Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json)
Hash identifier: lala8gVtX6//zJWHSNhAEYTKW4CTMqv7kL8vyBn5z74=
Subject key identifier: 4D:7F:F9:6A:1B:77:B3:1B:BB:92:9C:C6:C3:A0:FE:AF:04:2A:B1:66
Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Certificate serial: 0194BC052E7884316C4E5F4D72544F565FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
Manifest number: 06B7
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: 4gNvo7EsMsJwZ+AOthfO9WUiNGAZsXWIiy2a0AAuIJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2e:78:84:31:6c:4e:5f:4d:72:54:4f:56:5f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=4d7ff96a1b77b31bbb929cc6c3a0feaf042ab166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:72:a4:2d:5f:9d:17:17:96:ae:df:e4:33:
eb:88:9b:01:a6:b5:53:66:3e:11:29:97:e9:e3:41:
a4:04:0a:8f:a2:a7:f5:f9:01:0d:a2:44:4b:2d:93:
49:5f:db:fc:f8:1c:bd:b2:bb:69:82:fa:34:4e:67:
c1:a3:f2:3c:ce:a9:2b:04:56:e1:be:ed:cd:5b:c6:
d2:a7:ad:a9:59:eb:3e:be:bb:93:f9:c7:1b:fe:09:
92:d8:56:8d:09:ca:4b:07:76:98:39:86:82:5a:86:
53:97:59:e7:24:20:3a:51:41:e0:35:85:ed:20:d4:
55:8e:2b:62:c5:47:e7:1a:8f:bc:6e:ae:c1:4c:53:
73:8d:6d:55:d5:e1:6c:53:ba:d0:97:41:cb:30:da:
97:5e:65:02:e9:dc:a0:9c:e2:b3:a5:00:ef:6c:b9:
f6:d0:71:2f:ef:39:14:0e:f9:4d:cf:00:70:1f:f9:
70:f5:ec:7e:39:ab:5f:46:68:7a:d9:5c:2d:fb:74:
b1:84:d7:84:d8:a2:f1:43:6a:a8:c3:d0:8d:d2:36:
ab:53:fc:f7:57:77:91:96:67:c6:17:de:ff:de:8f:
3f:54:40:c8:25:51:46:3c:5a:d3:81:09:b0:87:49:
08:0c:54:df:96:d9:6f:10:f0:ab:a3:35:4d:99:52:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:F9:6A:1B:77:B3:1B:BB:92:9C:C6:C3:A0:FE:AF:04:2A:B1:66
X509v3 Authority Key Identifier:
keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:96:f3:87:a4:30:d3:70:c9:5e:13:ce:32:3f:d1:2d:1b:e4:
a8:53:60:ec:59:38:35:35:f9:f8:15:a5:ee:2b:30:66:86:d4:
e7:c0:a1:95:eb:49:16:08:19:33:fb:93:49:67:ae:44:50:44:
36:fa:46:98:3b:53:de:f5:20:2c:cc:49:3e:49:ce:ea:6c:c5:
8a:d7:99:1f:88:a2:6a:a6:a4:4d:eb:c4:f1:53:3b:6f:ea:1f:
0d:d2:c5:4e:9d:00:ee:92:3f:cd:03:ec:93:73:b3:b8:ef:77:
a2:57:55:8f:2c:51:01:f4:84:ec:ec:67:a6:ca:82:52:91:8b:
32:b7:f6:7c:74:93:8f:41:b8:98:f1:b5:33:e9:66:bd:b2:10:
fd:34:81:3d:8c:7a:8d:18:b4:ce:45:7c:93:87:84:dd:a0:65:
15:db:59:1e:ab:27:bf:58:d0:c1:f9:a0:12:d6:99:3d:52:fe:
21:15:e3:de:8f:3c:f5:8c:05:f9:66:07:b3:d9:98:06:53:c7:
67:48:4a:7c:01:ff:70:5a:23:44:b4:b0:85:98:9b:2d:8a:2b:
00:52:eb:89:10:7c:a8:19:03:ca:de:7a:72:f0:14:65:8a:1d:
c9:b7:2f:98:a6:a7:48:45:cb:d0:9e:33:fc:5f:9d:24:33:59:
ec:69:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:24 2025 by rpki-client