Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
File: N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft (raw, json)
Hash identifier: v2Y2lAkuKexOif6JwBEqBhBEh9KZEc3m2whIGm75f/I=
Subject key identifier: D0:40:B3:A7:8C:B2:43:8A:A1:B7:33:3F:90:8C:44:7B:25:1C:BE:6D
Authority key identifier: 37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
Certificate issuer: /CN=37698b4f37d8081c3505ada0baa85221934341be
Certificate serial: 0194BBCDC2772595F40163A22A73DBF1DAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
Manifest number: 0C86
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl (hash: jZBudHtTHBoYSVKA8qbOfpt4QqX5efbsPipzFkJ+fRk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:77:25:95:f4:01:63:a2:2a:73:db:f1:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37698b4f37d8081c3505ada0baa85221934341be
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=d040b3a78cb2438aa1b7333f908c447b251cbe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:90:41:72:70:aa:7b:fe:d4:7c:2a:a4:9a:
a9:8e:8a:67:d4:4f:6d:44:6a:87:1a:e0:68:a7:cc:
9d:e9:db:1c:e7:ea:7a:7e:b5:83:67:8d:f8:46:be:
72:30:46:84:21:f8:dc:bd:1a:9f:6d:e5:63:23:c1:
fe:68:f5:34:34:62:21:56:93:88:9c:d6:93:00:83:
f7:d7:01:67:da:56:69:a5:6a:25:75:55:4f:0e:00:
8d:fe:19:59:95:15:a2:7a:43:f7:55:24:8b:c5:cf:
fe:a8:e8:ad:70:b8:fa:74:e4:d6:88:50:b2:00:b9:
a0:dc:97:99:a1:6e:d8:8c:ef:0a:59:5a:bc:41:84:
72:bc:51:d0:7c:7e:a6:c7:ae:20:d4:11:dc:21:51:
fd:7c:22:17:1b:61:8d:fb:f6:a1:f6:9a:93:bc:8a:
90:1b:a2:7d:9a:02:fa:62:0a:b1:2b:7b:ab:c9:1b:
89:87:42:f1:f1:b8:b9:21:64:2e:e0:90:ea:63:f4:
73:d4:1f:26:2e:40:5e:f6:0b:e9:cb:98:5e:ed:e0:
bb:52:a6:44:b0:8f:11:4c:67:43:5c:bf:5c:dd:10:
21:4b:5c:60:fb:5b:4e:d0:02:d1:6a:f1:57:4a:f4:
ea:f8:eb:18:08:29:f5:05:23:ba:4d:7f:e0:d4:fd:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:B3:A7:8C:B2:43:8A:A1:B7:33:3F:90:8C:44:7B:25:1C:BE:6D
X509v3 Authority Key Identifier:
keyid:37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:46:89:37:32:f4:92:ad:f3:65:d6:17:0e:5b:19:55:24:ea:
7f:d8:d2:2a:ee:1b:e8:a4:fd:a5:6e:14:36:6f:f0:ad:9c:e7:
b6:29:1d:89:d4:e3:6a:b8:b4:b9:32:1f:91:d7:cc:85:c4:c2:
aa:3b:31:91:45:8f:48:cd:7c:2b:b9:07:ba:bf:c7:8b:ac:75:
60:ef:a8:57:4a:c1:4d:cc:2c:14:26:38:14:d9:51:64:2c:c9:
15:e2:d3:f5:29:93:30:ee:ff:10:9e:a8:bb:a0:b6:06:84:c7:
83:c0:1d:8d:d0:18:f8:b1:b7:a4:a7:f7:fc:61:d7:56:de:37:
f7:f0:cf:e7:fa:7c:48:0e:b9:cd:3d:c1:c8:63:be:b8:f9:bc:
dd:1e:ae:63:dd:ea:c1:36:5c:52:12:a4:8f:1b:33:4a:7e:80:
9f:4e:1a:0a:d9:ad:8e:e8:3c:82:60:9e:c7:b4:0d:ae:79:1d:
f4:a6:72:1f:55:52:f8:ff:ce:a0:d4:89:3c:64:30:8c:a2:e0:
7d:fb:29:96:45:62:61:ab:da:07:5f:18:33:e9:ee:34:3e:d8:
22:1b:fd:77:e4:e8:a8:f7:00:e7:d1:9d:bd:69:35:e2:2a:01:
8a:48:e4:6e:a0:be:a9:8f:af:1a:d1:d2:34:af:f9:c0:8c:d0:
4d:58:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:31 2025 by rpki-client