Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/RspNyccGYfch1ozlNgHT1fmqjDI.mft
File: RspNyccGYfch1ozlNgHT1fmqjDI.mft (raw, json)
Hash identifier: 91mFG+j9Akg6ElU/ui0CWz+WDfud1hZfNLhDald+6fo=
Subject key identifier: 40:C4:6B:FE:EB:DB:9D:14:FF:90:71:18:35:3B:48:B1:D0:4B:AB:2B
Authority key identifier: 46:CA:4D:C9:C7:06:61:F7:21:D6:8C:E5:36:01:D3:D5:F9:AA:8C:32
Certificate issuer: /CN=46ca4dc9c70661f721d68ce53601d3d5f9aa8c32
Certificate serial: 0193DD80AFE66706D128C374082BF1C0420E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RspNyccGYfch1ozlNgHT1fmqjDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/RspNyccGYfch1ozlNgHT1fmqjDI.mft
Manifest number: 1056
Signing time: Thu 19 Dec 2024 06:00:18 +0000
Manifest this update: Thu 19 Dec 2024 06:00:18 +0000
Manifest next update: Fri 20 Dec 2024 06:00:18 +0000
Files and hashes: 1: RspNyccGYfch1ozlNgHT1fmqjDI.crl (hash: Zlpz/9U6B1Y0HPNsJcy1cl7vZj83F3EI7/ow44zb21g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:80:af:e6:67:06:d1:28:c3:74:08:2b:f1:c0:42:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ca4dc9c70661f721d68ce53601d3d5f9aa8c32
Validity
Not Before: Dec 19 06:00:18 2024 GMT
Not After : Dec 20 06:00:18 2024 GMT
Subject: CN=40c46bfeebdb9d14ff907118353b48b1d04bab2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:11:0f:33:54:6c:fd:c6:40:8e:18:07:26:
42:c2:11:be:0f:97:ad:99:e3:1f:71:f5:c2:bc:5d:
14:fd:f2:6b:4b:8c:99:7b:d4:82:58:c1:a0:57:4f:
5a:fb:30:36:e7:a4:c6:e2:ae:18:cb:fb:45:04:de:
cd:d1:12:8b:6d:11:aa:47:cb:af:28:e2:01:eb:01:
b0:49:95:8f:3d:e7:9f:25:19:e4:be:8c:0f:34:87:
5e:5b:43:1a:cd:da:3b:75:85:0f:e2:71:08:5f:ce:
f6:06:6b:bb:1b:b4:ed:f5:ce:fe:83:bf:dd:ec:3b:
5b:33:91:eb:0f:5f:d8:5a:ff:46:fb:a9:1c:da:31:
ec:af:19:5b:b6:b5:a6:85:3f:b4:66:e4:a4:8f:01:
af:ce:92:cb:ec:3a:98:b8:e3:1d:1e:2b:26:32:c3:
a6:e2:6f:3b:58:d1:d4:d9:a3:44:26:79:06:4f:56:
69:67:cf:3b:4e:29:23:2d:91:5e:5c:b7:26:66:a9:
09:60:65:8a:6d:33:5f:ad:4a:06:31:4a:19:5d:26:
27:80:a8:d5:2a:59:3a:2c:fc:9a:58:fc:28:57:8f:
a5:8a:5c:c7:d8:e6:5c:b4:a8:49:64:7c:e5:f4:a0:
64:59:31:ce:6d:86:12:29:fe:57:58:5a:5f:d1:b5:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:6B:FE:EB:DB:9D:14:FF:90:71:18:35:3B:48:B1:D0:4B:AB:2B
X509v3 Authority Key Identifier:
keyid:46:CA:4D:C9:C7:06:61:F7:21:D6:8C:E5:36:01:D3:D5:F9:AA:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RspNyccGYfch1ozlNgHT1fmqjDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/RspNyccGYfch1ozlNgHT1fmqjDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/RspNyccGYfch1ozlNgHT1fmqjDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:32:15:59:75:2c:4f:b8:ac:b8:65:06:69:53:a9:8c:d3:08:
cf:cb:4e:f8:39:d8:5c:42:99:74:45:1a:65:9e:95:0a:bb:ba:
e4:55:ed:fe:12:41:e3:72:3d:bf:34:fd:31:9c:e5:1c:8b:c1:
67:1a:c2:a7:2d:98:cc:bf:ae:a6:66:2f:a0:5d:11:ba:1b:52:
37:29:29:cd:46:4c:07:99:d3:6e:51:71:e1:c8:54:66:79:d1:
a7:da:9b:1b:5b:65:e8:10:5e:92:7f:96:29:4e:23:b2:6f:80:
95:09:a7:eb:28:c3:3a:76:db:9e:c3:9a:26:48:47:59:c4:1f:
34:a8:11:1b:79:dc:28:61:37:83:26:62:26:45:88:0e:d2:d6:
64:28:f2:6c:27:5d:1b:74:32:69:15:e8:f7:ab:57:66:81:a4:
75:da:49:54:4b:56:f7:f9:52:36:37:16:32:be:e8:83:1c:4d:
61:8c:59:da:1d:d6:a4:c5:74:1a:ff:28:2d:82:43:1d:62:9b:
3a:bd:2a:cb:97:51:fb:64:71:b4:53:8e:f7:f1:0b:11:a6:68:
82:f6:13:9d:07:68:9c:b1:6e:f9:bd:8f:ce:c5:e3:16:d4:3d:
65:10:5c:a0:fe:d5:9b:fe:d4:a2:24:18:46:08:2d:46:f9:d4:
54:9c:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:31:53 2025 by rpki-client