Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
File: nc28ow8_5XpR57bAt_MgOvFnKiI.mft (raw, json)
Hash identifier: IjiXvSE6yGfNBKG5IrZFYMUn7qLrj0jopxMa6N1bESU=
Subject key identifier: 57:C7:24:29:16:78:C5:8D:3C:2A:40:C4:0C:51:F6:CC:EC:92:71:22
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 0194BBCEAD7C498FF6348283DB8405CD6127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: nc28ow8_5XpR57bAt_MgOvFnKiI.crl (hash: ibJ/oO237fYzlb3NC4aGFhZEQCKdq0FyPx9o3V/IZBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ad:7c:49:8f:f6:34:82:83:db:84:05:cd:61:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=57c724291678c58d3c2a40c40c51f6ccec927122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:40:db:a2:36:0c:dc:e6:e7:1b:79:95:75:
b4:8c:29:a6:67:27:8c:5f:1b:93:5a:80:9a:08:34:
d9:b6:28:27:47:a1:08:06:7a:b0:3d:5f:29:b9:dd:
f5:67:c0:b3:47:e4:98:d5:44:24:7b:13:bc:44:eb:
5a:b6:83:ef:43:b5:63:c7:6f:8c:21:4e:57:db:64:
e1:35:ff:0a:6c:65:c9:34:51:52:26:be:b0:b6:30:
cc:d5:37:a4:42:94:14:c5:73:09:e5:fb:78:10:9e:
41:91:95:de:d4:ca:f3:a5:34:29:2d:6e:3b:b1:5c:
03:5c:d6:74:44:ba:69:eb:32:69:6a:68:2c:dd:5b:
9e:cf:e5:91:d8:af:d8:9c:7f:e9:48:9e:5e:af:f6:
c7:95:df:d4:d4:aa:1e:b4:41:76:03:65:41:02:0a:
75:8c:06:4f:32:ed:11:f7:d9:fd:79:13:a3:07:88:
b5:23:3d:f6:20:8e:b0:2b:b8:9c:57:63:60:56:5e:
b0:d1:d2:5d:1f:1b:c1:c7:dc:2b:5e:e7:a3:04:0b:
17:30:0e:32:de:5b:ca:81:ca:62:12:7e:47:76:21:
1d:16:f8:4b:81:c9:08:d7:3e:a4:d0:d0:37:33:37:
eb:86:a3:df:4b:0f:f5:0b:15:11:e6:71:45:a3:d0:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:24:29:16:78:C5:8D:3C:2A:40:C4:0C:51:F6:CC:EC:92:71:22
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7e:5f:ce:c2:ec:a7:5e:d6:50:28:34:b8:0c:b2:b0:3b:5a:
03:42:5c:cf:aa:d6:7a:07:db:ab:87:35:d5:09:b2:86:1b:da:
aa:0c:6b:31:2f:18:66:4d:44:55:7d:f4:02:ae:05:9d:b9:43:
d8:79:d1:4b:4b:ec:db:50:8a:67:9a:81:eb:d9:d3:9c:ef:7b:
16:83:c4:05:8e:37:dd:b9:5f:01:fa:6f:d8:a5:6a:78:5a:65:
ae:6a:32:10:82:55:cb:2a:b6:c1:1c:cc:29:08:4d:6e:14:16:
75:ed:54:fa:c3:11:9a:c2:a9:91:f4:86:c8:c2:e5:c8:be:65:
2f:cf:54:2a:61:f5:13:9f:22:7c:6f:5b:e3:96:e3:ff:3f:2c:
7b:94:f5:57:8d:94:3b:ca:81:01:dc:5b:0f:52:2f:d2:72:77:
80:aa:8b:f0:c5:ac:a5:3e:a6:6a:bf:e4:93:c4:6e:07:35:b7:
11:46:0f:3f:81:0c:1c:29:7e:44:d4:d3:b6:a8:a9:77:14:01:
85:8e:7d:e2:b0:a3:ef:96:9a:fa:e7:e8:00:05:51:72:d4:24:
18:15:e8:a5:9b:48:7b:9a:e6:9a:c4:aa:e1:05:7a:c1:12:b8:
f7:b3:3f:a7:69:4c:72:bf:77:5a:51:9d:50:01:8f:04:c3:0e:
4c:5d:f8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:05 2025 by rpki-client