Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: 8Dr1eNZd6hXaZ56fCOrUo6j5qo+8N2WqEym81/j/G5k=
Subject key identifier: 4D:CF:F9:0D:3D:5C:C6:18:3F:6B:4F:0B:BD:E5:F5:5D:B9:75:F5:B0
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 0194BBCDC13D4DCC2AFAE512C4B3CF75A799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 0D8F
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: iHRJRHSyGQiJ/f6bJAfV84GE4Sk05OKuquNKIQDFyMM=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c1:3d:4d:cc:2a:fa:e5:12:c4:b3:cf:75:a7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=4dcff90d3d5cc6183f6b4f0bbde5f55db975f5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:61:0e:7b:59:13:b8:dd:b0:dc:11:88:93:
9c:ac:bd:de:a4:3f:f2:2b:ad:ff:86:56:82:6d:23:
0b:e3:fb:c5:50:ec:3f:8e:11:34:52:53:f5:b8:e7:
fd:f2:72:8d:f4:f3:c6:7d:c9:b7:7a:de:b5:87:4c:
e7:69:25:69:87:66:22:60:62:8d:4a:ee:4c:64:95:
e1:ed:ad:a1:71:ff:6f:14:9c:41:3c:e7:71:ef:24:
15:8b:3d:fc:96:9f:51:80:48:7f:7b:c3:a2:ee:54:
bc:c6:1b:e0:da:9f:30:d3:a7:4f:3a:1d:69:3a:0d:
cd:98:74:e1:d8:62:03:52:e7:67:49:2f:ea:78:ed:
17:4b:cb:2e:97:7a:84:40:b1:03:6f:04:88:11:be:
3e:0b:99:58:86:74:dc:34:fb:a5:5e:61:06:71:2b:
90:4b:a9:90:3c:9f:2a:38:47:81:88:5a:e2:20:13:
84:db:40:11:a6:25:24:80:d0:66:7e:3b:30:27:89:
3a:1c:82:f6:b1:5e:39:95:a0:c8:15:c9:74:54:5d:
9e:b3:ca:47:b6:78:9f:75:fc:e3:99:c0:5f:a2:7d:
4c:ee:07:f3:10:24:b3:a3:09:8f:fa:13:42:63:b7:
6c:20:ee:30:3c:9b:e6:ed:1e:e1:32:c9:61:48:ec:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:F9:0D:3D:5C:C6:18:3F:6B:4F:0B:BD:E5:F5:5D:B9:75:F5:B0
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b4:1c:6d:2c:6e:c1:10:7a:15:9a:03:8b:be:cf:c7:cb:56:
aa:d2:93:80:13:bd:c2:3f:bd:70:8d:5c:79:f2:9a:85:04:db:
f4:1a:52:a0:3e:60:b2:27:f0:60:fa:9d:3c:ef:18:7b:9c:34:
b9:27:60:47:33:d2:1a:8d:73:0f:89:6c:e5:49:d3:1c:4b:46:
49:d1:b0:5f:24:d5:39:fe:65:be:ea:2b:50:5d:5c:5b:01:0a:
70:b9:b3:95:11:be:18:09:0f:7d:9c:30:da:33:87:30:91:d1:
ee:c9:c1:f1:ef:c7:e3:2c:e2:09:29:b5:ce:58:69:88:3b:55:
43:7d:c0:4a:07:8d:b4:3b:e0:92:3e:b6:1d:ab:42:de:ce:2c:
74:e7:c5:97:4f:3a:b8:b2:0e:76:7e:7d:4b:61:0e:80:e7:db:
d8:f3:c1:5a:b6:91:97:55:27:71:0f:3c:21:c4:ec:11:f3:f0:
25:6c:b5:b4:f9:23:8d:ab:c7:29:de:67:98:c3:0e:ca:18:92:
80:e2:77:ab:b3:6d:72:5b:e6:66:75:7d:36:e5:df:c1:23:4f:
de:21:de:e2:7b:77:73:f4:80:87:ea:4b:16:e5:66:40:f6:a1:
06:29:2a:25:53:86:8e:4f:40:4d:01:99:83:0c:5e:67:26:0d:
94:d0:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:19 2025 by rpki-client