVQQD
Eyg5M2MxODg2MDBlYmIwZWVhZGY5MDcwNGUwNDMzODE1NDViMWJlYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+8yZ4bgDKnRTB9nD5tmg+RfjFLl
PXmME8/c3EjwhbWvaOKq/ZN/jyuqOn4ucAsVsfKiBeHq5KFLpQ2HQb0I+avtzJzV
3FfouTte+nyBSBh832c7vHtAufVKbjtU7o2mCq6G1yuBAt6gW2z015izztAwYTs+
F2Cd/sGgZIf+4o1JZLP7uukgRYSsogtIwM0bAGwD0ye/m6XSiAWKKNOEW47inElq
5j5CTIlaLAjnGvbW8tYD1gK1nkX4OMJtwTPxQS2NL19FscqJAEAWYvrwQxb6Tqzv
QKmjFMIsisgCx8Grfx5Bl7sAMgT2fnVa2un+4CZEIpPBz58154NDGqdoNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPBiGAOuw7q35BwTgQzgVRbG+uuMB8GA1UdIwQY
MBaAFDWK5YCy97RcPSrp8Z88G+l+g5qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2Njct
NTI0ZjNhMmY2OGIzLzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2NjctNTI0ZjNhMmY2OGIz
LzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHowyQ0r
iG6a1c2egnBwE8+NV1qbPe4v3CWulKuNVzJ9s0mo8qVZw2xRiMo1zDrDQD1ObSCK
XBTZMSoLnpyviaa3zauK7P4XTYau+naRZ187cTl7xfjLwNP8McNxbhIKRTBpzK6O
/AyWPAn6mLMbbzPnhXXeGoKe3lDukJSpYyWgRjatwtlZ4DMXJr4uto+WvCGoPpVU
T+gHbyVh+tfIPZTvIN3v46AkxvW9Om7MB0GrctSK+ObVfLSJYXXqw/Gyy23uw04m
JcX/NxAM57R1nmJGyMcnkqmxvtqUWqmf0L6Qbb0NNruIT4fnDkI25JTmyizVnDWQ
x8IyRegwScDsfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:43 2025 by rpki-client