Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/nvrlnr-YsBAL8UwGymvuJmh2zO0.mft
File: nvrlnr-YsBAL8UwGymvuJmh2zO0.mft (raw, json)
Hash identifier: jaAFjr/3uP6Uujbm48YEy/nU2UPDn/e93hyU/Aok+3M=
Subject key identifier: 03:AF:CA:FC:CB:93:E1:F3:E5:AF:5C:33:C5:8E:81:D9:77:DF:C8:12
Authority key identifier: 9E:FA:E5:9E:BF:98:B0:10:0B:F1:4C:06:CA:6B:EE:26:68:76:CC:ED
Certificate issuer: /CN=9efae59ebf98b0100bf14c06ca6bee266876cced
Certificate serial: 0191B378C3BE3EB8FF4D16301C879F20B8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvrlnr-YsBAL8UwGymvuJmh2zO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/nvrlnr-YsBAL8UwGymvuJmh2zO0.mft
Manifest number: 0ADA
Signing time: Mon 02 Sep 2024 16:02:01 +0000
Manifest this update: Mon 02 Sep 2024 16:02:01 +0000
Manifest next update: Tue 03 Sep 2024 16:02:01 +0000
Files and hashes: 1: D-pi3xZ-SrfWnCQRtVVTSYhcfcw.roa (hash: iGRGSIXgmi6Si04hCKN86etnMXzUzOifiL8vJ2dDbAE=)
2: nvrlnr-YsBAL8UwGymvuJmh2zO0.crl (hash: 7nPKQNLw5sL3nf+5PeuYYBRpwFEOSar34aVjjZAB0tA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:78:c3:be:3e:b8:ff:4d:16:30:1c:87:9f:20:b8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efae59ebf98b0100bf14c06ca6bee266876cced
Validity
Not Before: Sep 2 16:02:01 2024 GMT
Not After : Sep 3 16:02:01 2024 GMT
Subject: CN=03afcafccb93e1f3e5af5c33c58e81d977dfc812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:29:d3:93:d2:e2:3c:cd:69:64:87:23:7b:
d2:17:cb:ca:9a:2d:fa:04:f5:4a:4e:0e:bc:30:86:
b1:ea:6b:b9:3e:eb:31:3e:0a:78:81:51:20:ef:72:
04:05:a2:30:6d:63:94:48:e5:93:d2:d4:bd:a0:45:
b2:e0:60:e6:2e:85:90:93:1f:4c:b6:fb:cf:15:3d:
47:e4:84:d2:13:e5:af:e8:ed:a8:bf:aa:92:e7:65:
32:8f:1c:14:a3:e3:35:03:cc:3f:6f:07:95:a4:24:
49:85:8a:fc:19:8e:6b:6e:1c:55:02:4c:91:81:3a:
ab:12:5d:13:bc:ad:ef:bc:63:3b:df:07:07:d2:9d:
21:04:b5:42:5f:c2:34:cb:cb:4b:2f:3b:f7:e9:e2:
f4:d7:68:e4:e4:22:82:90:d3:e2:8e:44:ca:a5:23:
28:79:ed:1c:6a:4e:1d:1f:a5:60:38:5a:1d:45:80:
53:6f:c4:ed:cf:2a:d3:c2:62:2f:45:43:67:9f:db:
0a:48:56:f6:7e:61:a2:41:48:d3:8d:f4:60:73:4f:
e6:9a:5d:91:1a:a0:2b:e1:ff:45:79:05:eb:fc:58:
d0:a7:05:d3:78:11:3c:24:17:c0:8d:f6:b7:91:18:
f6:8c:6d:ab:e0:cf:27:b0:12:52:f1:4f:43:6e:af:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:CA:FC:CB:93:E1:F3:E5:AF:5C:33:C5:8E:81:D9:77:DF:C8:12
X509v3 Authority Key Identifier:
keyid:9E:FA:E5:9E:BF:98:B0:10:0B:F1:4C:06:CA:6B:EE:26:68:76:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvrlnr-YsBAL8UwGymvuJmh2zO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/nvrlnr-YsBAL8UwGymvuJmh2zO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/nvrlnr-YsBAL8UwGymvuJmh2zO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e8:43:a5:12:ca:bc:de:16:75:b4:87:65:0e:b8:c9:36:bb:
3f:07:a2:e3:a4:b1:64:02:6f:3f:80:49:82:b1:c8:76:c9:7d:
55:74:43:46:2c:9f:65:8d:11:03:b2:8d:55:78:ee:19:52:35:
d0:4d:5b:c8:a7:6e:0a:74:95:c5:db:ec:a0:ad:e5:07:5e:e8:
07:6c:f3:39:86:90:b3:f0:26:a2:32:25:95:e4:1e:fb:df:72:
e6:30:28:dd:63:05:63:a0:aa:08:fb:ca:70:76:cc:39:63:87:
2e:0d:b1:d1:1d:83:0d:a5:a4:73:2d:86:fa:6c:5f:6a:31:f8:
78:28:61:94:fc:4d:81:eb:a1:c7:c7:46:db:ab:6f:c7:0b:46:
59:0f:5b:a1:ce:8c:8a:cc:6b:b1:9e:0c:d4:18:76:b6:01:0d:
c6:45:bd:4a:07:5c:84:b2:65:a4:fe:78:93:50:69:c6:9c:e4:
73:b3:50:18:a0:a3:c1:3a:37:24:7c:c5:f0:84:9e:33:52:c7:
3d:58:45:b9:0b:0f:b1:2a:39:d8:78:57:88:8e:4f:58:c0:bf:
ba:07:f8:a7:18:ef:ef:40:35:bf:e4:61:c1:52:46:64:17:28:
07:77:29:52:37:9d:27:dd:0a:c3:bc:ad:47:8f:89:80:a5:c6:
77:22:ac:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:45:18 2024 by rpki-client on console.sobornost.net