Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: 8UZQEE6XM120QAGdydilwbzcGduptZwdjQWYJwaCBow=
Subject key identifier: 3A:BB:43:EC:3E:4B:77:2C:FD:37:42:EB:15:00:24:6C:FC:23:24:DE
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 0194BC3C72E2397A94DD91FDC58A77560B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0730
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: whPaGVncCDvmbkdP1GbU3XSODJVJF2wRIUxbGil7XyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:72:e2:39:7a:94:dd:91:fd:c5:8a:77:56:0b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=3abb43ec3e4b772cfd3742eb1500246cfc2324de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:c5:32:ca:98:be:11:b8:7d:3b:de:f8:f6:
0e:d8:1b:87:e7:52:80:1d:08:28:1d:eb:e9:42:88:
07:e9:f4:a1:51:87:0f:08:7b:55:e3:68:33:4e:8a:
e2:69:e2:16:6d:de:69:71:5f:4b:c8:10:c9:51:d6:
7f:78:bd:54:ce:62:f3:6f:b1:59:5b:2d:b1:65:90:
9b:91:0a:71:37:15:ad:1e:d2:78:03:9b:e1:69:29:
a3:c1:40:77:aa:54:6b:81:3a:53:4b:b1:04:bd:2e:
ae:5e:d1:31:75:bb:4e:9a:61:8d:07:19:46:c1:83:
fe:a0:d4:3c:1b:c0:3e:19:f3:a0:27:de:71:75:4a:
e3:2c:9f:64:7e:a5:f5:07:74:76:d1:64:78:64:5e:
a1:9d:3e:3a:56:d8:de:75:c7:3b:ee:51:b5:97:a5:
b2:24:ae:b0:d3:68:e8:0e:74:81:0a:1a:1d:b9:c1:
f4:f1:06:0a:f4:ff:9c:42:c1:cf:be:79:82:96:24:
3a:58:74:1d:8e:10:18:39:29:28:79:4e:4e:7f:6c:
4f:4f:ee:5c:72:6e:3b:cf:40:62:2b:2c:55:3e:4f:
92:62:0e:9e:0e:94:c1:5a:30:10:3b:0f:e2:87:38:
0d:76:60:8d:ab:b6:66:80:ea:62:46:29:89:f6:08:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:43:EC:3E:4B:77:2C:FD:37:42:EB:15:00:24:6C:FC:23:24:DE
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e5:1a:79:0b:33:f1:ff:bd:30:37:c0:3e:2b:45:5e:92:a6:
c9:a8:15:6e:74:d8:80:3d:33:7b:a1:09:85:25:c7:77:4a:3a:
90:e2:2e:92:50:14:b2:f2:cb:a9:d7:bd:ed:06:40:54:92:f3:
03:26:50:6a:28:df:1e:11:e6:e0:8d:51:4f:b1:03:7d:ea:13:
62:ab:f0:26:f3:ee:31:a7:8d:91:c3:d2:3d:8e:e7:d4:01:c5:
49:62:99:45:ba:c2:ff:8f:b5:5d:ab:96:60:a7:ab:b2:64:40:
b0:dd:3f:da:3f:1e:3f:80:6c:05:0e:9b:77:03:ba:20:1b:65:
79:b2:8d:91:8a:56:10:54:93:d3:93:bc:3c:02:52:d4:a1:9d:
56:41:67:48:e3:08:b8:5e:d7:99:9d:41:91:e9:1b:47:86:f8:
66:fd:37:b7:34:76:10:83:d8:5b:e1:6c:49:b4:0d:1e:67:0c:
be:5b:6a:ad:2e:12:d6:36:c4:6e:98:73:f4:c5:49:21:fc:d5:
da:b5:43:3a:5f:b6:57:11:2f:49:db:fb:e9:af:d5:31:fd:dc:
4f:ed:de:89:4c:74:5b:2d:35:40:0c:df:89:c7:81:64:6a:0a:
f8:b2:32:6c:d7:48:68:66:fb:92:31:66:b6:9a:34:42:9f:71:
39:65:2e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:51 2025 by rpki-client