Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
File: NxYpWi0WQ853rHom4CJke8R5Awc.mft (raw, json)
Hash identifier: MHRfeTzs8cmiltrF/o+EEAmq0R/BjiQIoSydfm7GxIw=
Subject key identifier: 02:AF:57:44:C3:88:58:F3:C5:06:B1:E2:38:41:29:B7:96:C1:17:DF
Authority key identifier: 37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07
Certificate issuer: /CN=3716295a2d1643ce77ac7a26e022647bc4790307
Certificate serial: 0194BBCE715F76EF360139EAE4612919B7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
Manifest number: 07A4
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: NxYpWi0WQ853rHom4CJke8R5Awc.crl (hash: 6n0lhPGo2zntUsxlkDijQ8QMiJ/jHLhYZHLokubAAdk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:5f:76:ef:36:01:39:ea:e4:61:29:19:b7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3716295a2d1643ce77ac7a26e022647bc4790307
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=02af5744c38858f3c506b1e2384129b796c117df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:81:11:0e:24:c9:da:04:e1:dc:1d:42:1d:
11:3f:96:a2:59:c4:92:fe:c3:11:16:9a:ea:23:02:
86:f2:63:9d:be:41:b8:68:93:7d:7f:67:d3:9b:2e:
0c:df:cd:93:db:27:ec:32:18:57:92:68:90:e3:c6:
77:eb:8e:85:a0:4b:8d:64:53:ff:ce:cb:9c:8a:d3:
fb:68:5c:b5:24:5a:f2:e0:83:09:a2:66:c7:08:4f:
bc:80:f0:7a:29:30:9d:9d:5c:b2:7d:a4:3b:32:21:
97:59:55:89:de:c2:cd:75:7c:c4:e5:c6:de:aa:f3:
a9:cc:a1:3f:fe:fc:40:1d:6e:9e:ea:12:d4:a7:b7:
6b:99:c8:8f:28:e0:fd:b1:42:62:c4:47:3c:ea:33:
4e:13:1e:71:a8:34:fc:4b:bd:29:27:32:3d:c1:c4:
91:69:ac:f0:20:7e:c5:d7:7f:c2:0f:90:f6:01:ce:
1a:29:53:d0:74:6f:b4:20:40:60:02:d2:91:5e:d4:
86:d6:f7:3a:a2:ae:1c:fb:c5:5d:58:0a:35:b0:e1:
15:da:72:61:fa:b9:c8:39:f2:54:4d:a7:b8:03:f2:
30:dd:35:aa:b6:31:1c:17:82:c2:7b:66:92:b9:16:
31:00:a2:fd:33:4e:38:63:6b:af:76:db:14:bc:65:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AF:57:44:C3:88:58:F3:C5:06:B1:E2:38:41:29:B7:96:C1:17:DF
X509v3 Authority Key Identifier:
keyid:37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:35:c0:aa:35:fd:42:34:9b:ef:a0:ad:2c:7f:0e:71:4c:
88:a9:da:33:14:38:a8:a7:25:af:83:01:af:f3:0f:6c:0f:2f:
f5:a6:50:67:fd:02:af:44:74:b6:1c:5d:ec:d1:bc:a4:d2:e8:
20:83:e7:bb:a8:f7:c9:72:49:7e:9f:81:88:b6:1b:ca:a1:0f:
bf:e0:40:d9:3c:31:50:37:79:28:74:ba:c5:14:d0:8e:61:96:
5a:3d:c9:9c:73:39:ab:92:30:26:86:77:3b:02:a1:8d:67:6b:
49:6f:67:25:c2:f8:2e:ba:27:fc:27:ea:1f:52:c3:7c:a3:6e:
fa:94:aa:68:92:1a:01:76:b7:0a:e1:ec:45:37:4f:23:9c:8f:
d1:fa:ef:37:c8:34:95:dd:93:41:61:f6:29:83:7f:fa:c7:00:
bd:12:0e:2c:ec:89:bb:34:4e:b0:c7:29:ec:03:0f:e3:45:48:
43:2d:f1:0e:57:15:56:ec:a1:da:a9:00:d3:dc:96:2f:3e:bb:
fd:df:2a:4e:50:5b:fc:87:84:a4:2b:fa:06:f8:9a:e9:76:c3:
36:75:10:ff:be:21:54:08:ab:cd:ac:87:73:84:2b:e6:36:5b:
70:c5:f4:0b:ae:6b:61:7a:72:5d:3e:98:ae:6f:41:15:53:09:
c4:c8:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:21 2025 by rpki-client