Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: PNevwfRuIiRLc8SjP/cH8y+zwfVLHgIZf+3Gefvp/RQ=
Subject key identifier: 65:63:66:2A:03:58:19:1A:3F:24:93:C1:3D:AE:23:8E:B2:3D:F3:DE
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 0194BD17A9EA102DB790DB3783725B8A1B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0CAF
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: CflKCtf0JFvuwJnbA0R2v4q7fqU8kh4Q8P90ipBv1h4=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a9:ea:10:2d:b7:90:db:37:83:72:5b:8a:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=6563662a0358191a3f2493c13dae238eb23df3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:70:92:f5:9c:3e:dc:ef:d7:e7:df:97:7b:
a4:13:b3:68:90:6e:f0:a3:a1:91:65:88:f6:0d:62:
86:88:d6:71:f4:a5:a7:3c:26:d3:61:97:e0:a3:07:
c4:52:7e:52:f9:05:48:1d:22:bf:e5:68:37:3d:ab:
20:2a:c6:1b:b3:26:69:f8:e8:98:ee:78:0a:42:c8:
fb:d5:4c:bd:5f:69:64:e0:d5:1c:e2:5f:81:eb:82:
1b:7f:e9:91:4b:f3:81:a0:c9:a8:46:cc:dc:3f:d0:
d2:3d:cb:ed:92:2d:13:58:ac:f7:22:14:95:4b:17:
a4:92:f8:b5:35:1c:67:b7:38:b9:b4:66:8e:f8:b7:
a2:9a:41:49:e2:5a:c0:eb:4d:fb:aa:bf:45:00:e6:
6b:a6:70:33:2b:71:d3:a3:b9:ab:2d:05:42:ca:da:
aa:8a:c3:eb:32:4c:5f:92:51:a1:fd:7c:7c:a8:c1:
ba:28:ab:23:25:9c:36:ed:1f:af:13:07:da:e4:14:
1c:70:40:c9:c6:04:0b:79:7d:c7:2e:1e:b9:32:ee:
32:b6:96:b3:79:34:11:b1:d5:4e:16:0f:bf:58:67:
8e:4f:4c:55:4b:bd:9f:4b:ec:03:0e:ce:8e:c3:de:
3c:8d:3a:4a:01:33:82:b6:d8:bf:65:d9:78:4f:b6:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:63:66:2A:03:58:19:1A:3F:24:93:C1:3D:AE:23:8E:B2:3D:F3:DE
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:09:e9:4b:65:75:12:c6:bc:47:60:9a:f9:ec:5a:b0:60:1e:
71:f6:8f:7f:b6:05:67:ae:04:0f:7f:db:40:7b:c0:9c:12:bd:
74:18:9e:64:11:3b:f1:c0:04:5d:66:d3:35:22:c6:a9:c9:6d:
c7:a0:a8:4c:e9:ea:d1:67:b2:d7:60:ad:a6:47:f9:59:e8:d3:
21:ce:62:97:7a:d3:b4:65:00:e5:f7:ef:6f:bc:b2:f6:9a:38:
35:fc:24:bc:7a:82:aa:0f:68:75:6e:1a:cb:7a:9f:c1:26:82:
e4:25:71:7a:90:9b:45:82:54:57:b8:e0:fd:58:fd:d2:83:f8:
ce:fa:fd:62:05:31:a4:43:00:73:15:e6:56:d9:88:ad:cb:4d:
f7:6c:7a:8b:78:9b:4c:5b:8d:05:67:4a:13:51:01:d2:c8:77:
46:09:6d:30:f9:e4:c6:e3:ab:b8:1f:1d:f5:b4:90:57:14:b7:
57:20:72:bd:14:4a:85:6c:11:65:a8:51:37:0d:59:3e:7f:57:
b8:d6:69:f6:33:b6:67:80:d6:75:37:4e:de:5c:4b:56:5a:f9:
dd:22:d0:c9:b3:57:8e:5d:e8:62:ce:cc:7d:00:f5:1f:4d:d4:
ca:ce:8b:33:df:5e:89:28:f3:2d:9c:8f:a0:03:80:cc:d9:39:
a4:ca:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:32 2025 by rpki-client