Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/237d3d-bd35-4505-b6c6-78cb8f4c7117/1/nclel8Ke8WnSM3pdav0SoKwzpO8.mft
File: nclel8Ke8WnSM3pdav0SoKwzpO8.mft (raw, json)
Hash identifier: aGctOifBtJ3IBcrsvwyWJGvsZQiZbwHmrw4eDwvFmAE=
Subject key identifier: E3:16:C3:FD:82:CF:2F:4B:CB:79:6B:47:5C:7F:75:03:32:68:E5:C8
Authority key identifier: 9D:C9:5E:97:C2:9E:F1:69:D2:33:7A:5D:6A:FD:12:A0:AC:33:A4:EF
Certificate issuer: /CN=9dc95e97c29ef169d2337a5d6afd12a0ac33a4ef
Certificate serial: 0194BBCEA0FA40C4435BB22F1CDEEFBB0E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nclel8Ke8WnSM3pdav0SoKwzpO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/237d3d-bd35-4505-b6c6-78cb8f4c7117/1/nclel8Ke8WnSM3pdav0SoKwzpO8.mft
Manifest number: 1030
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: nclel8Ke8WnSM3pdav0SoKwzpO8.crl (hash: ZmG937bL0KY2m9/xH9ReMqqCGtIhTDH9Ohu+lOxz6k0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a0:fa:40:c4:43:5b:b2:2f:1c:de:ef:bb:0e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc95e97c29ef169d2337a5d6afd12a0ac33a4ef
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=e316c3fd82cf2f4bcb796b475c7f75033268e5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:83:87:45:16:dc:ab:31:02:3b:b9:d6:3f:
35:28:ae:af:e5:d0:e7:ed:e0:f9:df:06:a9:31:4e:
64:82:21:31:a9:25:1a:67:9c:c8:8c:8f:bf:3d:59:
ec:45:de:dd:00:1c:57:19:25:33:de:01:0c:44:e0:
7c:21:17:87:06:f4:4c:b9:94:fd:75:18:88:c4:ee:
0d:f4:89:7a:df:3d:a2:56:aa:fa:71:85:b1:f5:4e:
02:4b:62:e0:7d:b3:32:a2:3c:8b:0b:f0:79:d9:d6:
0c:b9:b2:95:dc:04:ae:4f:5c:88:3e:96:99:51:23:
c5:ab:a9:10:ab:28:ef:0e:e4:58:78:c5:6d:39:49:
c4:a6:0b:77:35:d7:07:4c:f6:00:ba:de:59:4b:1e:
2e:c6:83:8a:23:27:cb:be:8d:30:2d:10:d1:f7:6f:
0f:d4:b7:c9:d1:ed:02:d5:6d:58:fa:37:96:90:84:
0e:6b:d8:56:f8:6d:5d:cf:3d:b1:18:c6:b0:26:7b:
c4:52:24:32:d3:11:28:dd:3f:5d:34:43:7a:83:b0:
c8:08:c7:a6:40:38:32:e6:e3:c9:e7:33:0b:fd:fc:
31:d5:90:ed:3c:85:a8:cf:26:af:3e:5c:15:aa:72:
22:1f:6d:20:66:de:5a:af:73:75:8e:c8:b2:5d:bf:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:16:C3:FD:82:CF:2F:4B:CB:79:6B:47:5C:7F:75:03:32:68:E5:C8
X509v3 Authority Key Identifier:
keyid:9D:C9:5E:97:C2:9E:F1:69:D2:33:7A:5D:6A:FD:12:A0:AC:33:A4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclel8Ke8WnSM3pdav0SoKwzpO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/237d3d-bd35-4505-b6c6-78cb8f4c7117/1/nclel8Ke8WnSM3pdav0SoKwzpO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/237d3d-bd35-4505-b6c6-78cb8f4c7117/1/nclel8Ke8WnSM3pdav0SoKwzpO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:54:e8:ed:2c:ce:d2:da:eb:13:62:b7:c0:e9:cd:66:81:62:
04:ae:2c:17:fd:81:0e:64:97:8b:06:9e:30:53:7c:c5:c8:66:
66:fd:1e:9c:78:cc:7a:be:5f:96:ea:e0:f7:72:ca:97:2e:29:
e0:0d:5e:33:9c:39:a8:89:88:35:18:26:0e:fd:5a:ab:a8:70:
d6:0f:f3:48:55:64:07:90:08:cb:b4:08:d1:d7:8c:59:17:83:
58:22:95:d5:8b:40:5b:a4:ee:08:5e:fd:59:de:84:8e:fc:3b:
ef:f7:0c:c3:11:d5:b3:24:2c:45:8e:60:de:86:46:bb:d4:57:
5a:dd:a7:d2:85:c1:a2:0e:f4:ea:48:43:7a:5b:f7:6b:5f:a1:
70:26:97:f6:d6:22:01:e2:96:88:d6:66:14:ee:d8:f3:22:9b:
ef:82:a2:e5:0e:44:d7:0c:25:16:0f:80:5a:f0:a2:b8:fe:29:
7a:50:4e:42:50:0b:9a:d5:21:96:5a:dc:9b:f4:e2:3a:70:0c:
02:e8:bc:ac:cd:fc:72:a2:0e:ea:59:6d:e0:97:a0:85:1e:69:
99:c0:76:45:02:7f:f9:12:b3:c7:97:94:6f:45:e7:fb:65:f3:
40:70:d4:15:c9:bb:61:f9:ff:5d:d0:a6:e5:52:f4:df:df:83:
76:6d:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:27 2025 by rpki-client