Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: zSbuK8ghDg+LZt5fy1P6MlaLy603inEFCReQgJdQy9Y=
Subject key identifier: 10:24:73:F7:FB:DF:25:4E:97:D6:DB:A8:9B:16:BB:1C:C7:C5:BF:10
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 0194BC7322656B2A4E48EE13C3B0BAECC534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: gYdo8CoHI7BI5//1KZDbLO+IMmoN0UE3FBsJiHQdAVQ=)
2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:22:65:6b:2a:4e:48:ee:13:c3:b0:ba:ec:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=102473f7fbdf254e97d6dba89b16bb1cc7c5bf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:cb:82:54:ef:7d:33:e7:e6:c3:04:c8:c1:
58:62:bc:0e:e1:01:69:8c:a7:75:48:47:01:97:42:
cf:25:ab:14:0d:0d:05:b5:45:80:11:42:b1:1c:45:
e7:e6:df:9f:ff:b8:fd:7c:39:6e:41:f7:e1:e1:97:
b5:8d:df:13:36:8b:b9:23:82:17:43:8e:d9:01:bc:
ef:04:15:0a:6c:32:e7:7e:eb:ee:a0:4b:e7:3e:d3:
26:6b:76:49:b5:2a:0d:23:ed:11:5b:10:3f:f9:3c:
a7:8d:5d:32:1e:68:2b:05:51:4e:9a:57:ff:e8:29:
35:a4:a2:43:6b:a2:ed:e1:4c:3d:24:f5:a7:27:5f:
a2:fd:fc:c9:a3:91:b4:0b:fe:d9:d3:c6:2b:3b:ac:
1a:a1:39:98:f8:c9:92:99:1d:b8:72:8d:0d:63:d0:
e3:8a:6b:4e:ae:73:ed:85:a1:f0:ce:d7:6d:7e:d0:
23:f4:6e:41:d1:ad:b1:24:ff:90:4e:0f:1e:53:31:
d9:52:29:39:7b:ec:0c:c6:38:6c:6b:11:54:26:6c:
99:c3:1c:36:7c:d4:f8:c1:c1:65:62:bb:11:ad:1d:
01:0a:da:c5:db:81:b4:87:3f:7d:59:38:f0:97:64:
1c:70:c9:ae:2a:c9:40:71:35:55:a6:bb:b5:5d:c5:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:24:73:F7:FB:DF:25:4E:97:D6:DB:A8:9B:16:BB:1C:C7:C5:BF:10
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a2:d5:7f:6b:1a:d4:e9:3e:66:3a:4a:75:5a:93:df:fc:8d:
c4:95:cb:33:de:cd:eb:18:d7:57:f0:3d:68:d9:3a:c0:7e:a1:
e7:5f:c8:3a:2d:7d:62:74:a0:32:db:e3:25:c9:3a:32:c9:c2:
9d:51:62:3c:d8:c7:d7:f4:a9:ca:ba:f3:12:a6:cb:cd:19:30:
e4:85:5e:f9:55:d3:6d:ee:9e:58:f7:21:5f:dc:d3:07:cc:0f:
8e:83:d5:0b:79:26:15:96:13:5c:94:e1:bf:bc:2f:9b:61:62:
9a:3a:6f:bf:b8:40:1d:57:d9:6b:58:7a:2c:c4:b4:7c:dc:56:
e4:3f:23:5e:5e:93:1a:1b:6b:af:ac:a0:36:8c:dd:a4:4a:ef:
08:be:0a:be:d4:81:66:54:18:7a:d4:7b:df:a2:f1:86:d1:95:
51:13:fd:0b:09:8e:c0:e3:69:64:78:71:27:ba:ee:3b:87:7b:
b3:66:30:4e:34:6f:63:a0:cf:79:dc:5d:9d:c7:5a:62:96:b7:
c3:a8:55:fc:84:33:da:8b:20:ac:e6:dd:4e:57:8b:60:c3:0f:
a0:ee:b2:81:bf:ff:e3:88:c0:de:d7:08:0c:a7:7f:43:49:2b:
08:c4:e8:cd:fe:50:bd:1c:80:b6:04:28:60:d6:e6:cc:83:a3:
b6:76:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:25 2025 by rpki-client