Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: H7Nb+7pMC175SzmRXWX1da25QKO5+nNie2RT0IXWVaU=
Subject key identifier: 51:D0:E6:AE:59:C6:9B:AA:9B:36:21:3B:F8:6A:66:CF:A0:53:47:C3
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 0194BD17F15E901169D3977E722C27A17D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: 4sQRqg1wVxHplQEORYtm00xrQVY.roa (hash: J3w9Mg25j1wb94v36vArE3YS5FJrYK6v8WsTSNDodH0=)
2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: etVhWyVB+NHm51ndlE569C8x8PcJ25cimQQ8t+3P954=)
4: v0Pp_40_Je3JS37_jHVbjgvZoEQ.roa (hash: aXXZgq4pgbYYIdcsGFx9uEujPB0OaP/SkcsCiqXmM3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f1:5e:90:11:69:d3:97:7e:72:2c:27:a1:7d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=51d0e6ae59c69baa9b36213bf86a66cfa05347c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:e1:42:36:f4:4f:cf:aa:2b:f9:ab:ce:ac:
dd:0d:31:bc:cb:10:18:2f:27:89:75:f8:7d:be:aa:
c5:90:20:bc:a0:c5:9d:95:30:57:61:05:10:e0:c9:
ac:45:ac:68:d4:5e:81:0b:fb:59:3b:65:69:8c:22:
2b:89:94:b0:39:4a:cc:28:cb:f9:3a:a9:bf:81:e1:
55:ea:bd:9a:b7:e9:01:14:8d:38:04:4b:da:64:27:
a5:8d:6d:a1:03:0e:ff:4c:04:25:87:46:d2:26:9d:
31:d9:86:99:e2:44:a5:e8:8a:8d:f5:5c:56:33:31:
59:55:15:b0:5c:db:3e:39:3a:dd:3a:34:cd:43:29:
ad:09:d2:19:6e:2e:64:26:e0:c8:65:82:0c:61:4c:
35:b6:82:9b:57:32:d8:23:57:5e:f3:6e:97:a9:4d:
ec:48:81:ff:89:46:23:c4:5d:3b:9b:49:d8:4d:1a:
ee:9c:61:24:42:3f:41:53:a4:f5:67:38:c3:a3:6a:
0f:9e:06:dd:c0:12:6d:64:9f:7c:0e:41:15:6c:c9:
64:5f:fa:01:cc:80:41:f2:c6:13:69:80:ca:16:79:
55:e6:f0:7a:ea:12:04:e3:41:ac:6a:e1:70:f8:08:
1c:8c:bb:9c:25:03:82:3f:9b:82:54:fd:ca:8d:72:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D0:E6:AE:59:C6:9B:AA:9B:36:21:3B:F8:6A:66:CF:A0:53:47:C3
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:84:7a:ac:8d:90:64:a3:81:a6:12:6d:8e:8e:a1:b3:cd:22:
f3:8d:3d:5d:fd:00:86:74:91:02:ee:45:b9:ee:b0:f6:f9:90:
9f:3e:ae:b4:a3:55:90:f6:b3:1c:10:ae:2c:3b:55:26:d1:00:
8c:aa:29:30:18:d9:f1:60:2b:e4:d7:8c:52:1f:fb:d8:8d:f8:
13:13:2a:ec:d2:5b:ed:21:2c:1e:00:d5:bf:50:48:09:b6:78:
d1:d2:49:e7:bb:d9:dd:af:69:d5:f6:50:ef:52:e4:32:1b:95:
de:de:17:c5:ec:55:33:90:6c:2e:05:58:5e:1c:23:8d:6d:95:
af:55:19:34:64:f3:19:f2:61:3c:7f:4a:3c:f0:f3:25:7c:f7:
3c:78:a4:16:f6:52:25:21:b6:8a:53:9a:e3:78:5a:c2:20:2e:
87:1f:b4:49:a3:ae:77:c5:6b:41:08:46:b4:fb:da:0f:71:d5:
ad:28:57:e6:91:ea:59:f3:ab:6c:68:c4:d1:c4:aa:37:ea:35:
a4:bc:cc:9b:20:a3:e8:ce:59:12:72:61:9b:9a:7b:51:fa:dd:
d4:bf:4f:41:c6:3a:5b:25:1c:61:eb:45:ae:42:99:e0:ba:d0:
ab:0d:7e:da:2f:27:3d:ec:bd:57:53:18:4a:a9:93:11:0e:92:
94:5f:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:41 2025 by rpki-client