Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: 6oKzgJvtBuSicNYNYIb21pIm7kJT3hbCHL1RE8uXa18=
Subject key identifier: B7:D3:4A:93:7B:BE:A9:5E:96:93:15:DE:68:D7:1D:B7:FF:3A:0B:66
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 0194BC04ED73705051317EC803118F2D4871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 1151
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: QQ7iShcSiDVx+2dGZHnkSzF4FY7E8u9ctRjSafjhOKU=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ed:73:70:50:51:31:7e:c8:03:11:8f:2d:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=b7d34a937bbea95e969315de68d71db7ff3a0b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:4f:c8:a8:0b:17:15:1f:1a:84:f4:67:66:
4e:c6:63:fa:5c:20:16:b5:fc:f4:a9:ef:a8:61:4b:
c8:cc:85:a5:2c:ea:9b:a3:3c:9e:3a:1c:ca:03:df:
03:cf:8b:e2:12:f6:85:79:c5:f8:f7:ff:2b:77:0f:
4f:7d:d8:56:a8:0e:f4:d6:38:74:7c:c4:45:e2:e9:
83:7f:7d:1d:23:28:38:61:f9:00:e8:cf:c9:11:9f:
c1:e0:5b:77:55:90:0e:05:ce:03:3d:03:7a:c3:1f:
bb:43:57:d6:3a:74:9e:b5:c5:5a:73:98:42:4c:b5:
7d:c7:b0:95:13:78:a9:01:e4:a8:ec:76:a1:b8:03:
4b:da:fc:f4:ba:be:f0:8e:10:83:74:6a:e9:41:20:
9c:60:d9:ea:3d:54:91:d3:fb:bc:32:7c:b1:fd:3f:
6d:f6:ba:b9:b3:d6:f4:3c:05:00:1e:7c:ad:95:7d:
8b:6f:28:9f:22:0f:6e:c4:e3:2f:b8:72:9b:6b:d9:
c8:55:a0:41:00:b8:99:0f:26:0a:a5:e2:ad:7e:61:
df:50:3a:15:49:54:57:cb:3c:6f:af:a0:92:02:17:
da:7a:e6:34:8d:a9:f6:26:03:7c:a5:c2:fc:86:1f:
6d:94:20:70:b3:c1:85:2f:21:90:2b:b5:4c:f8:9d:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D3:4A:93:7B:BE:A9:5E:96:93:15:DE:68:D7:1D:B7:FF:3A:0B:66
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:62:c8:67:92:1e:1b:12:9a:37:24:fb:37:cb:b0:34:58:65:
7f:ac:62:10:6d:5b:3b:7a:8d:8c:1e:60:51:5f:ed:6e:f3:56:
7f:14:9a:f6:f8:ec:4c:9e:79:42:0b:c2:f6:69:2e:72:bf:a5:
ca:ce:7b:db:33:fa:14:8d:fa:2b:ff:e5:15:86:94:a1:58:96:
45:2c:50:72:6e:32:c6:fc:19:5b:a6:0e:9a:fc:67:a8:4e:ff:
db:2b:b0:86:62:03:cb:e6:a5:99:e4:e4:5e:e9:43:c7:b1:ba:
46:b4:3b:83:69:a8:02:64:e5:a2:6a:ac:3d:5e:bc:49:1f:b6:
9c:21:83:6f:62:ff:4f:08:f7:06:96:b9:67:88:ae:aa:0a:c3:
49:f2:7c:07:95:c3:58:34:53:0e:6f:d7:c6:3a:be:22:ed:82:
c8:37:ed:8d:83:e0:b7:bd:59:10:a3:e4:1e:f5:91:8b:4f:3b:
41:92:52:e5:8c:45:d1:9a:9d:98:f4:c0:cc:0a:9d:8d:08:c7:
f2:0b:2f:ab:bb:b7:9f:e5:c2:e5:92:67:ca:14:b8:00:ae:00:
8f:b8:e6:e0:5f:db:d6:5b:97:35:8e:0f:35:4a:f5:a9:1c:01:
c4:7f:ee:6e:72:41:7f:37:da:45:61:76:77:76:57:f4:44:df:
20:15:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:43 2025 by rpki-client