Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier: R3CwMZGYVNMtBMJ10kQtSoG8ftAEX4lDdY56IVs0tXs=
Subject key identifier: 22:97:B5:2A:D0:4F:4B:29:C9:89:33:86:32:67:E3:25:2D:3F:4E:FE
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial: 0194BBCE667C68A9F3E4AFA8C71055FE9D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number: 05D8
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: UGhjl2u7T7YahKGBncheK7LnUOTzXIdzLagkgGjFgxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:66:7c:68:a9:f3:e4:af:a8:c7:10:55:fe:9d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=2297b52ad04f4b29c98933863267e3252d3f4efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:0c:ae:db:68:9e:c0:0d:15:0a:72:71:4a:
03:67:f4:c6:1c:77:3b:0f:83:a8:70:f3:8e:1e:ed:
b9:ad:07:4e:8c:50:43:6d:af:a7:66:ce:87:8a:59:
12:13:00:68:92:03:bb:21:2b:d9:c5:b8:c4:40:df:
bf:0e:dd:51:fd:e4:11:18:58:1d:b4:ac:12:14:c6:
39:6b:8d:7b:6d:0a:74:b8:ff:66:01:55:a8:86:6f:
95:76:67:ca:56:bb:f6:8a:e8:ea:6f:c6:0d:c6:64:
b6:29:6b:20:d0:4c:b5:6d:ee:0c:ad:ac:58:f0:11:
66:0d:69:1b:78:c9:0d:c1:ff:ef:95:a3:00:cc:26:
f9:74:cf:08:fa:1f:4b:11:44:2a:d8:55:06:d6:01:
40:1c:98:d6:95:56:88:17:b0:04:4f:48:b3:6e:da:
a6:c0:66:c2:3d:4c:3a:04:d6:90:12:d9:bd:5b:0c:
21:87:ce:3a:12:04:dc:4b:19:f6:39:1e:7c:59:c8:
74:94:28:45:18:4a:52:03:09:ec:4b:38:1e:aa:8c:
2c:d9:cd:c0:5a:f0:e8:3c:12:ba:9c:d6:7d:41:44:
56:7d:e3:a0:d9:64:d7:41:b8:15:b2:63:8e:c8:81:
5b:29:6a:df:6d:de:81:47:99:3e:1b:f6:68:6a:47:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:97:B5:2A:D0:4F:4B:29:C9:89:33:86:32:67:E3:25:2D:3F:4E:FE
X509v3 Authority Key Identifier:
keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2e:43:21:a0:0e:e1:dd:d1:2e:a4:0a:1a:05:ec:ae:91:c2:
0a:88:de:92:f4:09:bc:bd:2d:23:cc:b1:69:eb:bc:29:51:b5:
8c:5d:1f:28:5a:cc:f9:f0:dc:87:6c:38:7b:50:a3:78:65:a2:
68:cf:c4:46:b7:43:16:9b:f8:dd:3d:f3:b1:1f:9d:09:9b:4e:
93:77:9c:7f:26:17:39:75:54:b5:c7:09:90:24:aa:27:72:04:
04:e5:09:e1:52:aa:16:8a:5f:73:5e:ec:48:ee:d0:06:66:36:
fc:fa:6c:dc:c0:59:0d:a6:28:25:9f:24:7e:71:94:22:03:2b:
04:46:fa:af:06:9c:15:5a:60:da:d1:ac:ed:c3:36:a5:07:b3:
f0:07:8a:65:d9:6f:d0:b9:f8:8c:77:38:81:b9:ed:3d:11:cc:
a5:9b:b0:00:e8:dd:9d:33:f6:f2:d1:fc:c8:1e:be:f8:6c:8c:
66:4d:85:ef:65:31:bf:b8:4c:fb:ff:f7:cb:70:c8:87:91:10:
c3:ae:ad:08:c3:83:4c:de:df:80:76:c0:c2:84:70:18:56:c6:
d6:7b:c7:45:09:ed:2f:ee:b3:8a:16:86:14:08:e6:1d:9f:80:
93:ac:e8:10:e8:eb:12:bc:54:e3:15:ba:91:45:f8:1b:26:32:
09:ba:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:30 2025 by rpki-client