Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.mft
File: NYKJN96u4mCK84hcgqMS3KjSuEQ.mft (raw, json)
Hash identifier: hkAWWWDrgTGZYfcs5VRmGZErqKRATYco+aKTigiKIKY=
Subject key identifier: 75:1A:E8:D9:78:D2:15:84:0F:8B:AD:08:8B:CB:50:6E:8A:24:89:AF
Authority key identifier: 35:82:89:37:DE:AE:E2:60:8A:F3:88:5C:82:A3:12:DC:A8:D2:B8:44
Certificate issuer: /CN=35828937deaee2608af3885c82a312dca8d2b844
Certificate serial: 01910D621421D1726C1FC0527C7F5DD410A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYKJN96u4mCK84hcgqMS3KjSuEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.mft
Manifest number: 123F
Signing time: Thu 01 Aug 2024 10:00:17 +0000
Manifest this update: Thu 01 Aug 2024 10:00:17 +0000
Manifest next update: Fri 02 Aug 2024 10:00:17 +0000
Files and hashes: 1: NYKJN96u4mCK84hcgqMS3KjSuEQ.crl (hash: PXcVt2ONZUHH/73b/Pb8/AXCmkJ2sWztPBNYSm57KlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:62:14:21:d1:72:6c:1f:c0:52:7c:7f:5d:d4:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35828937deaee2608af3885c82a312dca8d2b844
Validity
Not Before: Aug 1 10:00:17 2024 GMT
Not After : Aug 2 10:00:17 2024 GMT
Subject: CN=751ae8d978d215840f8bad088bcb506e8a2489af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:7e:4f:ff:30:d2:f2:48:9a:d1:00:68:b0:
c3:9d:93:d5:9b:cc:8b:90:a0:76:00:e2:15:b7:ec:
f4:79:40:56:f7:35:ae:ba:cb:5c:f5:c5:50:ac:f9:
4c:10:eb:db:4e:fe:c4:d6:76:e1:0a:4a:33:cf:44:
16:8c:9c:43:a4:bb:ca:4f:d3:ef:7b:ca:02:4b:c8:
46:45:10:ae:cc:08:68:43:2e:e2:fa:97:ea:f5:9d:
42:00:04:6d:71:5f:2b:79:b9:7c:04:d8:f1:87:2b:
ab:ea:6a:f7:2e:07:92:c6:10:d4:e9:32:7f:03:07:
ef:2d:ca:35:59:a4:dd:25:5c:bd:ff:33:66:33:dc:
28:b4:30:6d:d5:56:dc:1d:ff:43:59:ea:10:d0:94:
6f:e8:2e:c9:00:00:74:98:d1:77:dd:f0:a9:65:13:
dc:fb:b8:6f:b9:21:6e:17:70:36:cc:1f:ec:a3:55:
58:68:75:91:1a:a3:aa:21:7b:ca:b1:77:5d:c2:0b:
97:f7:3a:7c:f8:0c:ec:53:62:7f:9e:82:e3:80:07:
6b:2e:33:e2:15:39:4c:0f:db:10:93:12:41:4d:17:
7c:db:de:d0:e9:4b:4c:4d:16:4f:f8:c8:34:a6:af:
db:d8:00:5f:e1:20:7f:f6:a4:71:00:4a:79:85:74:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:E8:D9:78:D2:15:84:0F:8B:AD:08:8B:CB:50:6E:8A:24:89:AF
X509v3 Authority Key Identifier:
keyid:35:82:89:37:DE:AE:E2:60:8A:F3:88:5C:82:A3:12:DC:A8:D2:B8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYKJN96u4mCK84hcgqMS3KjSuEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b0:c8:8e:9a:5e:fb:a0:b4:98:04:ae:f0:b7:93:ba:db:e4:
81:98:d8:f7:58:1c:64:29:7c:0c:e7:55:38:47:1f:53:42:46:
4e:58:e1:c6:8f:1d:f0:e2:28:6f:f7:97:ae:00:a9:04:f8:a4:
15:d9:d0:01:66:78:f7:97:75:82:b6:3e:72:d4:12:ad:27:0d:
43:11:b4:4a:20:ba:f5:67:dc:16:63:de:ea:d2:3b:b0:d0:43:
3a:21:bc:2d:05:f0:8d:92:d9:2e:93:bb:77:53:76:4a:8f:0d:
bf:28:24:34:07:7c:a4:c5:23:69:77:36:5b:06:ab:8d:a5:7e:
36:d7:8a:3e:e6:5a:2e:db:cf:2d:1a:35:79:2f:15:c0:6a:42:
f1:47:d4:56:f9:ce:15:7c:89:fe:33:5a:28:e5:8e:f5:d7:27:
9f:4d:e3:bd:82:2c:2d:7f:35:04:a3:a3:aa:cb:5e:77:5f:4a:
f4:34:21:1a:4f:d5:54:b3:bf:4a:dc:4a:26:bf:6f:78:6f:93:
6f:cc:d6:33:40:72:31:e9:9f:d7:ea:3e:8e:8e:e0:64:38:b1:
b2:a9:20:82:5f:29:bd:c5:83:f1:c3:8e:0e:46:10:6a:86:9b:
c4:60:e9:7e:83:24:77:30:a4:6a:3f:86:c9:f3:d2:f1:87:e4:
5e:eb:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:56 2025 by rpki-client