Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json)
Hash identifier: +yDojo79UTZwfyOZ1Ynv1V/VhuTD3ks9rnFikzxAIfI=
Subject key identifier: 82:DD:C3:8C:00:13:F4:9E:E7:E7:80:72:27:22:FD:84:E7:46:1D:C5
Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Certificate serial: 0194BD176ADB49F95D12AF7D30CA553736E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: UEwJJ64alRLct5tdREyndB3a3cexWyGXcwW6mHIjvgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:db:49:f9:5d:12:af:7d:30:ca:55:37:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=82ddc38c0013f49ee7e780722722fd84e7461dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:31:10:ca:8c:85:80:4f:49:45:be:5c:64:
39:87:78:32:80:fe:48:d0:e3:88:43:b2:38:6d:94:
02:3a:7d:6e:1b:9a:25:8c:42:c2:47:73:dc:79:b4:
c1:ba:23:c2:d8:ae:f2:b7:82:b8:3a:70:ec:45:d4:
89:45:2b:28:07:0d:59:80:8b:12:fd:a2:7d:42:ec:
9a:8b:0a:d7:3f:04:3e:ea:90:f3:ca:48:f7:90:c9:
40:d8:7e:07:3f:af:67:12:4d:21:5f:55:52:43:be:
3f:74:5e:69:0e:c5:ad:c3:10:bd:c4:12:d0:0a:df:
2a:e5:e1:ab:99:c7:ab:20:f6:2a:1f:58:61:80:3f:
11:02:20:72:62:04:72:0e:4c:03:59:6c:3d:a5:74:
67:bd:51:73:3d:75:98:dc:f2:78:bb:4c:24:3e:ca:
ab:be:2e:7e:a5:d2:25:3d:27:87:ce:0a:f5:9e:3e:
ee:cb:fa:40:c3:7f:b4:39:91:95:28:c4:6d:4a:6c:
c6:96:e5:c4:5b:ed:5c:78:b8:9f:48:40:f6:be:b3:
68:ae:e4:47:47:7e:64:bb:8f:6b:7c:48:e5:e6:55:
7a:39:69:e3:88:c4:e3:44:26:1f:eb:b6:cf:dd:25:
c8:51:95:78:ee:a6:49:b4:3d:e2:99:36:71:ab:71:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DD:C3:8C:00:13:F4:9E:E7:E7:80:72:27:22:FD:84:E7:46:1D:C5
X509v3 Authority Key Identifier:
keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d5:1d:9f:b5:3b:68:0b:8f:13:38:a0:3c:07:ca:dc:9b:4d:
ad:27:33:4a:e3:1a:5e:69:35:d2:f1:d6:1e:5d:b3:05:9a:6d:
3b:99:84:ed:89:49:18:b4:54:66:a0:7c:a2:27:ba:1b:5b:67:
de:26:91:79:26:bb:21:b5:28:b6:e8:92:0c:0d:9d:6a:b0:75:
fa:41:8d:7f:52:8b:ef:da:b9:1a:95:59:c4:6a:d2:02:4d:a9:
9b:36:0b:05:69:9d:39:80:de:e9:95:5c:0b:1a:81:ac:60:93:
a5:4d:ed:61:91:ca:45:9d:ba:50:23:b0:04:97:5f:86:23:68:
29:2e:19:f2:9f:7e:fb:da:4d:4d:78:04:42:b9:33:ca:01:72:
7e:22:9b:37:bb:6c:b2:87:b0:6a:ac:5f:aa:b7:bb:26:a2:6a:
36:94:8e:24:82:97:1a:51:aa:59:ef:4e:fc:3d:3e:ad:39:57:
b5:b6:c3:ee:13:53:6e:aa:75:1d:d4:45:d7:26:53:99:8b:b1:
b6:2a:a8:40:d0:04:92:30:81:3a:1f:34:41:4f:d7:4c:f2:2c:
21:cb:08:64:ce:99:a6:c0:e2:83:74:f5:60:98:08:05:ec:75:
99:f8:37:7d:14:00:6d:f1:10:cc:91:e0:50:ad:44:a2:d4:18:
a1:4e:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:18 2025 by rpki-client