Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: 4ER/RA+g+WFgeCM9D7mRy+3t9qXIT7cVuxt7hTULO7s=
Subject key identifier: 9B:AB:6C:D6:DF:EF:DA:CA:3C:12:FB:F5:2B:97:31:4E:DB:5F:0B:9C
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 0194BCAA3027786D210D9AADDB10146B54C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: cEI+6A9h9vFrPCQjQCpPtJHx2FdjLhcjMUNAsHalfbs=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:27:78:6d:21:0d:9a:ad:db:10:14:6b:54:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=9bab6cd6dfefdaca3c12fbf52b97314edb5f0b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:5e:0f:90:c7:c6:b0:d4:42:a3:b9:f5:4e:
96:1e:b2:05:91:c2:cc:82:91:e1:e1:84:eb:1c:88:
fe:5c:9e:06:18:d8:41:48:6b:a5:28:71:92:8d:94:
25:62:82:8b:25:18:c0:4d:fd:70:ba:2c:90:26:85:
82:ec:d4:5c:c6:51:23:7a:a3:b8:da:89:a4:eb:c1:
1b:7c:d4:98:b1:63:d9:2d:14:76:2f:0a:c5:41:2a:
44:15:ec:89:83:bd:39:90:78:12:71:f0:00:02:85:
a1:48:27:cf:e4:d3:1e:04:d5:9b:54:20:a1:d4:1b:
69:20:3f:bf:dc:da:ff:69:0c:79:31:3c:6e:6e:66:
5e:1a:45:75:4a:71:5a:71:28:b2:5d:98:64:ed:c8:
a8:16:23:c2:84:4d:03:4c:bc:19:68:4f:44:b6:40:
88:b1:d3:09:6e:b9:93:41:e0:a4:da:3f:47:87:85:
f0:a7:48:c3:3a:5d:eb:a7:aa:92:40:c1:0a:6b:30:
5b:59:d4:2b:a8:96:07:c2:10:ab:db:c6:27:ae:bb:
fc:bd:e1:c1:05:77:6b:62:40:48:d4:e5:3c:0f:8c:
ab:dc:57:11:c9:4c:82:ab:27:50:a1:31:79:0e:78:
39:6c:8a:dd:11:c9:95:1e:d5:08:89:69:9e:15:cc:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:6C:D6:DF:EF:DA:CA:3C:12:FB:F5:2B:97:31:4E:DB:5F:0B:9C
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:f6:0d:73:52:e4:ff:53:4c:1d:e3:91:63:85:20:ec:b8:
ab:83:b5:0a:71:2d:c3:30:22:81:4b:4c:64:cf:14:fc:c8:cc:
10:c8:31:7c:9e:4e:04:ae:4b:34:e8:cf:48:43:4e:24:17:2d:
66:fb:49:5a:a2:7a:f3:53:6d:ad:6a:90:66:f2:ae:57:aa:4e:
89:28:54:d3:d1:a9:79:e8:bf:fd:a2:c6:01:08:b4:97:96:fa:
31:d7:df:30:fe:0e:c7:5f:1c:bf:8f:13:73:c0:c7:fb:24:6f:
f1:c4:8b:a4:4c:83:3d:20:97:03:99:38:50:cf:e1:81:6f:66:
c5:ed:46:d6:ff:8b:81:e1:82:ca:02:bb:53:38:5b:f3:f7:dc:
b4:e1:6a:6d:81:6b:4d:7d:d0:ff:26:d6:5d:9c:ef:62:80:be:
1b:35:15:48:d7:93:e5:e2:b2:68:e4:6e:f9:3e:25:83:ed:c7:
97:40:cd:f2:6b:b8:3e:db:9f:d3:0d:43:40:01:92:da:de:85:
4d:9d:35:6e:cb:98:9b:d2:f4:98:9f:fc:cd:2a:06:c9:aa:85:
ec:8b:a0:72:f8:1e:7b:ff:58:fe:fe:2e:60:b0:b7:54:be:5a:
6d:52:98:09:57:07:05:ce:c0:34:9b:25:ed:93:7e:fb:04:fb:
b3:c7:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:26 2025 by rpki-client