Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: lof022wRnBwIoGBTqUn5CJctRNQOcdWxQ/tVmJvR4fw=
Subject key identifier: A7:89:A6:34:5C:48:43:5C:50:EA:C5:60:DD:D9:35:43:F9:11:59:60
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 0194BBCE1205C85EA0D1BA3E9E282A7CE71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 0528
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: LCGyR8fc4mZMdIJ5NYs3ltPzNK7knszkd5jwlmQWaQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:12:05:c8:5e:a0:d1:ba:3e:9e:28:2a:7c:e7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=a789a6345c48435c50eac560ddd93543f9115960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:6a:3c:4a:c3:c7:c2:cb:ee:1e:12:32:13:
a6:d4:d0:b7:37:fc:91:4c:4a:e2:f2:68:d3:ee:04:
ea:f2:c3:e0:a2:97:7b:d9:25:e3:1b:a1:97:c4:f7:
6e:fd:68:83:1b:10:56:99:f3:41:3b:79:45:bd:64:
c9:8d:ed:e8:63:be:b9:22:07:da:70:e7:3d:8d:d6:
91:22:1a:8c:bc:ec:72:95:37:04:c5:4b:f0:cd:34:
1b:cf:f7:1d:63:7c:85:1d:28:38:12:73:29:f1:d5:
b0:70:ce:f3:ef:b4:ff:fe:ef:83:5c:56:a9:0b:a5:
0d:c5:73:f3:16:d6:44:9c:f4:e2:b6:3c:5d:13:8b:
ce:9b:44:5f:71:69:f7:e9:73:a2:22:69:63:68:e0:
23:85:76:ad:15:27:70:8b:0b:27:4a:23:0c:6b:56:
aa:c1:3c:ec:3e:97:0b:df:d4:11:7f:61:f0:bf:3a:
b1:b2:b0:ae:fb:39:f8:1c:1e:e4:48:b0:6c:05:a5:
0c:f2:f0:a4:10:28:6f:34:35:0c:68:d9:60:36:58:
71:5c:25:b5:7a:fe:90:80:12:7e:5f:73:0b:6d:9d:
29:56:87:55:cc:8d:cc:b1:56:e7:61:7b:a8:e4:4f:
88:fe:44:20:38:eb:cb:65:01:f9:47:f3:ae:6d:4c:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:A6:34:5C:48:43:5C:50:EA:C5:60:DD:D9:35:43:F9:11:59:60
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:26:0b:a0:d0:8b:86:81:86:72:b4:da:82:90:f7:18:99:7d:
61:5d:0f:08:2d:a2:33:9d:2f:b6:c9:99:6b:9c:b1:eb:c4:43:
7c:ea:b2:07:9a:a9:1a:84:1e:6a:25:ef:c4:8e:4a:8c:c7:a3:
51:6c:63:2e:de:43:61:ac:cd:6d:f7:c1:a3:69:63:b7:55:06:
40:f7:e0:64:ec:3b:5b:f5:dd:c9:ea:f5:36:41:bc:ff:7a:55:
c4:56:b0:b2:73:96:e0:85:f1:22:6b:a8:ab:44:d7:06:83:6c:
03:8c:e2:cc:3b:1b:6c:14:4b:23:f7:59:7e:d1:f8:ed:9d:10:
b4:09:31:12:7b:31:4d:09:2a:93:31:f6:9e:bf:bc:76:3c:e3:
0a:3f:fe:ae:0b:13:9a:e2:f5:48:37:a4:cb:c8:36:f8:c7:01:
ec:c0:d5:fc:a5:a3:5e:5a:9e:8f:a2:b9:d3:b7:12:cd:09:9f:
cb:bd:77:0d:57:90:80:b8:84:51:c2:0e:5a:63:e6:85:62:af:
e1:16:ed:28:b0:23:e4:1d:9c:7c:ff:95:38:f1:96:dd:c9:89:
c2:9f:3f:f3:48:4b:ab:56:d2:1a:68:dd:f8:46:83:b7:b2:88:
93:da:92:16:21:6c:a7:0e:ec:94:4e:60:b7:e9:a1:f4:21:55:
e5:8b:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:29 2025 by rpki-client