Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
File: n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft (raw, json)
Hash identifier: 8H+a4uY0k6bZFev8oEqoiByaGrFQ281zVSnolNb9yVE=
Subject key identifier: 7A:DD:34:A2:3B:C1:54:40:84:39:43:4E:2D:6D:EA:78:73:C8:CB:1C
Authority key identifier: 9F:74:EE:DC:10:B2:A1:02:8A:6D:4B:D0:1C:74:EF:03:1B:21:71:9A
Certificate issuer: /CN=9f74eedc10b2a1028a6d4bd01c74ef031b21719a
Certificate serial: 0194BC3C8F3DC4AE3524E004CC93E855B2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
Manifest number: 077C
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl (hash: B0h89tBcfMKBAJTTFAnTvPXzoH1rE8yoWWxnLoLMips=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8f:3d:c4:ae:35:24:e0:04:cc:93:e8:55:b2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f74eedc10b2a1028a6d4bd01c74ef031b21719a
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=7add34a23bc154408439434e2d6dea7873c8cb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:04:b7:30:7c:3b:c7:52:d1:0d:77:37:23:
1c:40:41:77:6b:c6:8d:3e:a4:61:14:dd:a6:77:3d:
0c:cd:f6:e1:74:b3:08:27:fe:0c:fd:31:50:ed:9a:
ae:1f:53:15:79:ef:c1:32:2e:21:88:1b:1b:f4:51:
0a:0d:b3:cd:0e:6f:19:f2:fe:7d:88:e6:2a:61:1b:
86:31:d5:c8:d9:46:a7:e4:f3:dd:41:1b:12:c8:26:
08:a5:27:72:f0:67:79:93:c1:58:75:1a:92:5a:15:
f8:43:8c:0d:e2:d1:81:00:d4:00:ab:b4:99:7a:5a:
18:c5:dc:96:68:8f:81:42:95:53:fa:1e:5b:91:a1:
34:ce:24:e5:90:ab:c7:b0:e1:a7:e8:76:36:40:ac:
56:22:f1:38:00:db:94:c9:37:56:16:64:18:95:bb:
0a:8c:44:79:88:b4:9a:08:7d:23:55:cd:8c:a5:59:
b4:3a:da:1d:b6:39:79:89:e0:7e:b0:d5:2f:14:1e:
4c:61:c3:1b:50:29:da:ab:bc:ed:b8:d8:28:71:83:
4e:90:bf:77:4c:c3:96:b2:be:e9:5d:84:78:86:25:
8d:c0:1e:72:72:bc:ae:f2:d0:92:67:5c:55:b1:0a:
f9:00:cc:62:df:2b:b3:3a:a6:cf:38:dc:18:99:23:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:34:A2:3B:C1:54:40:84:39:43:4E:2D:6D:EA:78:73:C8:CB:1C
X509v3 Authority Key Identifier:
keyid:9F:74:EE:DC:10:B2:A1:02:8A:6D:4B:D0:1C:74:EF:03:1B:21:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e1:90:af:a7:10:34:29:79:37:a4:ff:98:cf:58:aa:ba:be:
11:db:8c:04:40:b2:05:8b:24:4f:78:91:9f:5d:79:37:df:9b:
80:b6:0f:d8:18:55:8b:6f:2f:da:ba:d3:b1:e8:a1:29:ff:31:
ce:35:e5:8b:96:33:97:d3:e4:da:8d:b7:02:a3:07:38:c8:f2:
00:19:ce:d7:e7:05:a1:a6:8a:01:dc:65:bf:f5:58:94:2c:f6:
62:97:bf:bc:54:9c:65:fc:6a:70:5f:78:ee:c4:ce:77:4b:e0:
0d:ed:0d:74:cd:53:d4:25:19:14:f7:f9:15:2b:46:f2:74:55:
82:1a:37:10:a9:f6:68:83:04:c9:77:a3:54:ee:ce:27:60:54:
93:cd:b1:54:91:15:d9:4c:49:1d:29:78:ce:eb:d8:53:74:50:
54:1f:41:cd:ec:a3:b1:e7:79:77:15:3f:1d:70:5d:3e:af:c5:
40:4b:74:71:e6:ce:1c:5f:16:01:6b:a0:0d:8c:24:1e:6a:de:
c7:92:34:7e:d5:46:fc:5c:e9:dd:08:27:6d:ef:4b:db:cb:3f:
25:b3:70:9c:16:7b:90:61:f7:5e:bf:5d:d1:a1:d3:05:47:b7:
05:fd:cc:d1:ba:06:7e:c3:f1:62:71:c2:c7:0a:24:4f:b1:de:
7a:58:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:21 2025 by rpki-client