Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.mft
File: NGBIZonR-XmcwHyve60UwPHuywY.mft (raw, json)
Hash identifier: 8PWphP6B18TDZ8QPw2q67lH7Q1AgKmoAZNQ9W25qPHY=
Subject key identifier: 07:18:30:22:07:41:84:0E:45:6C:14:10:7C:09:DC:DC:ED:C1:30:36
Authority key identifier: 34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
Certificate issuer: /CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Certificate serial: 018CEE18AAC9A8483289D74875D48DC3B1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.mft
Manifest number: 0812
Signing time: Tue 09 Jan 2024 12:00:43 +0000
Manifest this update: Tue 09 Jan 2024 12:00:43 +0000
Manifest next update: Wed 10 Jan 2024 12:00:43 +0000
Files and hashes: 1: NGBIZonR-XmcwHyve60UwPHuywY.crl (hash: Db6qdrAJX8Pz0S6dg4J2VGr6ciyZznU5j9j6tpDK6ro=)
2: PHBuhNSr3PYNxOPWDnEqjRIH5_U.roa (hash: ZgUZgG3sCvr2nV1Nwiboh/CP5CiKPUJEW3vphi6E37M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:18:aa:c9:a8:48:32:89:d7:48:75:d4:8d:c3:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Validity
Not Before: Jan 9 12:00:43 2024 GMT
Not After : Jan 10 12:00:43 2024 GMT
Subject: CN=071830220741840e456c14107c09dcdcedc13036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:4a:63:52:72:25:85:7a:6a:08:fb:09:f9:
19:e9:ef:a5:85:73:5a:0b:94:30:72:37:11:7e:a8:
8f:d4:a3:ae:4d:06:c0:fe:57:09:a4:3d:92:63:70:
da:bb:04:d1:12:e5:b6:42:0a:8e:04:65:e0:8f:2f:
57:1e:18:83:f3:74:20:2d:1f:fd:c8:6f:83:36:1e:
8a:12:f8:46:a3:5f:a3:66:9e:ae:b8:95:02:e3:54:
13:7c:3d:51:38:2a:77:0e:2e:6c:f4:b5:da:70:ab:
da:26:9c:74:81:be:0f:f0:70:d3:67:ba:24:62:6d:
ac:9c:76:5e:1f:00:e5:5b:20:dc:d1:2e:51:91:98:
dd:3d:7b:ae:bd:28:74:2e:f6:c6:2a:dc:0e:d5:88:
30:e1:53:88:9f:34:c9:74:8b:7f:90:61:2b:c5:07:
03:2a:cc:59:8e:26:45:8b:d8:e4:62:96:fc:95:de:
c8:dc:e9:49:66:95:60:e1:ee:65:0a:b9:f5:6f:a5:
33:9b:ce:3d:8a:95:2b:33:52:b8:ab:ab:38:f2:a2:
09:8a:8d:76:c3:26:15:06:27:7c:aa:68:46:04:34:
1d:4f:7f:3a:55:32:16:eb:e0:da:7f:18:b9:3e:bf:
cb:69:78:d8:7e:bd:41:18:6d:32:e5:dd:01:6c:ea:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:18:30:22:07:41:84:0E:45:6C:14:10:7C:09:DC:DC:ED:C1:30:36
X509v3 Authority Key Identifier:
keyid:34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ee:ac:c9:8d:41:46:9c:61:0b:32:f9:cf:7f:52:2e:76:70:
3e:fe:ff:0b:9b:05:69:8d:a3:fa:b6:5a:45:db:8d:fe:d5:09:
bc:27:fa:9a:2a:f3:0e:ef:4b:4d:1f:7f:48:8e:2d:b3:1f:30:
e1:f6:b5:23:6f:b4:60:0b:a8:28:cb:5b:91:b0:4c:56:e8:71:
b1:52:ee:11:d2:a1:09:e9:15:76:a2:46:b7:c5:bb:bb:42:22:
2f:54:18:4f:e4:96:5d:69:ee:55:87:b2:93:c8:d8:b0:4e:10:
98:64:2b:e7:12:21:1e:e1:2c:5a:e2:ba:7a:d7:0b:ce:b8:5c:
4f:46:59:65:c1:a5:54:ca:40:01:3a:22:95:99:76:12:e9:d7:
17:99:5b:3e:46:2c:38:ba:9d:00:fb:b9:ba:a8:86:81:9c:75:
f9:eb:02:67:97:05:b6:23:87:a5:62:01:4d:fa:fc:b4:cf:89:
3f:f9:90:5a:d8:2a:c5:63:a5:59:19:e0:14:d5:dd:9f:e3:85:
e3:03:a0:92:ee:8a:1c:95:b3:a3:3a:4d:4d:87:20:fc:3c:fc:
5a:b9:92:9f:04:a6:f8:fa:32:87:c3:44:cd:77:a3:4e:86:7c:
4d:c0:db:10:0c:dc:04:5e:8b:1e:6b:5e:7d:28:cd:f7:29:cd:
c4:91:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:12 2024 by rpki-client on console.sobornost.net