Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
File: ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json)
Hash identifier: L9wKVrE6zDHJBe3wHjCtVJwY/np3ngXx8cPmvsQZj8U=
Subject key identifier: CA:E8:09:3D:A5:B7:0B:44:7D:42:27:B2:38:34:C4:71:4D:26:B0:3B
Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
Certificate issuer: /CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Certificate serial: 0194BBCE10A53B06C44DCEF284E6B39F0F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: k8AkOf1CTQ7pVYSKbaE7Lab9X6BbxxodHGVpCGIEytw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:10:a5:3b:06:c4:4d:ce:f2:84:e6:b3:9f:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=cae8093da5b70b447d4227b23834c4714d26b03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:2d:b2:ce:ec:36:b6:6c:93:ff:dc:68:4f:
ec:31:dd:3e:b8:6b:cb:6c:ae:1e:88:fd:3a:a3:0b:
03:f3:33:f4:bf:91:31:0f:d1:d9:ba:6f:cd:97:71:
f3:39:a1:04:7c:da:0f:5a:be:fd:b7:4c:aa:fb:dd:
8c:58:30:e4:f8:ef:f1:ba:fe:09:e0:a5:2d:31:4a:
7e:16:d3:c4:90:7d:9e:b1:de:bc:40:56:2d:89:4e:
e4:56:12:21:4c:83:ab:e2:0a:39:11:f6:33:be:ca:
f1:88:d0:08:2e:f0:1c:36:03:12:0b:80:db:a7:6c:
a3:5a:84:44:99:ed:74:18:a3:96:7f:f8:3d:1e:43:
11:06:c4:ef:e8:36:ca:97:85:0d:b2:0b:2d:d8:22:
2f:af:42:e0:3c:d0:84:f8:b8:a1:6c:e1:47:a6:15:
33:6c:7b:4c:85:ba:b9:da:3c:05:82:a9:f8:82:0c:
92:8d:ec:f0:55:ef:85:4f:ba:5d:99:a7:82:02:dc:
eb:5b:ee:3b:a3:09:f0:3b:90:dc:10:60:c7:bb:2c:
e0:6c:57:81:34:20:3f:af:6b:66:0c:6a:f5:41:d6:
1a:7d:26:d7:ad:69:86:6d:44:b5:f5:74:15:fe:5f:
43:d0:4d:ca:6d:c3:3b:57:e6:95:ea:b5:ee:17:a4:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:09:3D:A5:B7:0B:44:7D:42:27:B2:38:34:C4:71:4D:26:B0:3B
X509v3 Authority Key Identifier:
keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8e:c8:46:f8:73:d1:fe:f0:04:fb:94:e5:8a:64:eb:ed:5b:
42:39:b1:50:68:fb:83:61:91:91:72:fb:a9:ee:cf:65:82:ef:
0b:20:d9:35:08:0d:c9:0c:ee:05:69:29:aa:7b:5c:07:7b:ac:
2e:1f:a3:e1:ea:87:af:2f:65:df:b2:f8:6f:3f:8d:0e:1b:55:
63:d3:16:e1:3e:a7:aa:73:78:35:a6:53:00:a0:f1:22:7b:2f:
d1:ea:a9:41:3c:90:b4:0a:d9:65:d5:d5:b5:ec:b1:a3:8c:6f:
7f:a6:36:b1:8a:2a:46:86:a4:bd:b4:1d:8a:20:05:85:0c:8a:
e9:aa:46:8d:48:97:f5:60:3c:c1:74:eb:cf:49:19:d3:04:46:
33:0c:cd:45:ae:0e:34:70:b0:a3:2d:8b:ae:22:05:ef:93:25:
8f:de:e6:15:14:c5:22:e4:fc:38:7d:0f:a2:c1:1c:fc:6a:a0:
94:f0:87:f4:bc:93:15:af:fe:68:52:34:8e:f7:63:48:32:d6:
69:c1:ea:11:4d:05:b9:0e:7f:00:53:1f:8e:fd:da:43:08:e8:
ec:d4:a1:11:0c:3f:29:36:31:ee:ca:c4:3b:40:18:f5:21:9d:
c0:35:bc:26:a2:3f:66:f9:17:12:cb:56:ee:45:5f:cd:fa:b4:
4b:c3:ed:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:38 2025 by rpki-client