Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier: +POi+vawMYQdSy5ghjJv0plnqhirxGYTYruLwzU4abQ=
Subject key identifier: CA:0A:D9:AE:1D:06:13:68:04:41:E8:09:AD:DA:85:25:89:89:95:C9
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial: 0194BBCED85B47C4BA4B2D4C2EE5D81E5BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number: 092A
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: PI+EE9DrvZzyIWQttsb7AmPvJJ7XQ/nU4UEpSeJ5b2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d8:5b:47:c4:ba:4b:2d:4c:2e:e5:d8:1e:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=ca0ad9ae1d0613680441e809adda8525898995c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:3a:90:7d:ef:7c:49:6d:22:70:7d:09:85:
fd:2d:c4:25:43:af:e9:40:f4:57:78:87:99:ed:3e:
fb:e5:0a:99:8e:9f:d9:52:1e:33:d8:db:98:9e:cf:
ed:96:21:39:b1:d3:f9:65:64:65:cb:b2:cb:09:75:
ab:be:cb:5c:7b:21:ac:b1:e6:f1:f9:44:84:93:ed:
69:e7:5b:4a:ba:e4:5d:c9:a6:ba:4d:5b:c2:cd:1e:
21:6d:09:98:8b:80:c9:74:d4:b5:f7:b8:46:44:43:
18:9b:72:b3:fa:b5:85:be:ff:a1:16:94:67:c9:2c:
cf:40:4b:ec:23:3d:c4:23:df:12:ec:fc:8a:82:af:
eb:58:ea:86:24:a3:32:99:0a:92:a5:36:bb:38:1e:
7d:d2:c8:3a:d4:7f:c2:85:d2:08:6c:39:0d:2d:cc:
65:72:dc:e2:ef:a2:13:93:37:77:03:aa:21:e8:6d:
67:a3:e2:c5:be:9a:ad:44:c1:2d:b1:e5:d8:bc:e5:
0e:a0:0d:95:bd:46:e6:66:fd:29:6b:09:62:b4:95:
1e:68:00:a7:00:72:ef:c6:23:a6:22:e5:b0:9c:74:
40:71:30:e3:ea:9c:da:18:0b:17:cb:b4:8e:8b:29:
6d:f1:68:8e:4f:12:bc:a1:85:e3:4c:82:40:e8:08:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0A:D9:AE:1D:06:13:68:04:41:E8:09:AD:DA:85:25:89:89:95:C9
X509v3 Authority Key Identifier:
keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ad:de:a0:91:2c:4c:4d:fa:07:09:2f:d9:fb:d7:03:43:6b:
91:c9:aa:4c:ff:92:91:b5:e3:9a:f3:ba:9f:be:00:9c:11:39:
c6:a4:9f:96:fe:e9:a6:e6:7c:76:f0:37:7a:50:e1:42:55:56:
77:ba:86:44:f8:a6:09:80:dc:45:7d:55:39:bc:04:ac:75:13:
25:64:9c:69:da:16:51:80:6a:f6:77:8a:de:92:48:f3:ee:3c:
f4:ef:d4:d9:94:bc:02:6d:38:ae:11:77:54:cc:14:6c:68:9a:
27:0d:0c:52:4a:13:80:94:db:fb:65:c2:10:d6:9b:63:d1:0c:
34:f4:51:92:79:a2:76:ba:80:12:d7:3d:57:27:9c:a7:20:97:
8c:b5:1e:bf:d6:e1:d2:cb:e8:73:ff:f6:f2:cb:0b:14:d8:d0:
d9:b4:54:e5:50:8e:bb:55:24:0c:fe:da:d0:f9:98:8d:83:26:
ec:23:d2:ad:ab:35:73:07:ed:df:c1:8a:cd:d7:52:78:36:ab:
41:18:9c:26:aa:ec:1d:b0:fb:08:69:45:f0:3f:31:a6:a0:cd:
3c:27:24:31:81:3e:d7:86:a3:b5:2f:21:15:b4:40:9b:7a:76:
28:1d:61:4e:ad:59:40:47:c2:ad:8a:1a:83:f9:6d:13:6c:6e:
16:25:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:22 2025 by rpki-client