Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
File: NWlXUM1GUx3eil-yZyzcgw09DG4.mft (raw, json)
Hash identifier: CnbBsLc64cC/lJi+nlwzkCGGtGSj2w2nwXR6wcYRHvQ=
Subject key identifier: AD:70:BD:03:DE:83:58:5A:BB:E2:DF:87:FE:93:98:A7:9C:D9:F3:CF
Authority key identifier: 35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
Certificate issuer: /CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Certificate serial: 0194BCE0C95778C981695D4CF36061A3B202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
Manifest number: 0247
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: NWlXUM1GUx3eil-yZyzcgw09DG4.crl (hash: z8bUXYOXZUxMH7uiigX77hwErMS95m7lCPDu3kyIUf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:57:78:c9:81:69:5d:4c:f3:60:61:a3:b2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=ad70bd03de83585abbe2df87fe9398a79cd9f3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:d6:0f:74:3b:5b:a2:b1:8d:df:ca:53:a7:
70:08:12:48:86:d9:65:00:fe:11:3d:26:7f:11:c0:
fb:8d:d4:4c:9c:48:6c:dd:9d:0a:63:48:95:c5:62:
26:dd:28:7b:28:15:4f:06:4f:f7:6a:63:03:e0:d2:
47:c6:97:57:47:e4:24:0e:3d:85:9c:49:c8:e6:24:
61:82:54:57:b1:d1:49:3e:e6:17:c5:6c:ce:e4:ac:
ad:25:51:80:ae:f4:78:11:4f:64:db:2c:33:d4:a7:
db:fc:52:d4:76:22:5e:82:83:49:01:31:89:5a:99:
1e:5f:32:a4:9b:e0:48:1f:b0:ac:2d:bd:be:5a:12:
58:38:3f:74:8c:61:47:26:96:43:13:e7:07:78:af:
70:d0:27:bf:91:eb:9b:1b:a4:19:9e:1c:df:22:97:
09:22:ac:13:8e:1b:89:65:2b:c9:13:a3:35:78:87:
84:4a:f6:1d:a4:4f:45:89:c6:1c:73:e6:60:b9:c8:
72:8d:5d:d0:c0:9a:d7:48:a6:01:23:84:75:e7:da:
d0:9a:5f:9e:bc:ec:7f:0a:45:a5:93:98:25:bc:40:
01:7d:94:2d:2b:3b:29:66:5d:fd:59:ff:14:46:64:
c9:a9:97:c5:12:be:f7:25:a4:d4:82:40:f1:80:1d:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:70:BD:03:DE:83:58:5A:BB:E2:DF:87:FE:93:98:A7:9C:D9:F3:CF
X509v3 Authority Key Identifier:
keyid:35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cf:b9:86:11:7b:bd:d2:38:be:79:cc:5d:e8:ed:24:78:3b:
53:f6:08:b2:77:48:01:13:85:9d:96:9c:a9:33:26:e2:4f:7d:
a4:24:0a:42:55:b3:03:16:aa:67:37:bc:46:db:d4:b9:80:c2:
9f:27:f2:55:37:58:2c:50:8f:f6:a0:62:a9:17:69:36:94:11:
44:59:62:3e:af:38:84:20:d7:7e:8d:fa:fb:5e:67:f0:c8:21:
f6:be:66:75:11:2c:97:fb:76:cb:52:b2:ce:d2:fe:77:ed:a5:
27:d7:04:0f:d1:35:05:d1:b5:c7:fc:1c:f0:bf:75:cb:e2:62:
74:82:6e:3e:c4:bc:2d:f6:d8:2d:60:c7:34:c7:60:21:fe:03:
41:86:aa:68:68:9f:9a:50:4e:86:b5:7e:51:35:fe:47:f8:b1:
7a:f6:da:cb:61:bb:d1:29:22:30:52:89:51:6b:c0:d8:73:89:
61:e8:b6:66:13:eb:d7:1b:09:88:d4:bb:77:79:e0:0d:79:5a:
95:e8:8a:69:c9:af:a5:7e:3a:87:ad:47:22:20:56:9b:27:9e:
03:a2:47:a3:68:3e:30:b0:a0:df:b7:bd:7c:35:10:a1:01:39:
15:6d:fb:96:fd:3a:02:78:c7:17:44:31:ae:ee:02:a3:31:d0:
7d:55:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:11 2025 by rpki-client