Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2c75ca-5960-4f11-99c7-cc43ca9776fe/1/NYJnuZHd54C_GCDlvILc2Z-CAHY.mft
File: NYJnuZHd54C_GCDlvILc2Z-CAHY.mft (raw, json)
Hash identifier: AZK6oMPxK6H1I1l1ds0z82Q9bn+VOfmJUldoA4jblX4=
Subject key identifier: 58:0B:2E:49:3E:4A:EC:B1:5D:79:AB:05:8F:B7:80:C7:66:CB:5B:F3
Authority key identifier: 35:82:67:B9:91:DD:E7:80:BF:18:20:E5:BC:82:DC:D9:9F:82:00:76
Certificate issuer: /CN=358267b991dde780bf1820e5bc82dcd99f820076
Certificate serial: 018281A0DC4A7A56821168E0FF558F12BAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYJnuZHd54C_GCDlvILc2Z-CAHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2c75ca-5960-4f11-99c7-cc43ca9776fe/1/NYJnuZHd54C_GCDlvILc2Z-CAHY.mft
Manifest number: 04E8
Signing time: Tue 09 Aug 2022 08:02:59 +0000
Manifest this update: Tue 09 Aug 2022 08:02:59 +0000
Manifest next update: Wed 10 Aug 2022 08:02:59 +0000
Files and hashes: 1: NYJnuZHd54C_GCDlvILc2Z-CAHY.crl (hash: oyUewJTtdXP7kzdTbxF0Pt1H5gYO1iQ49bfa1NzKsE4=)
2: kkRgj11E4lRTF9NYjYXBhq-Cl5A.roa (hash: z4gCOc8svZVQxz6z+53rSAdyrUtTLcKeDxEJD7EBYRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:a0:dc:4a:7a:56:82:11:68:e0:ff:55:8f:12:ba:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358267b991dde780bf1820e5bc82dcd99f820076
Validity
Not Before: Aug 9 08:02:59 2022 GMT
Not After : Aug 10 08:02:59 2022 GMT
Subject: CN=580b2e493e4aecb15d79ab058fb780c766cb5bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:ee:82:7a:b6:36:e9:87:33:3c:a6:75:e5:
46:3e:40:3c:39:e8:75:a0:90:8b:ec:e1:72:05:c6:
29:52:e6:d6:ee:6b:5e:0d:21:23:aa:6c:a3:c1:b0:
1e:69:87:4f:ca:8b:07:ce:4b:5d:55:e3:06:86:b4:
c3:93:df:4d:a9:75:67:fb:3d:1f:75:4f:d1:20:2d:
8a:51:98:04:03:d8:0b:ff:c4:ba:12:34:f6:80:8f:
34:e5:e5:c2:dc:08:a6:01:bf:1d:af:e4:c0:ab:39:
8d:96:33:e7:52:cd:b7:dc:a8:11:f5:b2:22:57:9f:
24:de:69:0f:80:2a:b9:e3:17:6f:7e:12:5d:06:e1:
32:cd:60:4c:66:b3:d8:11:3e:94:d7:be:8e:30:fe:
e9:bc:7a:a7:ba:3d:b9:27:da:19:ab:c8:37:74:60:
e2:71:aa:af:20:fa:9d:5a:dc:ee:7d:a7:a4:88:cd:
34:2e:e1:dc:17:4e:ed:7a:21:83:96:a6:3a:93:78:
94:d9:c2:35:72:46:21:1e:cb:79:f8:55:18:80:68:
57:ae:ea:fe:9f:54:0f:bc:ce:02:2b:b1:e9:30:03:
8e:40:46:eb:17:8f:71:5f:92:63:07:62:57:21:0b:
25:92:a0:ca:66:1c:27:a9:51:e4:67:cf:1f:7d:8a:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:2E:49:3E:4A:EC:B1:5D:79:AB:05:8F:B7:80:C7:66:CB:5B:F3
X509v3 Authority Key Identifier:
keyid:35:82:67:B9:91:DD:E7:80:BF:18:20:E5:BC:82:DC:D9:9F:82:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYJnuZHd54C_GCDlvILc2Z-CAHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2c75ca-5960-4f11-99c7-cc43ca9776fe/1/NYJnuZHd54C_GCDlvILc2Z-CAHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2c75ca-5960-4f11-99c7-cc43ca9776fe/1/NYJnuZHd54C_GCDlvILc2Z-CAHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:21:9c:d9:f0:d7:0d:36:c5:21:f4:a5:bb:96:d9:c9:e0:ce:
18:0c:ce:b4:80:2a:1d:68:9e:84:35:1a:88:67:12:78:15:f5:
28:89:d7:b7:bb:24:46:b5:4a:dc:89:89:22:7d:c0:92:17:c7:
da:86:3d:5f:3a:ca:f2:6c:6b:31:b0:e7:a6:b6:c9:9d:c8:69:
f9:80:3b:97:60:71:6b:56:47:d5:3f:4a:a4:c4:da:fd:6b:2f:
9e:c9:46:8e:67:31:80:ee:ff:e5:ab:e2:6c:94:90:a7:0b:ef:
fa:2b:ca:c0:22:fa:ec:2d:5c:a8:59:17:6f:36:ae:4e:4c:37:
ff:06:6d:de:77:5f:66:d3:1b:2a:12:0f:49:52:85:ba:4d:79:
8b:b1:7f:8b:8e:90:67:0b:2f:d1:31:0a:a4:04:c4:47:03:fd:
a9:c6:a1:73:51:9b:07:63:24:6b:f8:62:c5:33:41:ce:c5:a6:
b2:3d:55:10:91:1a:c0:56:5a:7b:09:f4:4f:0e:6d:e7:03:31:
49:84:71:8d:c7:1f:da:51:85:24:2f:6d:30:43:6a:67:94:78:
b2:83:e7:1d:7e:47:6a:a1:5d:92:c8:c2:73:55:32:b4:29:9d:
af:d5:e9:a3:37:1b:63:55:a0:a3:88:e0:e1:1c:04:2f:27:55:
6d:25:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:39 2025 by rpki-client