Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
File: nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft (raw, json)
Hash identifier: IPYk2K3EbqEF95Rrree52DZMa4wisn++KOiQROVha/k=
Subject key identifier: 6B:07:B5:1F:30:2B:CE:88:2B:F2:C8:A4:64:50:69:18:FC:4E:1B:62
Authority key identifier: 9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF
Certificate issuer: /CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf
Certificate serial: 0194BC72D8F91634A892C1E6C9E4977DC4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl (hash: Dm+SEXWYTEhEp2NT2JI7rgxk70WkaL+FLeITE6O7WW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:f9:16:34:a8:92:c1:e6:c9:e4:97:7d:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=6b07b51f302bce882bf2c8a464506918fc4e1b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:06:39:bf:c3:d6:c4:30:70:6f:18:53:81:
44:3b:50:33:dc:90:99:71:43:42:ae:f4:16:f6:fb:
b7:5b:45:61:17:44:c5:91:60:7f:0f:41:3d:68:68:
c8:b5:f1:bf:53:40:72:5b:bf:9f:77:6c:a3:94:49:
83:4e:af:d0:bd:36:67:a8:7f:b4:1c:f6:73:84:b0:
59:1f:36:b2:7e:e8:c1:dc:63:fa:b9:af:d9:63:23:
c7:83:04:ad:ba:0b:f2:61:f5:23:62:0a:d9:7e:e7:
dc:c6:b5:ca:4d:36:58:63:02:ad:2b:bc:2a:32:44:
1f:8d:dc:85:ca:05:a3:51:90:88:9d:4a:fe:d0:f5:
36:39:b8:c1:01:fd:1e:c6:e0:76:c3:55:eb:43:ba:
ec:e1:4c:5d:c0:25:57:f5:79:9d:13:47:d8:35:64:
4c:08:15:8e:d2:47:6f:e6:d2:d1:82:c4:bb:05:0a:
d0:e3:da:15:b2:82:ed:e7:c2:00:78:3e:e8:bd:37:
d9:7e:f0:c0:27:9e:34:1f:ee:66:15:b6:56:a8:c3:
2f:b7:55:60:19:c3:5e:eb:09:01:25:d5:3d:71:bf:
d3:3e:77:c1:16:b1:43:77:f6:78:5e:6f:c7:f9:d4:
42:8e:29:29:b7:7d:56:2b:25:d0:e5:5f:5c:56:e8:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:B5:1F:30:2B:CE:88:2B:F2:C8:A4:64:50:69:18:FC:4E:1B:62
X509v3 Authority Key Identifier:
keyid:9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e1:2f:f8:ba:b8:ab:c2:39:10:60:ae:ed:99:36:5e:17:71:
47:f8:be:05:a9:61:74:35:4e:a1:57:d1:6d:05:36:2e:21:88:
10:1c:98:4b:55:29:f6:02:f6:b8:79:84:4c:ae:c0:db:09:f1:
a3:e3:0f:40:b5:cc:2a:3c:80:c6:d0:98:a6:9d:0a:46:0f:6d:
73:b9:21:3e:97:76:ba:4c:5c:33:b9:7c:88:f8:45:a8:ea:3f:
1e:ed:7a:f2:0d:c4:0f:c1:fb:af:f9:40:e4:18:9e:0f:80:0c:
ae:46:c6:36:95:75:cb:6c:f2:75:70:d0:30:80:18:c3:9b:c8:
ae:2b:86:34:d1:b6:4e:c1:74:31:0f:e8:53:8d:6f:bb:55:d0:
26:bc:5b:f1:b2:c1:5f:d9:97:8c:95:bb:59:7b:59:8a:59:62:
c6:47:81:83:60:ca:ed:f7:a5:73:a1:46:bf:43:aa:12:65:bc:
ac:af:4d:a9:0f:b4:22:48:b2:32:f3:cc:10:c0:29:dd:c2:8f:
d4:2b:f3:12:9b:59:51:ae:2b:18:28:7d:cf:2d:e5:3c:91:53:
c5:79:0a:74:2e:f5:8e:c4:d3:1e:10:03:82:ac:8e:eb:4f:d8:
fc:88:84:5e:83:ce:84:8b:65:f0:01:c4:db:71:64:58:17:5f:
42:82:86:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:56 2025 by rpki-client