Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.mft (raw, json)
Hash identifier: n07yYZjNaxXmg6yJvP1ZmXzoCq7Vi3TzYK3kO7a8xtA=
Subject key identifier: BE:AC:91:55:EF:41:EA:FF:93:E4:90:9C:0E:7B:C3:B0:63:7D:24:83
Authority key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Certificate issuer: /CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Certificate serial: 0194BCA990562658A6031AAA71C43B8BAB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: nyHqqnvQ7mfKYwLj16quZNcpQC0.crl (hash: yJWJlcOMi+9f7+zgKPQD7O9AlMXlv/JlOMFtUDEwmS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:90:56:26:58:a6:03:1a:aa:71:c4:3b:8b:ab:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=beac9155ef41eaff93e4909c0e7bc3b0637d2483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:c9:25:63:f5:40:21:33:65:39:5c:53:d5:
99:7e:29:76:ac:d9:e4:7b:34:21:92:02:e5:2d:ed:
ce:d7:8b:38:be:60:f3:5f:4c:1c:86:fd:17:eb:36:
b9:22:47:c6:52:be:97:a2:4f:b6:17:c9:2d:4a:06:
80:74:98:52:5f:92:30:b3:d0:58:68:bd:41:04:1c:
23:5b:7d:e7:24:68:9b:b2:fb:f1:e6:26:09:32:64:
64:b2:59:8f:6b:e8:a7:1a:8f:d7:43:48:00:dd:7c:
14:87:02:14:8d:86:6e:e4:79:8c:f7:51:69:3b:61:
52:f6:ee:20:89:2a:b6:75:e3:b0:1b:5f:05:a8:0e:
9a:6c:38:ff:42:16:92:83:22:c4:2f:50:43:8d:40:
19:2b:c6:20:e5:4a:56:fe:d3:9a:6a:d3:33:76:31:
dd:ae:da:4c:b2:fc:35:84:c4:e9:37:53:f4:ce:29:
ee:17:cb:ea:91:31:7b:ba:ec:81:93:ee:9b:5f:76:
8b:ba:61:3b:57:cd:da:5a:3e:32:be:49:21:28:b5:
a1:28:c9:c5:db:25:e7:97:07:90:3b:64:36:c1:d5:
2c:ab:07:f7:ce:73:53:f3:2a:1d:52:97:6f:20:fb:
f6:30:e5:02:42:a9:a1:79:60:f8:35:29:06:07:3d:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AC:91:55:EF:41:EA:FF:93:E4:90:9C:0E:7B:C3:B0:63:7D:24:83
X509v3 Authority Key Identifier:
keyid:9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f2:a5:69:00:60:8d:6d:39:8b:ca:f6:0e:8e:1e:31:85:f6:
85:8d:cd:d7:b0:d6:54:3f:13:a2:95:d4:f3:49:a7:27:d8:61:
88:98:36:3f:ae:7a:4e:00:e3:24:8c:39:e9:25:cc:01:ff:48:
32:bf:d5:aa:ab:37:95:02:65:79:c6:cc:a6:44:16:6f:09:43:
3f:2b:8b:89:ce:56:bd:ea:d2:42:ab:63:5c:87:19:9d:a7:38:
bb:da:bf:30:33:0b:0b:ea:55:c7:a7:d0:a5:b8:7e:b0:be:70:
f5:c8:5d:52:a6:c6:8d:be:f4:b4:28:c6:41:a9:62:6a:a8:38:
36:a3:2d:ae:aa:3e:11:ee:af:37:2e:25:56:0c:5a:02:f4:ad:
b0:61:9b:43:50:3c:de:0d:7b:21:43:dc:a0:11:3c:94:cd:11:
15:bf:de:55:1b:7d:87:ff:6a:91:de:fe:04:d9:c9:79:0d:d3:
f1:88:d8:af:80:12:9d:6a:eb:61:80:dd:83:97:ea:b9:7a:dd:
aa:20:a9:63:a6:fe:0b:bf:61:7c:40:13:26:0c:36:26:eb:d5:
fb:e6:b8:1c:e9:69:ab:4f:0d:0e:d7:66:3c:32:b7:39:0a:f0:
77:5e:b1:a9:4a:77:02:32:53:66:45:d2:d2:5b:ed:8f:26:a1:
da:fa:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:11 2025 by rpki-client