Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
File: NbdnbT6rzEXogFTIuEBH7ocyvHM.mft (raw, json)
Hash identifier: a9eb+BMxUt2qrPuviymJ11GTy4E6PyGNOw4fTvss6uc=
Subject key identifier: 50:CE:66:1B:1F:13:D2:6A:0E:E1:FD:75:B3:D9:DE:55:3D:74:9D:63
Authority key identifier: 35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
Certificate issuer: /CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Certificate serial: 0194BCE07790F5A922813ADC6FCAE18ED47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
Manifest number: 011E
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: NbdnbT6rzEXogFTIuEBH7ocyvHM.crl (hash: z2L8fpw77cb5RhdNd04AfV2Z7Gkc15BtmV/oPHmJeN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:77:90:f5:a9:22:81:3a:dc:6f:ca:e1:8e:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=50ce661b1f13d26a0ee1fd75b3d9de553d749d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:e0:85:08:6d:19:5e:47:8e:12:c0:46:7d:
54:dc:1c:b4:b4:79:a4:cd:16:72:3c:7e:40:d7:9a:
f1:84:41:52:97:66:45:e2:2c:b9:fb:38:ac:4f:60:
ca:6d:2e:6b:88:8e:c9:7c:11:bf:9b:0d:c2:01:4f:
f9:d8:fd:45:f4:07:f1:5d:e3:b9:8b:21:bd:7a:64:
c1:fe:f4:2d:ff:69:fa:2c:e7:6c:fe:db:4c:4c:78:
9d:87:15:b1:1c:3a:3d:ed:b4:08:9d:d0:cd:b8:d2:
74:79:70:29:50:fa:72:df:d0:26:fb:f6:05:25:ab:
67:e0:34:61:a3:84:9b:06:2d:f9:46:04:e1:2f:a0:
d5:cf:dc:5a:8d:52:7b:08:23:05:3f:6b:9d:85:30:
6d:80:4f:b5:2c:30:78:18:03:a2:9e:ab:d0:da:c6:
5e:4e:7a:76:c0:c4:10:bd:10:fe:19:b8:e7:f2:b5:
c4:53:74:e0:80:9d:17:43:24:80:db:9c:16:e3:b7:
dc:04:ba:84:29:9f:d5:d1:8a:11:00:fb:c0:54:6f:
57:1d:ef:4e:6e:23:7e:5e:9c:cf:ac:34:2c:5f:16:
79:7d:27:21:30:70:7e:b5:46:62:6d:cc:fd:c4:67:
a8:5a:da:78:47:83:62:ad:c8:7c:dd:d3:89:51:48:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CE:66:1B:1F:13:D2:6A:0E:E1:FD:75:B3:D9:DE:55:3D:74:9D:63
X509v3 Authority Key Identifier:
keyid:35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2d:ba:5d:01:6d:90:4c:77:5f:bc:2b:98:13:d6:8f:c0:de:
d8:ef:34:23:a0:9e:db:22:14:ea:79:c5:9f:94:fa:c3:49:32:
b2:a4:ae:b3:72:dd:c6:ee:59:50:2d:6a:d9:03:41:12:d1:a7:
c7:62:25:17:1a:17:4b:69:b3:64:31:d2:0d:51:76:01:0e:b5:
a8:c6:ea:92:84:e5:ba:67:2f:72:84:44:66:bc:2a:f2:a2:5f:
d1:c0:fb:58:31:62:d0:d3:96:19:15:85:61:f6:38:55:78:f5:
cb:2f:a3:bb:60:29:31:e9:34:0f:46:72:1a:1e:fb:90:67:5c:
ec:4d:b4:a2:30:40:47:b5:8e:22:c3:54:d1:b3:7c:27:61:80:
76:e7:01:2d:a2:76:52:0a:4a:cc:71:24:60:06:3f:4f:71:05:
12:25:06:da:31:79:95:b5:52:b6:95:90:04:9e:9b:72:a0:e1:
74:d3:ab:53:51:e0:77:95:4c:73:4b:79:03:14:f2:00:76:59:
ab:d4:93:28:47:17:a5:90:e3:c8:7f:35:e7:6f:fa:d3:86:50:
33:cb:71:5e:69:21:85:a9:cd:0c:6d:c7:6c:a3:57:c7:5b:88:
dd:82:d3:f5:11:8d:5d:c0:c9:f6:fb:96:94:7f:ef:7e:e7:22:
cf:b7:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:49 2025 by rpki-client