Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: 65bU++LuJX96zKE9siTnuF2t1NFwaILIDZqBAihtVm4=
Subject key identifier: 74:23:0B:9F:48:44:07:90:8A:35:BA:84:86:14:D0:A9:4C:E4:C2:C1
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 0194BC3C72E8A5A14625E80C178A05D9EDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: TZwzn6ZDYstHVE5maztIkvGc0JGw5ai4PuXw/df6qK0=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:72:e8:a5:a1:46:25:e8:0c:17:8a:05:d9:ed:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=74230b9f484407908a35ba848614d0a94ce4c2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:1f:36:14:9a:78:17:8f:56:79:5e:41:58:
f0:be:eb:a3:39:b9:45:93:75:d2:c5:42:42:91:4d:
d3:94:6c:d3:62:97:5f:62:7e:f8:15:2f:09:4c:6f:
4e:9a:c0:21:7f:74:cc:57:a8:5a:38:15:05:a9:16:
74:24:9a:d8:f0:0a:10:b0:e7:f6:3e:34:85:0c:72:
13:14:02:d3:02:08:6e:1e:9f:f2:c0:fd:bf:07:15:
4e:95:4e:06:bf:b0:f4:ea:51:4c:87:f0:64:ee:44:
59:c5:c4:27:9e:af:94:c7:52:4f:94:d0:5d:23:cd:
7e:25:9f:99:c5:9b:d4:4a:5e:ce:64:b1:9b:24:c9:
40:32:9d:e5:81:9b:3a:df:1f:72:ff:5f:a0:32:dc:
99:4f:f0:03:be:d8:7b:25:01:f0:36:e6:8a:b2:d1:
8c:04:5a:ea:f1:00:e9:8c:40:56:1a:70:e0:a4:f0:
a2:41:04:1b:89:67:cf:ed:fe:25:e8:08:7d:34:c0:
2e:dd:4a:3c:57:d8:be:ff:72:67:2d:ed:bc:a4:8e:
74:e0:40:d7:8d:a2:f6:9f:ba:dd:a0:d8:54:14:03:
de:7a:32:88:e5:0c:ac:3e:64:03:42:7f:71:cd:7b:
da:d2:96:0f:83:22:9f:58:50:bd:02:52:da:7d:3c:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:23:0B:9F:48:44:07:90:8A:35:BA:84:86:14:D0:A9:4C:E4:C2:C1
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:78:3f:f0:07:a9:cf:91:fa:7d:fb:4f:a5:d5:f1:da:e8:d5:
0f:8a:e5:8a:fc:0c:58:d1:47:82:b5:d0:b9:bd:2a:f5:75:33:
ca:72:60:06:40:49:32:c8:9a:04:e8:19:a1:38:3f:f9:49:62:
47:75:7e:fe:5c:ba:c4:65:a4:c0:f7:b0:bb:cd:a1:9d:c0:46:
50:4e:a4:1c:25:b2:7f:b7:6e:20:05:26:91:7f:e9:11:c8:7c:
66:3d:ca:dd:ae:44:b5:57:0d:51:81:e2:da:19:5f:d5:5e:26:
09:d4:4e:19:96:06:48:dc:10:11:f7:cf:8d:cc:f6:23:52:9a:
e3:15:e3:73:51:8c:2f:86:38:eb:3a:aa:32:11:80:03:f1:b2:
dd:52:6e:b0:ce:d9:d0:69:19:2d:87:8e:6c:95:5e:45:31:d0:
34:08:c8:79:7a:f2:50:51:4a:06:47:c5:dc:c0:9a:47:63:82:
26:a0:c1:5c:92:08:7e:c7:1c:80:52:75:ce:c7:33:86:a5:ba:
93:03:8e:4a:af:10:eb:ed:e0:81:52:7b:55:19:b5:08:96:8e:
1c:81:5f:40:5b:aa:e8:c2:17:a2:f2:19:42:9e:d5:9d:8f:c6:
a9:9a:24:dc:47:34:50:8c:ed:41:dc:fc:de:a6:88:39:c4:43:
0a:ab:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:35 2025 by rpki-client