Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
File: nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft (raw, json)
Hash identifier: 4AMltY/6Xta3zmaWKjKfmkcpGbtWPS4Rf1WzcvJyas8=
Subject key identifier: D3:7D:8A:76:29:5E:F3:4D:66:4D:22:48:73:44:65:25:98:E5:CD:0B
Authority key identifier: 9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
Certificate issuer: /CN=9caf9a0d78a6811cd1686deb117788af866c8091
Certificate serial: 0194BBCE0355C75329ECB49D5EA64AF4279F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
Manifest number: 0868
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl (hash: SOcIJ9u56u694AGbS8srjkAhe943iImSrhUsExAl7sY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:03:55:c7:53:29:ec:b4:9d:5e:a6:4a:f4:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9caf9a0d78a6811cd1686deb117788af866c8091
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=d37d8a76295ef34d664d22487344652598e5cd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:59:76:bc:fc:b9:c6:37:cb:93:b1:5d:9b:
52:53:52:4f:0e:f4:84:1c:1e:ee:db:01:60:44:46:
c1:75:b5:2e:77:98:df:e7:34:7c:01:02:e4:47:ca:
38:6d:df:eb:14:6d:44:7c:68:24:f1:87:e7:c4:97:
75:69:7a:1b:bb:93:f9:9d:40:5c:e7:df:c3:32:ef:
dc:6c:03:e3:9e:47:ba:f8:94:87:0d:c5:cc:bf:7e:
51:e9:a1:82:bb:51:61:1f:d2:da:19:ba:64:b5:08:
6e:45:43:31:88:70:9e:c9:f7:6e:13:7f:cf:ad:8b:
45:36:60:59:91:13:fa:1f:bf:8a:56:8e:20:f1:32:
f9:6b:ce:6e:4f:d8:ed:c5:b4:6b:d0:d0:fd:98:17:
fe:d1:69:ba:12:92:23:55:15:fc:eb:a2:ac:75:b3:
c9:63:63:fa:59:fe:af:a1:d5:5c:a5:42:02:fd:77:
91:55:1a:e0:37:13:04:f1:c2:c8:3a:7b:61:de:7f:
45:bb:2f:74:8a:44:16:c5:4d:b4:49:7e:0f:83:8a:
04:a8:30:aa:4c:d6:19:7d:f3:2e:8f:41:5e:e4:2c:
11:c4:11:ca:2c:22:4d:54:45:40:dc:ed:d0:8c:ec:
a5:eb:bf:51:3a:3b:24:99:3c:fd:6c:60:a3:ac:4f:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:8A:76:29:5E:F3:4D:66:4D:22:48:73:44:65:25:98:E5:CD:0B
X509v3 Authority Key Identifier:
keyid:9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:da:72:d6:4b:54:bd:fa:0a:1b:33:01:6c:c4:69:f3:e3:95:
21:58:04:10:1d:99:ad:cc:95:73:83:a2:8c:0b:3f:f1:2f:18:
2b:8e:a9:66:1c:6c:ed:d4:88:d5:0d:68:19:e7:a2:d6:5f:1a:
5e:d4:c6:2a:53:77:9d:19:73:b3:7f:b3:bd:c9:2f:ae:d3:ab:
72:d3:f1:1c:9b:fc:60:9c:af:a1:d8:73:cb:2f:2e:1e:76:7f:
7b:54:c5:bf:4a:45:72:81:a1:5e:66:83:5b:50:96:16:cb:9f:
74:cc:a8:95:4e:0a:2e:a1:ce:d3:1e:90:7f:6e:5a:d0:08:8f:
13:bc:19:71:ae:a3:3b:be:26:a6:21:d6:2c:b7:76:59:1a:77:
71:0b:be:5d:9d:13:0f:69:46:6f:66:1a:1d:cc:63:f4:16:6d:
be:d2:b3:e7:6b:65:71:3e:52:99:a0:6b:68:59:3d:a6:4f:5b:
06:1f:7f:0e:01:30:f5:f9:fa:6e:a7:09:25:1f:2d:d5:d9:fb:
2a:7c:14:f7:7f:9a:a0:80:92:f4:d6:63:c9:74:9e:64:54:a0:
6d:06:c0:2f:d0:b3:62:07:08:66:e3:13:28:2b:1e:92:f5:1e:
55:cc:5e:ee:81:7f:06:8d:c3:03:e0:03:17:36:9c:76:2f:46:
06:41:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:10 2025 by rpki-client