Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
File: NYx3zUAYPEEVsr8NznFuC8XQv9U.mft (raw, json)
Hash identifier: OypdDfsdw4EmmUpzCw3LJhC0MM/K71wzHy821jhM3IQ=
Subject key identifier: B9:FF:28:86:FE:2E:03:C9:97:D3:A8:33:3C:4D:79:57:7D:00:E7:DB
Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
Certificate issuer: /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Certificate serial: 0194BCE06D2BC9E342469A8A38D9FC49A4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
Manifest number: 0195
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: NYx3zUAYPEEVsr8NznFuC8XQv9U.crl (hash: GiyfZwPHwc2uN1iZ/sbx0EFDs4OphD6HZuWC0GA9j1E=)
2: zdd_itkr61DwlSbiF7xORGma-Mg.roa (hash: s7+y8n33Kdf5OFXebrrUAhH6tASSitV8ofo7STn/T1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6d:2b:c9:e3:42:46:9a:8a:38:d9:fc:49:a4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=b9ff2886fe2e03c997d3a8333c4d79577d00e7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:7c:17:1d:28:24:f3:54:ea:bd:d9:1f:42:
cb:d3:2b:75:49:50:ca:8f:62:85:8c:5a:40:aa:e5:
2d:bb:0a:7a:f2:6e:dc:82:45:0c:09:94:8c:47:09:
18:6b:d6:2d:8e:99:4c:58:1c:4f:f0:cc:9e:e9:f5:
c5:86:5e:0c:7a:16:89:84:3f:8d:9c:f3:21:60:c7:
9e:86:ce:2d:e9:6d:5e:28:35:57:5c:ba:04:31:1e:
ee:4b:7e:e0:48:53:32:e1:20:1b:10:70:23:a6:c0:
a0:5d:15:0b:f3:c7:81:32:71:ca:e6:7a:57:76:66:
fd:4b:1e:5f:af:1c:c3:95:ee:56:56:cd:52:22:8d:
ea:ed:ce:b3:c8:3d:25:2e:84:ae:7d:c4:01:dd:c6:
84:34:91:96:53:f4:fb:b1:9b:ff:83:b1:0b:64:68:
38:fe:44:21:71:53:f9:8f:75:4c:a0:20:10:65:4b:
6d:e4:a2:09:fb:07:28:cd:43:b7:f1:38:1f:35:32:
4f:a5:19:46:2d:df:12:84:57:a4:00:7e:22:ab:a7:
6e:98:73:61:ab:28:78:6a:d4:b6:af:dd:b8:04:29:
96:f5:da:a1:65:15:3b:0a:6e:db:d1:ad:37:82:69:
3a:ec:f1:95:24:4c:5b:7f:53:98:c0:cb:b5:54:3f:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:28:86:FE:2E:03:C9:97:D3:A8:33:3C:4D:79:57:7D:00:E7:DB
X509v3 Authority Key Identifier:
keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d4:86:a4:3d:6b:5f:5b:6b:e1:70:8f:3c:45:3a:ca:15:78:
af:32:b2:c1:b3:f3:29:d8:0d:62:93:ca:df:4b:12:e6:92:27:
82:c6:78:9e:90:dd:51:67:df:a5:46:74:4d:be:48:d3:45:bf:
02:97:43:13:8e:8d:53:eb:c9:b4:24:40:16:29:ce:8c:ab:75:
63:03:8a:a1:0c:f6:42:0f:37:86:31:88:17:1a:a7:43:e1:2d:
ab:e4:7a:a2:db:56:ed:0f:58:56:5e:f9:1d:41:2a:49:16:e3:
1e:b9:d6:c4:32:1b:a3:cf:c0:40:8c:19:9b:5b:d6:81:5f:e0:
fd:d2:c5:81:ff:f8:e9:90:3d:aa:79:1b:59:c0:0c:d4:21:06:
b4:b4:b4:13:9b:d1:a7:34:bd:9a:37:d4:7b:41:b5:b9:05:8c:
a1:da:d0:2f:2b:19:6d:46:a2:a2:81:3d:47:7d:a9:95:d5:2e:
5e:9c:ec:dd:8b:eb:33:36:cf:4f:73:47:f6:59:db:43:0d:10:
bd:10:da:37:f5:7a:52:29:a4:4e:e1:c6:06:b0:6a:2d:99:c6:
43:67:1c:f4:f4:ff:b0:33:e9:b7:fa:46:a2:aa:84:2c:55:68:
4a:b1:72:02:c7:fb:58:ab:83:83:2c:f5:95:39:1b:86:90:b2:
22:02:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:16 2025 by rpki-client