Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
File: NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft (raw, json)
Hash identifier: 2MjB4RWaqd3YEUHm771gOShr1sTeRHbonxtxZ4cVbfE=
Subject key identifier: 8C:28:6E:AD:30:57:09:E4:7A:17:A6:CE:A9:2E:77:83:06:1B:7B:FB
Authority key identifier: 37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
Certificate issuer: /CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Certificate serial: 0194BBCEBD91E92347D56F7119A1D836002C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
Manifest number: 114A
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl (hash: kyp0zrU+qif2dLuphTCGM7ALXHnF4n6YcnIdrbrfFQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:91:e9:23:47:d5:6f:71:19:a1:d8:36:00:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=8c286ead305709e47a17a6cea92e7783061b7bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:15:8e:15:2f:70:16:f5:c6:0a:cb:6d:81:
73:94:80:83:b0:87:e7:a5:15:28:c4:e2:de:ae:1e:
91:2a:b5:ba:25:7d:99:80:fd:4d:ad:aa:43:0f:17:
91:8e:a3:0b:21:d9:9e:e6:16:59:76:e1:a4:03:88:
e2:b2:12:4f:2d:eb:00:92:3a:20:08:78:e9:e1:94:
06:47:9d:85:59:8d:7c:44:0e:90:4d:85:e6:ae:4f:
ef:1e:2c:2f:38:88:21:21:54:5f:f3:2f:08:2a:26:
1d:3f:b6:39:35:2a:9b:32:77:f8:73:80:58:04:0d:
43:b4:63:80:d0:37:9f:4c:15:24:75:cd:4f:16:89:
46:76:4f:5f:90:70:4f:ac:99:59:1a:b9:5b:b9:1d:
06:7b:56:4c:3c:83:09:23:1d:f5:37:2d:c9:c3:9e:
4b:fc:e6:fa:65:3b:30:0c:86:50:40:89:6e:34:99:
a6:c9:15:4a:df:c3:98:30:9f:9d:20:16:19:a6:6e:
cf:bd:a7:3e:8c:62:40:a6:b8:cd:02:e1:57:02:9d:
53:e5:84:9e:a8:e2:be:ac:b7:c7:d0:97:a8:ff:52:
91:d5:68:ed:c8:39:44:6e:ec:4e:94:cc:5b:6f:d8:
18:ea:3f:cb:90:89:16:5f:3a:d3:df:13:ac:81:2c:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:28:6E:AD:30:57:09:E4:7A:17:A6:CE:A9:2E:77:83:06:1B:7B:FB
X509v3 Authority Key Identifier:
keyid:37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:a5:7d:94:60:87:75:26:aa:7e:29:9d:cc:1a:21:d2:1f:
04:a2:13:64:ae:6e:f3:06:25:68:19:2a:20:58:b0:ca:40:e1:
21:3f:92:d7:51:f3:e3:04:22:35:60:8a:54:c3:2b:a9:5f:cd:
4d:45:c5:b1:3a:bd:6e:10:66:a1:78:19:bd:8b:56:e4:ee:f9:
f4:0f:ac:2d:b3:84:3f:99:f1:f8:74:1c:da:b5:f1:65:ed:5f:
b9:2b:e1:8d:17:97:5a:1d:89:80:7c:42:ba:2f:21:0f:43:08:
31:bf:d0:ab:0d:ae:4b:bd:31:61:af:17:b2:8e:f0:1c:ad:bc:
2f:e8:b1:02:60:70:f0:c1:99:b1:f1:65:34:f9:a1:0f:7a:17:
2a:e6:f9:c7:73:54:e6:15:ff:d7:2d:bd:30:83:8a:69:b6:b4:
3a:06:05:dc:93:ec:0f:a0:e8:d1:30:20:ea:ee:ec:0e:ea:4e:
4f:69:2d:0c:66:d6:68:b1:00:84:1f:4e:28:fc:06:14:e0:e0:
74:f1:ee:10:d3:67:f4:3c:34:79:c1:a6:2e:53:76:6e:63:93:
5a:9d:43:88:89:a0:35:a3:cb:28:cc:30:10:a1:ff:f3:20:46:
54:b7:27:52:b0:96:cc:24:d0:da:d4:e3:ab:61:a5:78:de:d2:
c7:87:77:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:34 2025 by rpki-client