Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: l10ueJM9HyeQxQ4DXw+76Ij4q1esHXohJHHcN1sUPhU=
Subject key identifier: ED:52:39:33:94:9C:A4:04:FF:29:93:A8:2B:EE:62:5A:F3:C3:C5:EF
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 0194BCA9D412B6D6523457EBF656AB67E535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0D61
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: fi3nTr/vp4HCk1u03qwPK56tGE2BJufXpy4jgqmuhVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d4:12:b6:d6:52:34:57:eb:f6:56:ab:67:e5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=ed523933949ca404ff2993a82bee625af3c3c5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:a0:95:4d:d0:77:ff:a7:f6:44:af:88:23:
4b:d5:3a:20:79:dd:78:38:fe:e6:72:c6:2f:d4:61:
0c:b2:f3:80:1d:d4:3a:5b:d4:c2:83:86:78:d1:cf:
2c:97:c7:a3:c8:18:ee:0a:fe:78:c1:83:c2:2c:7d:
98:2c:1d:11:5d:48:8f:c0:9b:06:20:05:6f:e1:7f:
f0:8b:54:69:e4:c6:49:26:9c:d0:9c:45:fd:a0:8c:
9b:71:4c:b4:8a:fb:f9:22:db:92:4b:aa:19:31:4e:
d6:d5:1a:8d:dd:39:82:41:6d:64:1a:7e:8e:30:72:
d6:f0:df:12:5f:fd:1f:2c:a3:36:1f:c6:3c:7c:c3:
72:fe:8c:36:56:a0:b9:57:f0:3c:91:31:bf:f6:0f:
04:6f:e1:15:ed:9e:6f:d1:f4:c0:e9:ec:87:c5:3e:
d1:54:6e:fa:97:d3:5d:75:fb:08:29:a2:3c:2e:05:
04:69:fd:ea:51:69:7d:e1:04:a8:89:cf:cf:39:e7:
16:aa:95:e1:c8:23:76:62:aa:48:02:08:8b:10:20:
ae:24:d3:9c:b1:02:39:14:ac:c1:45:bf:ec:da:22:
23:df:bd:de:32:98:37:85:0b:e0:41:d3:50:31:39:
f4:77:4b:a1:aa:86:fc:42:dd:12:c3:6e:39:f5:02:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:39:33:94:9C:A4:04:FF:29:93:A8:2B:EE:62:5A:F3:C3:C5:EF
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c1:52:3b:87:9a:9f:39:4e:14:77:bc:da:fc:58:f6:2f:4c:
af:be:0e:af:64:99:b3:39:3a:08:7b:62:c9:0f:f3:ea:5b:1c:
68:a6:1d:6f:98:9f:fa:80:ed:83:b0:c1:aa:55:e2:bd:b5:cf:
ab:19:4c:55:da:c9:16:22:6a:7e:60:2d:81:bd:78:7b:79:71:
ed:91:29:3b:ed:14:ee:4f:ad:e3:56:ca:40:eb:9a:a4:e3:d7:
d9:14:a6:dd:ce:70:3e:96:93:fd:78:66:0e:81:55:fd:04:c8:
c0:1d:00:3b:e3:ea:9a:cc:0b:71:77:e8:82:bd:d3:17:84:fb:
2f:4f:3b:18:ef:7b:9f:ad:82:4c:b6:3b:1f:e1:c2:e1:4e:7d:
ea:bc:47:e6:2d:d3:fb:c4:b1:4d:1e:da:25:a3:1c:74:8a:fc:
80:95:56:f5:58:3c:bb:f5:45:b4:05:23:a5:d2:5c:7a:bb:cf:
fd:67:2e:33:1f:de:56:a7:25:c3:e2:f9:04:37:5a:c7:6c:84:
0f:56:cb:d0:01:11:8b:d2:b2:f3:8a:d4:fb:64:62:3a:41:39:
e4:df:70:da:6c:24:e6:74:ae:dd:fe:33:69:ed:e1:b9:b9:67:
33:bb:97:83:19:51:ee:4e:dd:d5:e5:5d:5c:6b:36:2d:01:5b:
74:67:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:48 2025 by rpki-client