Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier: 1emgBCzQD0wv0l5qa0JZciqAbNaud2mFJ7/okO0GFwk=
Subject key identifier: 35:20:ED:6A:A6:66:8C:62:40:D2:B8:DA:40:08:47:1C:50:07:EF:3E
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 0194BC3C70ABFC27919DD323A1DFED7D18FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number: 05C3
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: CAypGSVcacPS9raZmJMWL4u60GBpCVLrWP30kGSo9rI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:70:ab:fc:27:91:9d:d3:23:a1:df:ed:7d:18:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=3520ed6aa6668c6240d2b8da4008471c5007ef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:b0:2e:2a:63:f0:d7:1c:44:81:ba:8c:1d:
67:b2:0d:dd:58:2c:84:ad:a3:b2:bc:73:80:18:9a:
ac:e4:01:e3:1d:64:3d:f4:20:2d:b5:d7:ae:07:73:
02:71:10:39:66:00:da:5e:65:ae:6e:7b:bb:60:79:
01:ee:7f:67:bb:df:ea:52:5a:a1:8d:4e:2d:89:5b:
71:9c:c5:09:d5:69:d5:34:e9:ac:a6:c6:00:bc:ee:
4c:83:37:38:8a:3c:5a:3b:7c:66:a8:cf:e5:17:93:
fb:61:1a:80:0e:d2:11:99:5a:ee:e3:c2:dc:65:72:
f7:65:35:42:98:99:14:52:7e:0a:a5:79:63:d2:50:
64:e1:62:8a:a2:a7:91:16:6b:c4:13:ad:c8:cf:7d:
10:72:60:67:93:96:74:66:2e:19:96:05:7f:1e:10:
03:fd:14:bf:a1:1e:59:72:b3:10:2e:ff:47:4f:a9:
22:dd:61:9c:35:fb:c2:9d:79:8a:b6:6f:81:0d:13:
b6:e6:f7:b8:fc:a2:65:0a:11:4b:df:b9:ec:ab:fe:
72:1e:c3:d8:71:df:aa:bd:bc:08:71:06:6c:91:03:
10:12:29:d4:07:e6:bf:0e:fa:f6:21:af:c5:52:05:
62:50:9c:40:64:22:30:6a:8a:e0:a0:f1:15:45:21:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:ED:6A:A6:66:8C:62:40:D2:B8:DA:40:08:47:1C:50:07:EF:3E
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ae:73:2f:c8:b8:05:09:63:92:3c:f2:4f:83:04:6d:2d:c0:
e4:50:94:66:47:b4:2a:82:11:c2:67:3c:fe:aa:5c:29:04:8a:
8d:9d:24:8e:f4:44:3a:0c:a0:24:de:59:ca:2b:9e:01:fe:03:
6b:81:44:0d:76:42:85:42:b3:8d:63:91:55:05:c2:1e:e7:fc:
56:6a:54:24:3d:ad:68:41:fb:7e:4e:82:19:3c:fb:9f:1a:d7:
b4:af:df:4e:1e:e8:df:7f:18:1f:e6:ea:fd:82:f2:14:66:1a:
85:82:fa:97:e9:fc:91:63:21:8f:29:9c:1c:40:b1:5f:7a:bf:
73:df:ba:f0:51:68:90:55:03:a1:9c:55:c8:e6:45:c3:cc:17:
e4:b0:ac:8a:5c:91:11:c9:f9:73:8e:04:32:45:e1:e1:88:57:
9c:8c:41:a5:84:45:e1:a3:e4:64:df:0c:d3:c7:fb:f5:e2:d3:
1b:7d:08:17:15:cd:0a:69:c1:1f:7b:6e:ea:11:64:c9:bd:5a:
e3:3b:97:49:2e:6c:41:98:db:86:b0:b7:cd:8e:0f:6c:e8:81:
31:53:2c:08:aa:d9:7a:eb:b6:f0:4e:99:c2:b2:4c:1b:fb:c5:
85:4d:2d:79:c8:65:2e:f9:f9:17:0d:37:fc:71:b1:52:6e:80:
83:a2:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:22 2025 by rpki-client