Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: GJl1KwpvbYYnc7w3S/BU2GkYYBHONierMd2CkuQZni8=
Subject key identifier: 54:23:66:0D:5F:EB:9F:AA:E8:07:A4:3C:07:8E:01:AF:D6:E2:91:79
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 0194BD17DBD4F0F8B2A303DEDCA947032FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 04FF
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: BWrgwLQ/WIH6s31Mb66Uyy9CrDgWGaFQdkPIjtHRRBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:db:d4:f0:f8:b2:a3:03:de:dc:a9:47:03:2f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=5423660d5feb9faae807a43c078e01afd6e29179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:54:66:58:ee:d1:c0:10:a7:9c:66:c5:e9:1f:
7a:23:7e:7b:6a:19:ce:c8:74:b1:f1:2e:2f:0b:86:
97:78:23:7a:e2:1e:e0:0d:47:b7:32:85:a2:29:f4:
8d:1b:d2:43:fe:e5:82:c0:8b:2f:1d:ee:e8:7d:38:
a8:e6:b0:41:e1:f1:bb:de:f6:44:0c:2f:a5:a1:41:
90:f2:ab:c4:84:07:4d:91:f1:b7:f8:6c:b9:7a:88:
a2:4b:95:f0:dd:52:66:e0:88:0f:5b:c5:17:23:e2:
78:bf:34:f8:86:41:25:35:c4:97:2a:ca:30:d2:1c:
4b:40:44:e2:95:99:02:a6:9c:ef:22:af:1e:55:a5:
9c:11:7e:6a:ad:ef:ba:9f:b5:64:59:d4:68:0e:af:
b5:e1:5b:63:82:6c:dc:07:7e:5d:22:e8:01:34:70:
bc:1b:d0:78:55:0a:1f:3b:75:01:2c:c7:b5:52:8e:
9c:b7:1f:91:1e:54:ca:4c:f9:72:28:f7:96:2a:2f:
12:fd:6a:46:68:bd:31:ca:60:63:91:c1:ea:47:90:
63:f4:62:79:ef:6a:1b:87:79:23:a2:f6:5f:a7:80:
2e:bd:07:b2:02:9b:0c:89:dc:ca:f8:92:2d:d9:e0:
07:93:03:99:ed:9e:fd:fa:9c:b7:96:7b:0f:b9:0d:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:66:0D:5F:EB:9F:AA:E8:07:A4:3C:07:8E:01:AF:D6:E2:91:79
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:3b:1e:e7:e2:19:04:ce:f7:44:19:04:0d:b0:91:eb:18:
f1:bb:70:c2:51:2f:17:21:7a:68:39:97:62:fc:29:36:f6:ed:
31:df:7d:b2:eb:bc:18:31:35:f7:f8:d0:11:49:11:d0:65:16:
f3:51:01:af:d7:30:0e:96:14:bc:41:6f:26:7c:5b:51:85:ce:
c4:31:2a:3e:ba:c9:2c:0c:00:03:22:95:e4:9e:1a:8e:12:a7:
a9:68:1d:89:8f:77:0b:a3:22:ca:76:21:37:01:a5:7a:73:6e:
39:69:f8:df:31:8c:99:f7:36:5e:c1:c4:39:51:7b:0a:36:00:
b1:92:97:b1:4a:6b:a7:58:fa:58:ec:22:b7:71:4b:5a:ea:d5:
8e:d8:4d:9c:bd:16:d2:86:88:fc:48:6b:d4:6c:08:c9:e8:50:
42:20:07:c8:8d:f7:ab:4d:63:49:b7:1a:ba:71:82:44:41:66:
35:e1:67:23:48:ce:bb:f5:ef:df:e7:d6:d4:bb:eb:96:d8:58:
19:e8:d9:41:01:75:7f:97:4a:e0:9c:72:76:3a:4f:fd:61:19:
69:d5:57:8b:26:8e:30:d6:58:63:31:0b:53:88:7c:9a:46:40:
b1:50:06:ee:37:d1:ee:40:99:47:da:51:3a:eb:9a:9f:94:6a:
81:2b:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:40 2025 by rpki-client