Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: lBLoVCpcE0Y2staGMM/wOBjRYL150CPGR86FJVilL9U=
Subject key identifier: B8:64:9B:A1:1D:69:B0:76:C9:36:EC:D4:FC:2D:D3:D3:F0:84:0E:76
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 0194BBCDEE5FD9C5CE64C5CB156E685BC54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0934
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: hhwLkbjD2IinswpEhOqv0woNkOqIV6YWSryeVBn5MwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:5f:d9:c5:ce:64:c5:cb:15:6e:68:5b:c5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=b8649ba11d69b076c936ecd4fc2dd3d3f0840e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:5b:78:85:83:af:e8:99:de:3e:19:46:2e:
8f:b1:87:13:c7:3a:43:c4:02:48:2b:4d:e2:b6:fc:
ca:df:94:59:ca:5b:8f:04:cd:02:a8:71:a1:04:20:
66:b2:ee:74:87:e1:3e:69:f2:4f:68:68:34:51:33:
9c:5b:0f:2e:5c:d9:38:ea:c9:ee:a0:f6:b0:a5:1a:
98:f3:b1:ab:9d:d0:e4:ac:2e:b5:ab:ed:2c:cf:40:
97:f1:d7:e4:3d:5c:cc:a6:bb:c3:5d:6b:5b:0a:26:
e9:07:d5:b5:8a:c5:d3:78:85:7a:7f:0c:a7:1d:f3:
b6:93:cf:92:f9:43:ab:0e:7b:78:9a:8f:19:33:83:
88:b5:b2:12:f2:7d:0e:a6:a2:fe:87:a5:95:b9:bc:
23:15:3b:ca:36:30:08:e9:1e:59:6a:52:41:42:ed:
26:a4:19:22:73:26:39:e5:a9:91:25:b2:12:3e:c7:
26:d5:0c:8e:76:24:ae:33:30:43:bc:c6:10:d3:b8:
4a:1f:26:80:d0:97:0c:13:eb:b1:c7:44:21:9b:a2:
ca:62:2a:9b:f3:51:0a:fc:12:1b:df:d3:c3:f7:6d:
e8:37:5a:43:ce:f0:75:fa:d8:b8:6b:b5:94:04:a4:
f0:35:b6:dc:1d:fa:7b:12:8a:83:67:ff:e6:df:54:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:64:9B:A1:1D:69:B0:76:C9:36:EC:D4:FC:2D:D3:D3:F0:84:0E:76
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d3:26:2c:ea:dc:e8:06:45:16:37:6d:a4:3a:eb:58:a0:3b:
67:df:39:d6:2e:e8:28:41:31:d0:51:5c:96:42:4a:6f:32:d9:
75:d6:37:fd:15:95:4f:99:d5:99:35:06:8d:e9:dd:21:4b:91:
b7:cc:99:2a:ee:23:31:a4:26:de:4c:21:df:9f:d2:28:56:1a:
42:96:c0:1a:e5:d6:e6:0f:80:6a:4e:7e:ac:23:26:38:b1:43:
4b:21:1d:56:cc:20:05:66:08:23:f8:11:1d:27:ff:da:a0:bc:
af:55:35:6f:e4:c2:6d:8e:78:85:d5:31:a4:ad:93:76:d1:87:
a6:78:96:f2:16:77:ef:1c:62:d5:bd:2a:13:93:ae:e6:b2:bf:
81:d6:11:ef:a1:ce:fe:40:5a:98:02:c1:5b:bb:86:74:64:28:
fb:0a:37:83:7f:e7:d0:34:33:21:a2:c6:69:06:59:8e:1a:3f:
33:18:0e:02:fb:53:a8:4c:04:03:da:40:75:26:4a:63:38:df:
0f:7e:cd:28:c6:9c:f9:7a:7c:98:55:6e:4e:b7:d0:b0:7d:71:
19:15:ee:97:3e:3d:02:e8:33:c9:aa:8a:90:ec:5a:f4:44:e9:
eb:19:52:00:6a:37:1c:5d:95:30:3a:f2:02:bf:80:1e:ae:85:
6b:6f:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:30 2025 by rpki-client