Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: /qEHJfXq7RkTbiIahb6p6ivqyn9GoU/HrioMfSLW/0w=
Subject key identifier: D1:B1:11:D1:C1:81:A6:85:62:52:6F:CF:FD:F6:8D:F8:73:AB:A0:6B
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 0194BD179DE587654A0E73E727ECF12BF0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 0E75
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: J4napoQLz2CXPQFJoRhaFaU1GFdrjQKI1iC8x6le3fg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9d:e5:87:65:4a:0e:73:e7:27:ec:f1:2b:f0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=d1b111d1c181a68562526fcffdf68df873aba06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:c7:39:b3:28:66:c6:1b:94:10:73:b7:08:
1f:a8:32:af:4a:f4:3a:c7:72:75:b2:f2:93:48:2c:
2c:bb:07:7d:25:15:83:3e:c3:63:c4:09:8e:8e:a9:
ed:32:13:65:4d:d6:18:be:92:76:49:8d:83:40:d0:
1a:ca:4d:42:8c:39:aa:32:d3:83:ce:29:6e:d2:6e:
be:f4:2f:a2:9c:36:7a:0d:10:0c:14:4b:07:19:08:
3a:11:fa:d0:46:04:37:42:3e:f2:fd:cf:90:d2:fd:
35:b4:53:3d:9b:b9:e5:da:fa:00:0d:e0:3a:99:73:
e4:e8:50:dd:d7:e4:22:0e:99:d6:9c:19:16:84:30:
a5:4f:37:29:8e:84:a2:ed:02:5c:d3:ca:07:00:4b:
11:56:60:c3:58:bf:48:a1:05:11:18:86:d2:43:04:
d9:41:e4:4b:b6:e0:d1:b0:dd:ab:b9:d3:47:aa:3d:
28:56:02:76:27:71:e3:7b:51:9a:00:af:cb:50:33:
94:8a:66:29:a5:d1:ee:84:be:70:24:82:00:91:cb:
b6:46:36:ca:ee:2e:3d:9c:ef:b6:a8:68:51:99:73:
7d:bf:1a:ef:d4:69:ef:d5:65:a4:a6:8a:93:bc:c4:
59:11:e9:14:1b:b2:35:4a:79:2a:bb:7e:e2:b6:d7:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B1:11:D1:C1:81:A6:85:62:52:6F:CF:FD:F6:8D:F8:73:AB:A0:6B
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:dd:cd:12:76:1c:17:37:3b:b0:90:c4:90:96:cb:a0:70:c1:
be:0d:c7:34:27:2b:ec:5e:dd:5f:c5:94:47:87:e9:f3:d4:fa:
f9:00:1e:fc:14:f7:54:bf:db:b2:78:5d:e9:21:e8:00:39:fe:
fb:59:94:f2:0d:a5:60:ee:32:07:a5:0a:f4:ff:ef:c7:2a:3a:
44:f2:84:69:f3:40:68:04:c1:68:0f:d4:97:21:63:77:8f:52:
39:05:64:f7:ea:d2:43:1a:71:55:6d:20:8f:3f:e3:71:d5:6d:
c5:5b:17:f8:12:94:6f:c6:74:db:fc:fd:ea:9b:74:20:8d:f6:
99:03:f0:1e:b0:f8:30:f8:7a:f4:0b:a8:0a:c4:9b:02:b7:92:
c5:fe:05:dc:88:af:c9:0d:6c:8d:c4:9e:61:58:17:f5:0d:70:
57:c7:ed:d7:cf:b3:d1:e7:fc:94:49:15:aa:70:7c:74:5b:3e:
e4:13:83:ac:ab:6f:c8:08:24:d5:b0:f8:9e:6f:45:33:42:a8:
30:12:dd:ea:7f:6c:30:54:6e:1d:29:51:1e:6f:1c:a9:75:19:
1e:3e:65:1d:74:ef:bc:76:76:df:20:f8:31:8e:52:9c:1d:02:
21:bf:93:be:e4:2f:25:bd:0e:a7:16:c5:33:c2:6e:c5:71:8f:
22:c5:35:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:43 2025 by rpki-client