Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
File: NZXHvH5fzXae1uUxEfPF5IkfnaE.mft (raw, json)
Hash identifier: WKnCUNOToyKLgUQJNgKPW9R85Gl8RPNw1RKwsWh0aZ0=
Subject key identifier: 73:E9:BB:4C:72:B7:67:BA:41:E9:8E:ED:2F:6E:4D:67:91:E2:C4:F2
Authority key identifier: 35:95:C7:BC:7E:5F:CD:76:9E:D6:E5:31:11:F3:C5:E4:89:1F:9D:A1
Certificate issuer: /CN=3595c7bc7e5fcd769ed6e53111f3c5e4891f9da1
Certificate serial: 0194DF3569ECF06EA769D3E5AC9D9243867D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
Manifest number: 0F82
Signing time: Fri 07 Feb 2025 07:00:07 +0000
Manifest this update: Fri 07 Feb 2025 07:00:07 +0000
Manifest next update: Sat 08 Feb 2025 07:00:07 +0000
Files and hashes: 1: NZXHvH5fzXae1uUxEfPF5IkfnaE.crl (hash: /VfXlFfA6H4B7sfPG9evlKvvh+0wFbpvqYZXTtW/Ca8=)
2: mNo4IYHo92XBLPNbZoddKhPLtKU.roa (hash: 7hNGDboyqFNYWdp1oY9Hbrqz5kUwFFCSr1cVWvQDGWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:35:69:ec:f0:6e:a7:69:d3:e5:ac:9d:92:43:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3595c7bc7e5fcd769ed6e53111f3c5e4891f9da1
Validity
Not Before: Feb 7 07:00:07 2025 GMT
Not After : Feb 8 07:00:07 2025 GMT
Subject: CN=73e9bb4c72b767ba41e98eed2f6e4d6791e2c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:ed:37:ac:aa:08:f9:51:bf:72:f1:50:1b:
39:6e:82:fd:a3:8c:83:13:02:0a:af:b9:f3:1c:0b:
7b:ca:85:a8:8f:da:35:88:93:b8:05:8f:fc:9e:98:
49:51:64:a5:b1:da:ea:00:fe:e8:85:1c:0b:43:f3:
a6:9a:d6:6e:1b:ae:1b:8e:78:fb:8d:b6:f0:c0:8c:
50:12:af:f4:dc:42:dd:6a:cc:1e:0d:31:5e:0c:1c:
ca:34:92:fe:b2:77:1d:7c:0c:37:e4:df:9b:c0:c8:
ba:65:a3:4d:e5:69:1a:60:a3:cb:9e:2e:80:19:e5:
52:01:49:17:f6:3b:dc:ae:e0:54:b5:33:10:8c:2a:
ca:5a:8e:5e:45:52:c2:f3:89:51:08:1a:10:1d:f4:
13:2a:a4:75:11:ae:4c:cc:7c:b2:48:71:32:3c:60:
d1:e2:a7:20:c5:b0:15:30:05:ff:9f:05:f6:af:97:
c9:62:e0:4d:4e:f1:4e:b9:4f:10:90:0b:7d:02:f1:
c9:92:d3:90:d7:a2:1a:93:16:aa:bc:4c:e7:c1:24:
5b:0b:ce:c9:a7:a3:17:d2:0d:7d:2d:6e:93:2d:da:
b0:d6:24:0a:a2:9b:58:22:f9:5b:7c:d8:c8:22:25:
04:7d:fc:81:b1:d9:b4:ad:4e:53:4c:49:0e:d4:a9:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E9:BB:4C:72:B7:67:BA:41:E9:8E:ED:2F:6E:4D:67:91:E2:C4:F2
X509v3 Authority Key Identifier:
keyid:35:95:C7:BC:7E:5F:CD:76:9E:D6:E5:31:11:F3:C5:E4:89:1F:9D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:bf:f2:53:3b:59:cc:f4:3e:c6:61:e2:44:55:80:12:9a:
3e:d7:02:28:29:09:92:11:4b:bd:be:c8:a4:7c:34:cc:0e:34:
78:59:d5:21:f3:a6:98:ba:db:4e:41:aa:fb:f4:b0:5d:8e:e0:
d9:a7:5b:d6:cc:e2:88:84:c1:c5:55:ff:0e:62:21:2d:62:13:
d6:ce:3e:3a:01:d8:bb:a2:d6:5e:f7:5f:b4:de:8f:18:0d:51:
c8:d7:28:2d:a8:8e:37:24:4e:f5:63:68:20:23:4d:ef:49:96:
53:ed:97:53:aa:9d:c1:4a:19:12:29:d9:48:b9:89:b5:d6:02:
ec:94:4d:ed:dd:12:e5:c9:20:aa:8f:a7:dd:e2:56:62:8d:fb:
9e:25:24:c8:08:5d:45:ae:d8:57:4b:19:b2:b4:0d:fc:17:7c:
db:d6:61:84:05:f2:f0:0e:8b:c9:75:79:ff:a6:94:30:22:a6:
c9:de:1c:6f:14:1b:e1:9d:3e:e7:a2:b8:c8:1c:54:59:f3:8a:
de:98:fc:14:35:c4:16:f6:12:f9:66:70:af:65:ed:b1:5b:a3:
bf:8d:ca:c1:a8:4a:ac:aa:32:80:ee:3d:63:f4:8b:1e:df:38:
5a:9c:2a:bc:a1:9f:ba:89:bd:1b:5a:46:74:4a:64:cb:91:b3:
b3:bb:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:59:38 2025 by rpki-client