Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
File: NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft (raw, json)
Hash identifier: 7plVJMnsbnXXrAOihXUbhF5A3JVcfRGGbBkTxRrv39s=
Subject key identifier: CA:49:87:11:ED:62:05:DE:EE:80:61:03:0A:94:E7:32:1F:41:2C:CB
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Certificate issuer: /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial: 0194BD858C2BA5F85691704D5BA336A83449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl (hash: 0plMQxIjWxHAic/TlchcyJUFi4IB59HdYJn5zShH3BY=)
2: P1xjhgcrB_82E1dr812SN7zD2jw.roa (hash: 1Ps5EidA8vmNxrrB6k3QxJd8xmqPpWh99eg7n4cVK7o=)
3: q3oH4WqBy89nlHf_ohkPgGYaYoc.roa (hash: /Ya4Ak12mdvsioIt2KLsqtGYRCnDo04vhdOQ06CJDUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8c:2b:a5:f8:56:91:70:4d:5b:a3:36:a8:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=ca498711ed6205deee8061030a94e7321f412ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:f8:b2:51:5b:8e:4d:35:a8:92:b6:38:5e:
03:29:cd:09:06:c7:88:64:8b:fb:77:db:07:07:66:
2e:05:3b:12:b8:aa:5c:03:a7:e0:9c:c9:39:d3:23:
5b:1e:37:0b:ab:a1:a0:14:45:da:f3:ba:bb:17:09:
9f:bb:d3:43:37:f2:97:af:db:94:15:5c:94:1f:69:
d5:3f:87:cd:5a:44:0e:61:b8:b3:1b:2f:33:fb:4e:
71:f0:52:8b:97:27:4c:79:26:b0:b8:ac:39:19:dc:
2e:3b:c8:63:ec:4d:d3:15:1a:cc:8f:f8:8b:b5:99:
7d:9f:c0:2f:82:c7:62:af:ea:a0:3b:16:1f:e2:17:
6e:c2:48:4b:b0:80:06:c2:dc:19:64:88:49:18:95:
72:20:6f:34:ef:8d:79:94:c6:f8:f4:60:5b:9a:55:
44:0f:57:80:25:1f:bc:4f:8a:70:dd:db:33:c0:9b:
52:a6:6e:ea:30:c1:2c:b5:ec:59:d5:53:54:ec:24:
0e:92:20:36:4b:4c:23:f6:d0:25:75:e3:06:50:3e:
f9:15:14:d7:d8:80:a2:5f:91:37:02:bb:82:03:99:
b0:88:f6:7a:81:41:8d:e0:32:0a:48:11:24:20:0d:
3c:e6:22:3c:d2:00:15:3e:86:aa:d7:82:6d:e1:8e:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:49:87:11:ED:62:05:DE:EE:80:61:03:0A:94:E7:32:1F:41:2C:CB
X509v3 Authority Key Identifier:
keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:14:f4:ff:5e:1d:ac:eb:a7:e2:99:20:83:4f:0e:9b:aa:64:
c1:26:8f:eb:60:cc:1f:45:56:36:c2:72:4e:8d:e7:d7:2c:e9:
66:d8:10:33:c9:2a:30:f3:8f:22:b6:06:1d:21:73:12:db:69:
4f:27:88:7d:14:d3:e1:de:b8:07:ca:fc:22:90:92:60:23:3f:
85:2d:7c:67:ff:e2:7b:e2:c4:ed:1f:01:c8:ef:8e:86:a9:65:
95:f2:0e:5f:6d:fe:46:4c:ca:59:64:a2:6e:0f:ef:cb:e7:73:
61:ef:e3:c7:6b:e5:7f:9b:46:cd:56:59:3f:3b:b4:6f:e5:cb:
4e:6f:14:12:11:88:b7:20:c9:a9:72:51:42:e8:06:2e:54:1f:
e8:df:d8:3b:97:d7:d9:7a:f3:de:e6:fc:7c:d2:65:fa:e7:4c:
27:a4:a1:79:66:81:b0:bf:2e:ee:fd:94:af:89:cf:ee:d0:45:
de:60:34:33:93:e6:07:6b:6a:cd:b4:d6:70:e0:17:2f:35:b1:
dc:67:dc:c5:e7:e4:6c:3c:ff:e6:34:82:c1:3a:43:d4:e9:5e:
fc:79:e7:a7:b1:ef:c0:ea:e1:c2:f0:63:97:e7:67:bc:5f:92:
0d:4b:33:44:b4:2e:68:88:4d:40:3a:69:82:64:eb:dc:b2:60:
97:7f:11:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:08 2025 by rpki-client