Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier: ZY1j/hRnABP6C66hjK8yHf7Hcn+p8vpbvtF76OBzcxA=
Subject key identifier: 47:42:55:8C:F6:25:79:09:40:FC:8E:DC:13:32:4A:46:D1:4D:7B:4D
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial: 0194BD1755DD7F51AB422133B4E90AFE857C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: unEaX1MTfv2De0s6wA/kBMMWncmJD0JQLdv6RwKwnuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:55:dd:7f:51:ab:42:21:33:b4:e9:0a:fe:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=4742558cf625790940fc8edc13324a46d14d7b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:70:00:71:eb:be:13:24:7d:4b:69:e4:74:
3e:aa:e2:d8:75:fc:b9:06:a8:46:b6:0a:4d:5d:64:
4d:2e:85:ee:29:aa:14:c5:6d:70:48:ae:56:86:93:
71:17:25:6f:e8:51:4b:8f:5e:b7:a2:54:e0:aa:75:
78:b0:f2:87:dd:07:43:eb:71:e6:45:c7:6a:04:fb:
33:3f:9c:c8:64:cb:d0:10:91:f7:37:d8:88:73:dd:
a3:fd:fa:e3:bd:c2:29:67:32:c9:de:61:0f:4a:72:
49:3f:7e:8e:af:47:31:6f:0a:52:1b:5c:28:4b:3f:
77:3a:20:0c:55:69:73:b1:f4:36:96:66:87:37:9e:
34:35:53:ac:61:50:30:4d:cc:ed:de:88:8c:5c:45:
cc:b1:d2:9d:f1:ba:12:9e:a7:73:1a:97:d1:3f:95:
b9:b5:bd:f3:7e:92:da:0d:03:90:6d:ff:c8:9b:30:
4d:04:bd:4e:dc:5b:c2:95:34:7f:bb:b7:84:fb:5b:
6b:34:20:9c:0e:e6:fc:ce:23:db:d9:a6:eb:99:90:
29:d9:fb:07:42:48:4c:86:29:f6:de:e2:01:77:9d:
87:f6:9e:e5:5a:60:d3:70:2e:99:6f:e1:6f:9a:33:
8d:1b:a1:d7:c5:fa:34:cb:a6:ea:18:34:6a:91:d6:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:42:55:8C:F6:25:79:09:40:FC:8E:DC:13:32:4A:46:D1:4D:7B:4D
X509v3 Authority Key Identifier:
keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d0:db:3c:70:3c:33:29:51:1f:d9:62:5c:af:f2:51:77:14:
3f:d6:df:53:f0:e6:fd:a7:d4:1a:e0:b3:ef:f3:6a:da:ee:7b:
60:53:e5:c6:de:cf:13:77:55:38:bc:d3:39:0c:80:e3:05:40:
ca:9d:85:dc:d0:a5:ad:64:43:8b:4c:e9:67:7d:7a:0c:4f:42:
99:33:50:38:9e:75:24:f8:1e:b1:54:ae:83:46:4e:fd:48:0c:
7e:39:95:5d:eb:cd:18:1f:b0:68:34:d1:08:35:1d:43:6e:37:
77:59:7e:cb:f6:75:b4:0d:81:ae:d4:3e:16:4f:72:64:53:ef:
fb:0b:0e:22:4f:56:f3:2c:8b:fa:60:11:5a:3e:ce:ff:b2:b2:
ff:5f:2d:7c:20:b5:66:67:80:40:47:f2:6f:d7:97:62:f6:25:
f2:3a:61:d1:8c:06:4e:a6:79:23:ed:d6:cd:d6:bc:bb:50:9b:
eb:c2:39:cc:77:e9:0d:87:d4:8a:94:df:fa:d2:75:8f:37:f5:
f1:d7:0f:87:93:f5:a2:0a:b5:80:fc:98:d8:ed:48:66:12:41:
53:81:18:4c:09:dd:ba:7a:eb:be:3b:93:ad:9c:1a:30:6a:32:
bf:7f:46:64:57:d5:ca:63:f5:7c:9b:a5:10:07:b5:03:8d:d5:
b6:c2:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:39 2025 by rpki-client