Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
File: nckgfnB-NQXfaLmlvXCtKM1N04U.mft (raw, json)
Hash identifier: +ZF42Pbr5ze8tVmwHGZ0Yup0NnkbNykKcG2PWASLOzo=
Subject key identifier: 31:1F:79:0E:D8:49:69:EE:E3:65:9C:CF:96:7C:AC:44:FD:B4:C6:FA
Authority key identifier: 9D:C9:20:7E:70:7E:35:05:DF:68:B9:A5:BD:70:AD:28:CD:4D:D3:85
Certificate issuer: /CN=9dc9207e707e3505df68b9a5bd70ad28cd4dd385
Certificate serial: 0194BC3BE2165E32853457EA1FB5AB89E6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nckgfnB-NQXfaLmlvXCtKM1N04U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: nckgfnB-NQXfaLmlvXCtKM1N04U.crl (hash: PkZZr0VTiDVzK0LOe8kxwesYqQW8q52SDpQ2Wn9D1Hw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:16:5e:32:85:34:57:ea:1f:b5:ab:89:e6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc9207e707e3505df68b9a5bd70ad28cd4dd385
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=311f790ed84969eee3659ccf967cac44fdb4c6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:65:bc:cb:1e:b6:9e:a5:51:57:d6:2a:01:
7a:bf:d8:77:ec:61:ca:c6:aa:39:91:1e:a8:89:8b:
65:05:68:ff:f1:54:37:d7:42:5d:e9:59:4b:4b:7e:
ae:c7:4d:2f:7c:60:5f:0e:a5:58:77:98:3c:b5:d8:
46:e3:de:99:1e:ab:fc:3c:5d:1e:9f:94:20:a8:ed:
6b:1d:82:a5:69:f7:51:74:b8:46:70:f6:8c:6d:54:
25:23:04:b3:f1:fd:fd:3b:c8:96:66:d6:4b:52:a5:
76:f1:29:de:db:7c:b9:99:e6:62:97:e0:1d:99:78:
8e:16:f8:ba:13:ef:f0:d6:d1:ee:85:68:11:be:da:
a7:f1:86:57:c9:91:15:2d:6a:46:e5:aa:d7:45:2d:
39:80:2e:37:42:cb:cd:d0:d8:87:5d:dc:3a:04:e8:
b3:9b:6b:61:53:74:80:07:2e:da:70:7c:c5:3c:a6:
44:45:3b:5d:6f:4a:81:20:f6:5a:d9:92:26:39:a1:
1c:4b:f8:8c:8f:b5:46:b6:c1:d3:30:00:cd:1f:65:
87:69:54:af:bc:7b:75:2b:6a:0d:85:fa:43:f2:8c:
ff:c4:4f:0d:ea:10:90:e5:01:dd:cd:9e:c2:fb:85:
38:2d:92:26:e2:f4:e1:30:ee:5b:94:82:f8:8e:fe:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:79:0E:D8:49:69:EE:E3:65:9C:CF:96:7C:AC:44:FD:B4:C6:FA
X509v3 Authority Key Identifier:
keyid:9D:C9:20:7E:70:7E:35:05:DF:68:B9:A5:BD:70:AD:28:CD:4D:D3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nckgfnB-NQXfaLmlvXCtKM1N04U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:2a:03:1b:fd:b4:24:90:6a:9c:32:2e:8e:3d:15:af:45:a7:
78:57:1a:40:8f:fc:77:2a:79:82:d2:35:d3:2e:44:2f:4c:59:
8a:a3:4a:13:2c:c6:a8:09:ac:64:ce:82:75:fe:66:2f:79:9b:
d2:bb:5d:b8:4e:e5:23:00:96:55:98:40:61:49:fc:f7:22:59:
85:31:89:31:29:78:72:3b:33:a6:7d:ec:64:40:a7:0c:a6:9d:
a5:bc:11:af:8e:7e:bf:17:a2:5c:33:b4:45:a2:c4:e2:88:87:
65:3e:f8:f8:ef:89:4d:27:d7:6f:9e:cd:7a:3b:e9:2a:c9:4b:
dd:68:05:0e:79:62:1b:f4:27:16:52:4e:2a:1a:a1:86:87:ff:
9c:f8:16:5f:fa:d3:d3:13:b6:64:e6:1e:7b:fc:ac:07:fd:5f:
d3:4b:b3:c4:de:17:82:5d:88:86:41:97:fe:15:47:a4:f7:4c:
dd:2e:b9:73:ea:8b:ce:61:4b:0f:cd:72:09:12:c8:36:93:a3:
95:85:94:9e:5d:0a:09:54:9e:3d:57:57:5d:73:5b:a7:0a:da:
1d:a7:85:e7:37:04:dd:f1:82:65:97:b8:05:07:d8:b0:25:89:
c6:98:b2:60:0d:f6:25:58:b4:fd:fc:53:48:5f:fe:0d:f7:68:
c3:5e:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:22 2025 by rpki-client