Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.mft
File: NGBIZonR-XmcwHyve60UwPHuywY.mft (raw, json)
Hash identifier: 0dlWDaXuBYwCbyZJHfvPMdG9QtmlDtTkvZj1Elyp1Gs=
Subject key identifier: 7D:78:19:7D:6E:ED:82:F3:15:A6:01:3D:87:AA:F0:1D:8A:60:C1:86
Authority key identifier: 34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
Certificate issuer: /CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Certificate serial: 018D7735B8677DDA3FA355AD90907EFF17B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.mft
Manifest number: 0859
Signing time: Mon 05 Feb 2024 03:00:25 +0000
Manifest this update: Mon 05 Feb 2024 03:00:25 +0000
Manifest next update: Tue 06 Feb 2024 03:00:25 +0000
Files and hashes: 1: NGBIZonR-XmcwHyve60UwPHuywY.crl (hash: VXMpkKjqlwHfDJFPdKypTQXRFdT69ag1/76DMABQsQI=)
2: PHBuhNSr3PYNxOPWDnEqjRIH5_U.roa (hash: ZgUZgG3sCvr2nV1Nwiboh/CP5CiKPUJEW3vphi6E37M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:35:b8:67:7d:da:3f:a3:55:ad:90:90:7e:ff:17:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Validity
Not Before: Feb 5 03:00:25 2024 GMT
Not After : Feb 6 03:00:25 2024 GMT
Subject: CN=7d78197d6eed82f315a6013d87aaf01d8a60c186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:83:26:92:c0:61:dc:e9:5d:65:3c:1e:2d:
9b:dd:1b:c6:e8:ae:9d:fe:1f:15:c5:2c:a2:ec:90:
cf:f7:ca:d5:6c:34:0b:1f:39:0e:c0:75:bd:3e:2e:
bb:52:da:d6:2c:1a:e3:43:d9:32:dd:7f:a6:46:31:
4f:52:9e:98:54:ef:00:be:2b:75:8e:ca:a4:40:e2:
2c:c8:8f:fc:9e:ac:3f:91:2e:3a:63:cf:a3:97:9a:
46:92:36:f2:55:ba:9b:b0:63:1d:2f:d3:b7:b2:7b:
48:39:74:40:02:48:85:b3:0f:bf:50:f7:54:7f:b4:
5d:41:6d:25:11:6b:14:81:25:12:78:25:ac:53:c3:
da:3e:e7:66:02:ca:95:51:d4:9b:6c:76:14:5f:37:
f8:7f:fb:82:c4:55:cd:4a:e9:3d:fc:4e:b1:83:46:
1c:2c:54:24:d8:14:02:36:10:0b:af:63:db:f4:c0:
18:e3:61:16:d5:9b:22:c9:fa:52:ec:fe:d8:cb:69:
db:e2:38:d8:39:61:69:a9:a5:15:5e:91:5b:07:7c:
13:fd:a4:b3:42:b9:78:a1:57:92:4f:5c:8f:fa:cc:
38:9b:77:3e:ed:99:d7:88:71:d2:18:ee:14:8e:7f:
5a:47:b2:8f:03:0a:e6:00:8e:26:8e:1a:fc:12:e2:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:19:7D:6E:ED:82:F3:15:A6:01:3D:87:AA:F0:1D:8A:60:C1:86
X509v3 Authority Key Identifier:
keyid:34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dd:f1:e0:50:c6:51:a9:c0:52:48:41:de:35:3c:b1:f8:2f:
f9:e5:79:ac:31:3d:74:8b:f4:54:8f:12:c0:66:98:53:9a:f9:
fe:85:5c:9f:37:b9:0a:2f:63:85:b0:42:7b:c5:c7:18:fd:ca:
ba:1f:6c:5b:78:3d:0a:d8:44:00:22:b4:6e:41:24:30:56:a5:
c0:33:35:21:20:d6:e2:43:cb:db:25:88:a5:16:ad:54:04:55:
00:5a:1b:90:20:8d:59:8c:af:8f:68:cf:56:f3:b6:a2:c9:c7:
41:96:be:9d:fb:ef:67:57:21:e4:ae:24:dd:4d:4a:4c:c7:77:
a1:4a:cf:02:c1:62:8d:17:1c:ad:87:f5:d4:28:8f:1b:13:6f:
27:b1:09:2e:a9:89:dd:e7:63:0b:b3:e8:12:ca:bc:df:65:3d:
93:b3:9e:f4:8b:1a:d6:16:37:bf:03:4b:8d:40:16:95:a4:cc:
ef:20:82:f9:37:44:21:ce:32:2f:72:5a:de:3c:5a:28:96:3a:
c6:f5:37:7d:17:f2:4a:25:c3:b9:06:33:f2:e9:96:a4:ea:e9:
c7:9e:c1:44:ce:a5:63:46:2e:15:67:1c:c6:9f:bc:0a:ee:cb:
b5:ac:45:e4:94:54:5d:60:2d:9c:46:51:f4:8a:49:20:19:11:
4f:f3:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org