Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File: NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier: 6s0cQVsFPt3ZMFbiA9NdQ6CrCQxHma1HRd8srw4+E7k=
Subject key identifier: 22:D9:23:53:79:D0:69:64:08:F6:A7:E6:29:8D:36:16:8A:9A:B9:1C
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial: 0194BC04AB291F8AAEADEA0E1E36CB326E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number: 0D99
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: hO+TX+5xxGhU7MI2L7QLG3Lst4bnIKIfTbYsuWTweFQ=)
2: raSmxoHnzmzGBzTkG0MLkl3VZgs.roa (hash: lXV0TrwdE+JtNBRnmGgOqwwu3Hr9XSo7ebZyvtagFuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ab:29:1f:8a:ae:ad:ea:0e:1e:36:cb:32:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=22d9235379d0696408f6a7e6298d36168a9ab91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:e7:72:7c:0e:80:ed:7b:ef:4e:4a:ee:d0:
59:38:70:4a:89:b6:07:7e:98:6c:89:2a:a5:4b:d8:
27:60:0a:f5:b4:b4:3d:c0:40:ab:6c:51:6f:2b:06:
64:c5:cc:36:24:b1:c2:b0:8c:b4:62:04:ef:f0:15:
45:87:83:57:49:57:9c:92:76:7c:90:0a:9a:9c:9c:
3f:9b:ae:45:13:29:22:17:d4:24:52:d3:1b:1b:b0:
ff:d7:dc:13:17:d1:fd:1e:01:43:5d:f2:b3:78:0f:
71:71:5f:c1:4b:08:ca:52:33:cf:43:01:aa:c9:ba:
4b:da:82:10:af:76:57:59:06:46:4f:e6:f5:df:3e:
89:4f:2a:af:ff:70:78:0e:4b:6a:43:45:71:26:93:
58:60:69:80:6f:25:3f:f9:79:6e:9d:e4:b3:ba:6e:
2f:da:5d:5e:f0:dc:ce:11:6f:50:bf:75:a4:0c:9d:
56:5b:5a:e1:79:e0:96:8f:e6:21:32:63:2f:a8:cc:
d8:4b:e2:ac:18:01:ae:76:b0:22:b3:45:28:27:28:
8b:cd:37:e5:54:06:a7:63:62:ff:fd:df:cf:2a:6c:
cd:53:3a:29:a5:cb:89:a4:72:54:a9:54:77:2e:e0:
18:ea:b3:3a:d7:72:74:0a:c8:02:d7:61:22:a2:ea:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:23:53:79:D0:69:64:08:F6:A7:E6:29:8D:36:16:8A:9A:B9:1C
X509v3 Authority Key Identifier:
keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:10:3a:46:20:b4:e5:d2:9d:3d:7e:20:9f:ed:73:d3:3c:0d:
bc:0a:2e:3d:a9:9a:ac:dd:c4:4a:49:e0:07:d3:2f:32:1d:6a:
9c:b3:4f:80:ec:11:64:89:9a:d1:b5:4d:80:c9:df:5b:d7:63:
b4:e0:17:5f:4f:23:14:ab:1c:45:50:ff:58:fb:10:f6:cd:fc:
27:df:b2:0a:5f:4c:b4:d4:5f:c2:ea:0d:c2:dc:1f:07:a2:e7:
6f:65:32:46:15:09:47:40:6f:ad:e7:67:31:83:c2:8f:74:a9:
21:47:aa:d7:fd:d8:0e:9a:3b:22:f1:4b:c5:72:8b:50:09:e9:
49:f6:49:b6:49:58:6c:bc:08:9d:8c:eb:89:3a:19:8e:35:a6:
22:36:64:1b:bd:ed:34:91:2b:83:d8:32:91:36:76:cf:65:e4:
55:17:ea:02:21:a6:e2:32:83:5b:1f:07:19:65:6a:1f:46:a0:
c0:17:2d:d8:8a:8b:eb:02:53:50:b8:ad:66:f4:a4:20:c4:89:
22:92:6b:27:70:3a:29:fb:2d:39:2f:0b:b5:fc:d3:bf:92:27:
b4:ed:7f:79:4a:c8:b5:b6:35:01:dd:d0:54:48:f9:c0:8a:5e:
7e:ea:c7:8c:9b:85:83:1b:07:c6:5e:75:76:26:13:02:c4:02:
1c:72:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:57 2025 by rpki-client