Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: +lqv8XGDuiwUuE5v2HAsespdwIa1MH2ChDX+zGMjeLI=
Subject key identifier: B8:6D:D3:04:25:D3:AE:E9:7F:F1:53:40:8F:06:A0:DE:41:49:B3:EC
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 0194BBCE7B02C2434BF6AE02108A5AD89D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (hash: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=)
2: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: bn2EtONnex1eHiGJgxxmgGa12JWd39mNWTKV7hQuVmA=)
3: zE2nCBuCP3GWKcrh09m8L6FV9yA.roa (hash: iLVOHuiEHM03YeDql7RR17g8jhss2HwinXwx77EwMP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:02:c2:43:4b:f6:ae:02:10:8a:5a:d8:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=b86dd30425d3aee97ff153408f06a0de4149b3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:40:cd:a7:60:70:64:10:98:8f:df:07:65:
09:e0:c1:78:8f:e8:86:11:89:1c:3a:7f:28:2e:0a:
9c:4d:0a:03:ea:6a:f7:b1:e1:ad:06:99:40:5d:0f:
53:f0:8d:8a:e5:7e:b1:50:f9:92:61:ab:e2:67:44:
64:20:ee:f0:b5:7a:15:59:d8:ca:72:ac:9e:5b:2d:
2a:bd:a4:75:76:e4:34:6d:62:e9:10:bd:b4:8a:43:
f4:1b:ff:bd:75:a2:89:0b:ce:47:0d:50:c6:4a:86:
7e:4a:16:f5:2d:17:66:27:68:9d:29:a6:9e:43:a9:
36:48:e5:bd:f2:ce:ba:eb:fa:fd:38:4f:0c:f8:1f:
68:9a:0b:55:0f:2e:ca:ee:4c:f2:2e:6c:c8:79:74:
65:6c:c7:7c:fe:ab:57:60:26:c9:67:64:02:b2:65:
14:ff:fd:58:75:2d:61:2d:9a:68:93:10:b7:18:00:
a8:3d:13:9e:4b:46:43:90:6f:19:f4:50:3d:f7:ab:
f7:1a:13:d0:9d:83:1f:db:03:af:d7:11:4e:35:00:
2e:6a:9f:aa:46:46:d9:f3:15:73:d4:f2:2a:36:ae:
9d:11:cf:11:c7:2a:15:8c:cf:bf:32:1a:aa:9f:25:
bf:d8:76:be:1f:cb:12:eb:8d:b9:be:94:68:a9:94:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6D:D3:04:25:D3:AE:E9:7F:F1:53:40:8F:06:A0:DE:41:49:B3:EC
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:98:ac:a9:ef:4f:97:6a:61:df:2d:ea:33:f3:39:df:cf:8e:
d4:5d:e4:ad:5b:8c:6f:15:2a:85:b6:7f:ff:eb:8f:37:49:3f:
97:d5:74:44:57:bf:a7:64:96:3b:c0:7b:7d:7b:12:1d:90:63:
0a:24:36:0f:5e:e1:b5:71:48:67:99:37:38:5f:54:60:98:9c:
87:ae:09:6a:32:8a:06:40:06:4b:5f:0e:d7:ec:74:0a:6b:01:
93:99:99:58:28:f7:17:7b:a4:2a:df:ae:39:32:be:2e:cd:17:
de:7f:e5:7e:b0:52:5b:cb:fb:6f:5c:6b:61:92:9f:78:92:fd:
48:39:62:c3:f8:2e:f5:4b:f4:a5:8f:d6:94:03:5f:f8:46:2b:
91:ba:b5:33:27:68:f6:33:d7:09:47:8e:ae:ce:8b:86:bf:86:
26:b4:34:e3:57:87:57:e4:85:d4:42:f2:03:60:65:5e:90:d4:
f4:32:83:14:11:cf:a6:f3:60:b1:fe:de:3d:56:0f:65:ae:28:
54:d8:07:b3:41:a0:77:b3:d7:6b:59:25:4a:e5:b1:c9:f6:71:
90:f4:fc:b8:e8:da:ca:89:0f:0b:28:d1:10:47:47:a9:14:04:
ce:ff:7c:9b:23:35:54:e2:02:00:3d:92:cf:9d:29:fa:a4:72:
81:9c:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:02:54 2025 by rpki-client