Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: wNsC0D4S0HTgNnaLYvJ94AABpasqZ09f39+3RqSovFI=
Subject key identifier: C1:55:02:80:93:A6:2B:98:C8:BD:DD:6B:48:6C:20:A9:26:16:6D:1B
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 0194BC3C3D8BD9DC007DD63480F74B998008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 0BFD
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (hash: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=)
2: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: iLOITBt4hxHd726yrl8ei1Sqmcv2Bx/sk0OID7+Q5Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:8b:d9:dc:00:7d:d6:34:80:f7:4b:99:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=c155028093a62b98c8bddd6b486c20a926166d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:82:56:ec:fc:ca:4c:d0:0d:ed:f1:32:80:
df:47:ea:5d:1c:d0:06:6c:69:cf:fd:ed:f7:f9:79:
a0:9f:dc:1a:dc:06:0e:97:6d:ce:c0:b7:7e:3a:47:
37:13:08:cb:47:24:37:bd:52:94:cd:10:ac:d1:be:
fa:a1:63:ea:14:26:9f:25:5f:c9:11:b2:62:6f:33:
e1:a3:d7:17:dc:e7:95:fc:02:68:95:c6:64:2a:b4:
e5:88:1d:2d:a1:2f:f4:5b:26:30:b7:cf:50:f8:63:
20:89:ca:b9:b8:20:1e:ce:07:f1:aa:64:44:4f:87:
a6:42:8c:b5:0b:2e:1d:92:11:00:22:23:b4:21:24:
42:0c:be:dd:c9:73:05:e4:3f:87:cc:ed:7a:11:06:
dc:cc:78:6c:69:0d:ff:d2:fb:b2:ff:60:74:e7:4c:
0a:10:b8:47:de:d5:f2:d0:8e:7c:cc:fb:91:5a:a9:
d5:3e:85:31:a0:d6:7c:53:8f:54:c5:cb:d5:0b:40:
63:35:8b:99:19:13:e8:42:ac:34:8e:cf:66:13:aa:
59:68:a4:2e:ef:a7:d7:84:42:b3:dd:a9:1f:f5:1c:
7b:85:2d:cd:1c:8e:36:7d:56:7c:a0:b2:7d:69:12:
73:b5:93:1d:55:d7:07:6f:63:28:d9:ff:f2:a9:d0:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:55:02:80:93:A6:2B:98:C8:BD:DD:6B:48:6C:20:A9:26:16:6D:1B
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:29:cc:1f:4e:7c:41:13:ac:cc:e8:2d:ce:0f:95:c5:ca:64:
cb:75:c3:e5:5b:c1:ee:a8:20:ab:aa:d5:b1:f1:dc:df:e5:8b:
78:5e:0f:22:ae:ee:de:f2:ba:d7:39:46:53:28:de:a4:09:e0:
85:a1:33:27:c7:d9:dc:76:51:e8:5b:15:5a:ac:b7:a0:59:66:
81:8f:cd:10:21:d5:13:24:83:1f:37:31:0f:0b:99:59:1a:50:
d4:d1:d3:ae:35:3a:b5:bb:4f:ea:65:bc:46:d5:61:58:0a:36:
cd:9f:0c:fc:81:1e:70:fe:49:4e:61:7c:37:ab:ee:22:8c:5f:
25:f4:71:de:73:aa:74:08:02:63:3d:29:ad:dc:a7:e4:f5:10:
c6:10:fd:04:01:c7:91:6b:94:67:68:ec:fa:bc:9e:ca:77:25:
b8:57:c8:35:b1:5b:2c:59:71:f1:b5:f0:40:c7:70:4c:40:e1:
67:a0:ef:02:65:2e:1b:98:8e:22:0a:5c:53:06:92:7b:8f:15:
e5:7a:e1:fa:41:43:77:a6:a7:c5:53:5c:97:73:66:8a:4e:3a:
c0:ad:b0:e5:7d:9b:17:76:dd:46:34:f7:20:f1:69:7d:bb:35:
69:34:68:19:6f:8c:d9:44:9b:2b:2a:81:53:e8:c1:9a:09:c5:
32:b4:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:51 2025 by rpki-client