Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: JExZxqY9TRIpSuo3CgkKYITxH8vrzR/maqwIc+bKrRs=
Subject key identifier: 8F:17:D4:05:5F:9C:80:17:3E:51:B7:AD:F1:88:6A:5F:F8:7E:6F:24
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 0194BBCDD2E0DB18E5131716E2F5F2F3223B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 016F
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: MwDCq1EmIsMbwggk4XLUJN6nomawOT4E6dDxxlThWWw=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d2:e0:db:18:e5:13:17:16:e2:f5:f2:f3:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=8f17d4055f9c80173e51b7adf1886a5ff87e6f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:64:3c:6f:2e:33:26:47:a9:cb:73:3a:1d:
c9:a9:a1:cd:55:97:ea:04:1e:bd:62:ee:e5:ab:93:
4d:c6:8c:40:47:cf:19:3d:d8:49:d4:e8:81:f8:a0:
7e:9c:10:ac:f9:3d:3d:00:40:5c:53:1e:76:85:39:
cd:21:0c:6a:11:1f:2a:53:89:99:df:4f:93:be:80:
7d:7a:36:40:c9:21:99:4c:a3:a0:4e:a9:69:85:a7:
7e:3c:a5:6c:a3:69:00:16:c7:8f:16:39:f5:49:52:
31:96:4d:b3:b5:0a:c3:27:2e:0d:45:7c:26:02:d3:
ad:40:64:4e:2a:3f:34:92:ef:e7:d3:41:09:b1:2c:
1a:0a:85:5a:5c:f5:7f:5d:2a:c1:2c:95:15:01:e5:
06:fa:ae:ff:c8:6e:53:6e:6b:b6:46:0c:d3:10:2f:
4e:07:c4:13:eb:cc:e8:3b:63:4b:fc:0a:27:2c:99:
41:6c:83:81:bf:51:6c:57:17:2d:82:e4:84:9f:8b:
0e:b8:e2:2c:b9:1b:50:f9:54:cb:8f:3b:9c:b4:49:
cf:8e:86:28:15:ab:3c:d9:7c:f6:e0:36:dd:61:47:
29:b0:0e:a1:0a:26:f9:5e:48:d0:64:8b:85:0f:33:
9c:db:91:04:e0:c3:34:f3:1e:d5:b7:9a:68:79:80:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:17:D4:05:5F:9C:80:17:3E:51:B7:AD:F1:88:6A:5F:F8:7E:6F:24
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d0:d5:0c:41:d6:1c:f8:b6:eb:57:e8:47:7a:8d:54:b0:c6:
37:f8:73:5c:d0:30:30:06:50:f0:13:95:6c:81:a0:a0:9a:4f:
82:97:0a:db:6a:e2:67:71:3c:a4:91:a9:22:5c:91:c8:1b:fc:
71:eb:4d:47:08:6e:ab:20:0c:7f:6a:3d:95:c8:e8:cf:96:ef:
e7:da:07:72:96:30:7b:ba:28:cc:01:c4:2e:c8:4f:0f:f3:d5:
51:36:39:93:ea:a6:85:9b:e7:24:2f:be:d7:09:48:60:ba:30:
12:cd:6c:03:db:23:4b:5a:a2:38:b9:ff:64:ed:74:4c:36:4c:
37:dd:5c:83:14:62:eb:34:8c:55:a2:21:d0:5e:a7:d7:86:66:
ba:09:9a:9b:81:b4:3c:07:18:1d:c2:a0:e4:e9:e7:75:d2:df:
f4:4a:bd:fd:7a:2a:1b:80:15:a1:49:4a:60:ee:10:93:b5:52:
2a:b7:a2:a2:db:72:e3:69:51:24:7e:30:e1:34:9c:dd:78:d1:
46:d4:b5:7f:04:c2:ab:59:9b:5a:2d:01:bc:60:d4:38:f5:e5:
91:96:a0:25:87:2e:fb:d2:bf:61:8b:e9:42:70:2d:5f:96:43:
ca:5c:b8:90:15:76:58:00:c3:dc:b1:96:65:ba:9c:2a:fa:b0:
22:55:2d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdLg2xjlExcW4vXy8yI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjhmMjljZDM3ZDc3NWNkNjRiMjI1MjA1YzM4MzNjM2U0
NGQ2NjEwHhcNMjUwMTMxMTAwMDE1WhcNMjUwMjAxMTAwMDE1WjAzMTEwLwYDVQQD
Eyg4ZjE3ZDQwNTVmOWM4MDE3M2U1MWI3YWRmMTg4NmE1ZmY4N2U2ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH9kPG8uMyZHqctzOh3JqaHNVZfq
BB69Yu7lq5NNxoxAR88ZPdhJ1OiB+KB+nBCs+T09AEBcUx52hTnNIQxqER8qU4mZ
30+TvoB9ejZAySGZTKOgTqlphad+PKVso2kAFsePFjn1SVIxlk2ztQrDJy4NRXwm
AtOtQGROKj80ku/n00EJsSwaCoVaXPV/XSrBLJUVAeUG+q7/yG5Tbmu2RgzTEC9O
B8QT68zoO2NL/AonLJlBbIOBv1FsVxctguSEn4sOuOIsuRtQ+VTLjzuctEnPjoYo
Fas82Xz24DbdYUcpsA6hCib5XkjQZIuFDzOc25EE4MM08x7Vt5poeYCWCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8X1AVfnIAXPlG3rfGIal/4fm8kMB8GA1UdIwQY
MBaAFDco8pzTfXdc1ksiUgXDgzw+RNZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgt
MTM4MTdmZGJlYzA0LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgtMTM4MTdmZGJlYzA0
LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNDVDEHW
HPi261foR3qNVLDGN/hzXNAwMAZQ8BOVbIGgoJpPgpcK22riZ3E8pJGpIlyRyBv8
cetNRwhuqyAMf2o9lcjoz5bv59oHcpYwe7oozAHELshPD/PVUTY5k+qmhZvnJC++
1wlIYLowEs1sA9sjS1qiOLn/ZO10TDZMN91cgxRi6zSMVaIh0F6n14Zmugmam4G0
PAcYHcKg5OnnddLf9Eq9/XoqG4AVoUlKYO4Qk7VSKreiotty42lRJH4w4TSc3XjR
RtS1fwTCq1mbWi0BvGDUOPXlkZagJYcu+9K/YYvpQnAtX5ZDyly4kBV2WADD3LGW
ZbqcKvqwIlUtZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:05 2025 by rpki-client