Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
File: ny8WbQXql29prtWORqQfflBSRHU.mft (raw, json)
Hash identifier: xxSNxa1dAoe/cG6NAdpSacBdlniPbuFBCehccCJWAOA=
Subject key identifier: 77:AB:1C:1C:89:DA:DA:93:13:82:10:EE:78:74:79:BE:27:5B:32:D5
Authority key identifier: 9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
Certificate issuer: /CN=9f2f166d05ea976f69aed58e46a41f7e50524475
Certificate serial: 0194BCA9E8AF95D82BDBF80382F28A52A03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
Manifest number: 11A1
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: ny8WbQXql29prtWORqQfflBSRHU.crl (hash: 8weFjK1l248rw0tJsCYl9QMXYyWu4rVaCcC9qrK4/Ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e8:af:95:d8:2b:db:f8:03:82:f2:8a:52:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f166d05ea976f69aed58e46a41f7e50524475
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=77ab1c1c89dada93138210ee787479be275b32d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:26:5f:6f:c3:af:54:1b:92:46:0c:7a:c3:
55:68:cf:ae:9c:ce:9a:35:7e:d8:f1:e7:ab:0b:8f:
0c:09:32:ed:0f:f5:1d:c1:fa:d5:95:7d:da:96:86:
ea:8f:4d:c8:85:f2:fa:14:50:5f:e6:40:be:6f:65:
85:e8:99:e9:86:f1:78:37:74:85:17:95:e9:60:e6:
96:aa:a6:53:70:60:43:cd:43:a5:8b:17:90:01:bd:
9c:16:3f:18:cb:60:91:f7:ae:56:81:7b:09:8e:82:
d8:7a:7c:fc:9f:d1:90:24:bc:99:b8:22:9e:c8:57:
94:66:be:b1:89:8f:d7:0c:02:ae:51:2f:9d:3c:8a:
c4:0a:0d:4c:ea:41:c4:97:03:df:97:54:e2:a0:2f:
f7:c0:aa:a7:3b:7a:db:f2:03:ad:a4:83:d7:d8:96:
a3:1e:f7:8d:80:74:2a:06:28:67:81:40:35:4c:ff:
23:3e:61:09:49:ee:b6:81:71:71:2c:f1:fd:71:0e:
43:53:07:20:40:56:73:0e:61:3a:cd:28:db:5b:35:
e0:4a:b8:41:5b:34:2a:21:ec:70:94:29:83:24:a8:
5d:9c:6e:48:86:1f:dd:e1:7a:0e:ee:58:07:22:5a:
87:17:f7:5f:12:47:b2:15:ac:15:f2:d4:d9:df:63:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AB:1C:1C:89:DA:DA:93:13:82:10:EE:78:74:79:BE:27:5B:32:D5
X509v3 Authority Key Identifier:
keyid:9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ca:34:15:05:0d:97:b1:f2:bb:91:71:17:06:ed:64:47:f5:
af:37:1d:c4:d4:d5:0f:bc:a4:b0:ab:79:f9:59:c1:2e:3c:64:
bc:58:cb:71:51:31:37:d6:f4:0f:bb:df:91:25:1d:82:f5:69:
07:ae:6d:59:10:60:90:97:11:49:2f:7b:ea:cd:89:9a:69:65:
bb:f7:eb:dc:45:1f:be:a2:5d:fb:58:29:6b:b8:68:eb:7e:33:
aa:94:0e:31:8b:8a:4a:ae:5f:13:94:31:44:9f:0b:68:21:79:
b9:fb:a0:fe:95:c6:2a:d7:50:0a:3a:94:4b:68:2d:8b:49:b6:
77:39:bc:c5:64:ff:9f:43:e9:50:2e:dc:a3:11:09:c6:5d:f5:
de:71:15:b4:5f:65:90:d1:e7:26:4a:72:79:29:28:ca:55:b4:
f8:dd:94:12:0a:7b:7b:54:8d:17:62:e9:29:9c:40:d7:1c:ef:
63:27:52:22:1d:1b:d9:b3:30:5f:2c:ad:00:ba:ee:53:4c:29:
d4:4f:e2:ee:41:d4:1e:a9:d7:92:64:5f:9a:dd:c1:94:2a:97:
86:b3:71:1e:6a:8b:66:84:ff:29:32:4b:65:b0:89:b9:13:d4:
29:2e:ad:ef:10:64:06:d1:36:e7:e3:97:4c:7a:10:73:85:84:
e5:67:a0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:55 2025 by rpki-client