Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: g+YKfZJocR/002yfsgNPQpJJf2/JxAqNaOu0UkThsHI=
Subject key identifier: 3D:C8:6E:43:D2:BA:DE:AD:0D:67:11:1E:0F:09:BD:88:18:30:37:78
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 0194BCA98BE23267BFA2E180EBADE682B23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 0E36
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: PcKKOuMlMSO4Q00GAFMIkbEDBmJr144Dsw4bc+nHQh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8b:e2:32:67:bf:a2:e1:80:eb:ad:e6:82:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=3dc86e43d2badead0d67111e0f09bd8818303778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:1c:74:7f:71:98:83:d1:8b:13:9a:45:25:
e2:bf:93:76:bb:78:37:ab:10:b7:81:6d:18:58:22:
f8:ce:cb:ef:37:a8:cf:c0:d9:ba:15:0c:6e:16:05:
72:64:98:38:ed:aa:9f:89:01:aa:a4:dd:2e:9b:be:
c8:e6:20:66:19:93:fc:4a:e1:aa:a8:70:f8:1d:39:
39:29:34:38:db:e9:59:0d:9e:cf:86:67:72:ee:01:
73:e2:14:af:17:78:c9:68:cc:ef:28:96:2e:82:9a:
2e:94:3f:ac:9a:db:5c:77:da:f4:ed:95:bb:84:48:
15:1a:a7:43:40:38:4f:a6:22:f9:57:11:bf:9b:12:
08:ad:7e:64:69:e7:72:a3:f8:36:0d:c5:ce:c0:37:
ae:6f:d2:4a:93:60:f4:5a:c5:b2:4b:8e:21:25:4c:
03:3b:dd:00:aa:11:eb:38:c6:95:8d:c0:5c:e0:1e:
33:4f:8a:48:fb:4b:e8:f0:55:fe:00:97:26:bd:09:
ad:4b:0e:e2:7b:5f:e5:6a:df:8f:61:dc:38:04:a1:
80:f4:fc:f3:fa:3b:bc:7b:9e:07:9d:57:ea:7c:60:
d2:fd:f0:64:ac:69:a2:b1:ce:9d:60:37:32:4c:7c:
84:5e:bd:d5:30:26:7c:3f:52:aa:7f:8f:b8:57:7f:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:6E:43:D2:BA:DE:AD:0D:67:11:1E:0F:09:BD:88:18:30:37:78
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a1:81:2c:80:a1:84:75:a0:4c:cf:c6:89:64:82:b8:82:43:
58:fb:6a:84:d1:79:00:33:8f:a4:79:72:d8:ab:e3:01:46:a0:
ac:56:8f:50:43:93:0c:02:ab:44:6b:cb:2e:74:70:27:98:3a:
62:2f:aa:2b:94:36:5b:3e:fd:44:1b:e1:6d:ce:d9:c9:8c:16:
cc:31:15:00:42:34:62:70:5d:4b:96:e0:c6:1b:f6:9c:5c:72:
9e:07:ae:58:71:2e:99:7d:a9:ac:27:c8:d9:5b:dc:7c:22:61:
5c:85:89:0d:48:5f:91:c8:ed:2e:c6:45:1d:73:b7:60:81:86:
3a:9b:12:1f:e2:f0:10:32:36:9e:1c:26:a5:da:d6:2c:a5:94:
98:c3:71:bf:77:f1:05:e6:de:48:52:db:3f:76:40:e9:01:80:
46:3b:6e:40:cc:c7:56:60:f3:78:9e:05:f5:77:59:8c:1b:d5:
ad:3b:bd:99:7b:32:08:bc:f7:14:b1:bf:46:0f:98:5c:d1:ec:
7c:f6:0a:ae:8c:49:12:ac:d4:87:e6:d6:6b:cf:0e:7c:76:21:
76:b5:2d:98:42:e9:70:27:e1:be:10:78:90:2e:5a:67:0f:bd:
97:a6:5f:8e:a1:32:ae:bc:07:5b:21:f8:8f:60:b0:05:47:18:
7b:de:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:43 2025 by rpki-client