Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: RdMiPkuSAPed8ZxBg/RhacZu9iPpgoy/vPEkQi3Ok/k=
Subject key identifier: 60:51:B8:86:FE:E0:D5:7B:CB:3F:93:81:A4:7F:3B:3F:64:BF:E1:18
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 0194BC0512F5B8B36C4820179FA1DAA321E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0AEB
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: uM/Odvp0uatYJcMTsHpbIXegrbRCdzxpjO3yGCljH9o=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:f5:b8:b3:6c:48:20:17:9f:a1:da:a3:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=6051b886fee0d57bcb3f9381a47f3b3f64bfe118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:70:4d:8d:25:96:c8:e0:ca:60:39:6b:dc:
6e:de:be:11:96:77:68:3f:5b:64:74:62:9f:d2:3a:
4d:9b:aa:de:03:e2:a5:b3:e2:b5:fe:12:a8:7b:f0:
5b:36:0e:ed:3c:60:b5:aa:25:a5:48:bc:09:c7:99:
11:76:5b:7c:99:1c:ca:be:df:b4:2c:c1:f4:5e:35:
97:de:de:68:60:d7:95:f4:af:9c:7d:ee:3e:26:55:
ee:16:02:22:95:7b:0a:f5:cc:68:1b:28:17:7f:e0:
33:e2:5f:65:1b:1f:60:dd:f0:ac:b4:c8:96:ec:a5:
69:56:72:d3:13:21:1c:27:93:f4:83:a3:37:39:77:
eb:61:f0:a3:c0:6d:1d:2b:56:b8:5f:85:7f:9f:2a:
c5:f0:f3:8d:e3:4a:c3:4a:f2:ff:b6:ab:f5:32:aa:
9e:54:f4:b9:d3:72:58:18:21:f8:3a:84:3d:ce:87:
bd:8b:25:e0:7d:5d:17:46:71:91:e3:d9:41:89:60:
c6:27:a0:c1:4c:8f:8c:bc:ca:20:41:37:9f:d1:33:
6b:49:ec:37:d3:f6:74:b9:46:9b:3f:d7:31:15:a4:
39:48:7a:68:78:cd:ff:c9:d1:99:93:67:9c:87:6d:
4a:23:da:03:3b:bd:06:95:df:4a:e1:9c:14:83:a3:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:B8:86:FE:E0:D5:7B:CB:3F:93:81:A4:7F:3B:3F:64:BF:E1:18
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e6:e8:f1:01:ba:cf:43:a8:ab:39:aa:5c:c5:11:e6:89:e5:
da:37:d1:9a:14:0f:2f:75:37:e7:7a:54:10:cd:b2:02:d4:97:
3f:0f:1c:e6:f5:c9:cd:7a:df:34:3e:41:48:46:5f:4b:35:26:
9d:16:13:2f:e2:b9:f7:a8:2e:f9:84:18:3c:e7:73:24:66:8c:
e1:24:fa:53:76:b1:29:72:78:73:4d:0a:c1:c1:55:2c:d6:77:
b0:9d:8f:67:63:dd:57:50:78:31:27:65:3e:49:46:66:43:78:
d9:f6:c0:d9:5b:c1:5b:18:1c:ec:0e:31:e4:0f:2d:b2:ec:01:
12:08:36:46:71:49:5d:f8:4b:ff:4e:03:43:5a:d1:80:0f:0f:
2c:67:04:57:ef:aa:be:cf:e1:8f:5e:e0:59:cb:84:a1:28:b9:
67:8c:0c:f6:8c:5f:ef:9c:40:f5:b4:2b:1b:4d:af:b4:17:ce:
c0:e7:29:88:c5:06:90:62:49:b2:e0:14:73:d3:b7:ae:9b:d0:
11:1e:e1:05:a1:9d:38:09:56:92:a2:6d:36:93:fc:0d:40:c9:
35:87:8c:8f:45:98:fd:59:79:1c:59:42:6c:cc:0e:b3:9a:fa:
59:3a:8e:a7:35:b9:29:24:f6:9f:0b:95:6e:a9:00:c9:50:43:
89:0a:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:44 2025 by rpki-client