Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: 43aTIyjWx8vZTH/P+h4b+flmVVK1KAY7Kd2CDPSonog=
Subject key identifier: 53:65:BB:BB:BD:21:1D:1B:79:2A:96:41:13:B2:5B:1E:9E:B3:F5:73
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 0194BBCEBFE2779A8339F9A1E312A19C667D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: lNnbFynyc6LmGmPwQbDZIECDP1aKmPuS4Nkz8bIPkg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bf:e2:77:9a:83:39:f9:a1:e3:12:a1:9c:66:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=5365bbbbbd211d1b792a964113b25b1e9eb3f573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:e5:e1:fb:b6:7f:1e:86:b5:8c:c6:b1:73:
58:0a:95:9e:25:e6:95:c1:01:1b:f8:22:09:11:ed:
cd:da:1d:8c:f3:cd:9e:19:7c:f6:27:65:02:88:ed:
14:f6:48:26:f2:d5:9f:b5:54:5b:14:41:e0:e5:56:
f0:40:3a:32:68:8a:6e:82:00:69:1f:24:87:46:98:
33:da:1a:69:be:7b:85:d6:d9:19:08:c7:1b:2b:47:
b5:4e:bc:66:f0:f4:ec:a3:9c:bb:ce:60:eb:9f:2e:
cd:0e:d0:8a:6a:9f:6b:8b:13:1f:68:a2:a1:13:b6:
99:0e:83:97:75:f8:80:f7:7f:16:45:ac:7e:33:20:
85:80:80:5a:31:f5:1c:18:1e:e5:d1:a0:aa:b8:36:
8b:9c:67:59:fc:c9:b7:e1:b9:ec:54:9d:e5:72:ae:
73:87:e8:22:8c:2f:3e:3e:f0:4c:cf:40:3c:52:32:
1b:49:77:3a:7e:86:bb:e4:f4:69:29:5c:07:26:cb:
9b:12:69:a6:be:3b:1d:15:72:2b:f7:73:44:ca:37:
54:eb:4f:42:67:cf:a7:0d:5d:86:0f:d3:e9:e9:8b:
1e:55:8b:bd:5a:42:c5:5b:ad:9a:2a:65:11:c3:de:
09:6b:f0:ff:29:e4:e3:bb:d3:88:d6:d0:0f:99:d1:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:BB:BB:BD:21:1D:1B:79:2A:96:41:13:B2:5B:1E:9E:B3:F5:73
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:65:3c:79:f9:63:60:ad:ca:96:21:8b:4d:10:3d:ff:57:8a:
45:d4:e4:3b:c7:03:83:2b:98:d1:43:bb:2f:f9:fb:7b:f2:9f:
a6:1a:cc:10:85:96:6f:7c:6b:92:05:6d:d1:22:10:d9:c1:bd:
fa:fd:d8:ff:37:0b:f2:aa:7a:3c:bd:3d:61:ee:f1:58:40:f0:
82:aa:c6:2c:c6:8c:26:49:99:aa:97:69:33:9e:23:97:9b:a3:
73:44:46:46:a1:6e:85:9c:ef:d6:43:70:5a:34:da:76:54:30:
6d:7f:c3:83:5f:99:bf:32:12:f2:d2:a7:f8:68:2f:47:e1:3f:
e2:bf:a6:a4:74:b1:b2:f0:63:30:2e:9d:6b:4e:71:b9:fc:6f:
48:7d:2c:20:38:c3:18:01:ad:ae:81:68:a3:e5:f3:3e:6e:b4:
99:83:57:99:f6:e3:e5:4d:71:ea:53:8e:e1:30:95:35:21:8e:
82:f3:34:c9:7d:a1:8a:02:9e:11:7b:5a:68:02:a1:61:46:2e:
a3:44:16:e4:a1:87:44:50:d9:69:4d:96:aa:85:26:bd:13:5f:
28:3d:f0:2f:e0:18:2a:a8:fb:e0:28:56:db:e3:db:80:41:60:
6e:95:64:34:90:82:6c:89:32:1a:88:d1:02:36:6f:94:07:f2:
61:17:ad:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:17 2025 by rpki-client