Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: uK9zpxX2WN2CvZYpgaC58Pe3+1C0ca/Vy0HNMrjIpIU=
Subject key identifier: 1D:04:71:8D:7C:81:BA:79:B8:3C:09:53:E4:81:CF:1F:A0:82:2A:6F
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 0194BCAA2F863BC33919B43290F4A2109B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 0285
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: qjYmK4qHrxqIg2G9PqkXQQbnQ25O9nlEEZoK0PHBjhM=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2f:86:3b:c3:39:19:b4:32:90:f4:a2:10:9b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=1d04718d7c81ba79b83c0953e481cf1fa0822a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:06:9a:78:42:d5:95:bf:cd:77:c7:f9:38:
7f:ac:b2:bc:68:c0:4a:28:42:5a:f8:9f:5c:d6:32:
c3:23:03:1b:e7:75:ff:d1:8a:62:10:42:d7:2a:77:
ea:89:00:3b:7b:39:27:e2:24:a5:bf:9e:7b:7f:db:
f0:3d:2b:ad:ed:fe:15:86:e3:8e:13:af:f3:66:1d:
06:e3:a0:17:f2:aa:03:d7:6a:49:0b:53:04:03:ec:
db:7f:08:29:bd:78:26:28:69:2c:08:8d:51:68:ee:
11:10:9a:c8:ce:70:4b:aa:00:d2:db:28:0f:f0:81:
67:8a:31:1e:04:36:64:f4:ae:ee:81:e6:7e:a5:b9:
2d:bf:aa:dd:59:55:5e:99:37:c0:1e:50:53:9c:94:
a4:f9:c2:40:f4:8a:7a:01:8d:4b:07:72:9f:20:20:
8c:22:d4:22:d3:5a:42:94:e6:51:fc:40:69:00:f0:
05:dc:80:a4:fb:a5:83:a7:58:a7:5c:01:73:7e:84:
ab:41:18:b4:1f:a4:71:35:bf:9e:a3:1f:71:68:99:
c6:74:ac:40:51:ac:e2:54:d4:10:1a:be:9b:9d:1f:
db:4d:bf:96:f3:5c:74:b8:d1:3c:ed:40:59:bf:d0:
94:8a:72:52:a4:9c:05:b3:b5:07:0b:f8:7b:81:76:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:71:8D:7C:81:BA:79:B8:3C:09:53:E4:81:CF:1F:A0:82:2A:6F
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b8:30:80:4d:8e:b5:eb:c3:31:5a:83:51:34:d5:4c:87:71:
4a:e9:25:3a:a8:52:be:f7:84:4e:33:bd:6f:3f:13:a2:dd:ef:
e9:b3:65:9f:fd:f5:fd:23:5b:48:3f:42:94:6c:aa:5b:da:4d:
9a:3c:90:6c:74:3b:df:f7:3b:e9:26:ac:d4:02:4a:67:57:0c:
79:cc:ea:31:1a:ef:77:3a:02:29:75:3b:a1:cd:6d:23:52:83:
18:4d:32:6a:a7:57:ca:c3:24:13:1b:20:ae:51:b9:7b:a7:bb:
d4:c1:0f:3d:f1:12:a4:76:8c:a6:cb:81:2c:25:98:e2:95:2f:
e6:05:fe:ad:c4:5e:49:01:bf:bb:a6:4d:6c:0a:29:bc:14:c0:
ec:d1:c7:f2:85:40:50:e3:62:0c:74:75:be:38:bc:fb:be:45:
ee:3c:99:53:70:c6:9f:00:39:e4:77:91:fd:15:34:bb:51:29:
19:81:24:42:f0:08:70:e1:5a:03:c4:82:d2:d5:be:98:2b:03:
2f:07:98:d9:cb:07:20:a9:db:47:49:6b:fd:78:76:75:6d:a6:
06:7a:1c:ce:17:ba:c0:59:cc:a5:59:b2:26:3d:c2:2b:2b:a6:
6d:df:72:de:7a:62:4d:26:24:c6:e5:f8:32:d8:7f:4d:b2:f2:
e8:56:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:10:26 2025 by rpki-client