Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: FSiMz88Bai88WWqt0J0s0910lwDRQ5sNrTmq2xkMWVc=
Subject key identifier: DA:FB:E0:95:DD:D9:52:55:1C:75:B6:C5:6D:27:88:51:46:34:34:6E
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 0194BC3C8BB813D7378476B0CE3D26003004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 0327
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: q7Kz8o9J4XUYLM96DHIUuwIY6CzXfEEXvomY+2IBSrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8b:b8:13:d7:37:84:76:b0:ce:3d:26:00:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=dafbe095ddd952551c75b6c56d2788514634346e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:37:4f:56:f7:bc:de:18:1a:1f:63:2a:05:
a6:23:14:41:a8:37:0b:6e:e2:31:88:9b:e0:f8:b9:
a9:da:35:d5:e3:43:e0:5d:2a:aa:c3:93:e6:56:c8:
d6:9d:85:3f:97:4c:15:1c:a9:e4:ba:f5:75:52:17:
29:c8:73:5e:26:2d:74:f4:a4:45:89:e5:84:74:b9:
ae:a9:7f:46:85:fa:68:65:c7:a8:36:bc:23:61:93:
7d:1d:08:3b:a1:fe:4f:5d:28:68:24:a1:d1:c6:35:
7a:08:85:a8:df:0f:8f:f2:16:57:6f:4c:4b:4b:95:
26:b2:66:66:a9:54:7b:19:c5:f7:8b:86:35:26:8b:
d1:33:c0:71:64:f0:9a:4e:81:3d:7c:a4:4d:38:08:
28:e8:a6:dc:2d:af:96:b7:c4:2e:ef:78:91:fb:41:
f7:67:59:84:df:15:56:5c:94:79:89:89:a2:d5:33:
eb:c9:20:0a:44:1f:4b:7c:52:0e:f7:9d:a2:cc:95:
13:fd:2a:c4:21:d2:b3:0b:e0:6e:72:92:52:3c:89:
57:ed:70:8b:21:98:76:c8:7e:bc:d6:a5:ed:fb:1e:
ea:5d:fe:9a:6b:7b:70:4b:ac:fb:aa:e1:85:d7:8a:
e6:b1:d0:ab:d7:07:87:9e:b5:42:7f:28:63:c1:4a:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FB:E0:95:DD:D9:52:55:1C:75:B6:C5:6D:27:88:51:46:34:34:6E
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:ae:c0:90:ea:74:e1:5b:71:76:96:f9:a1:53:bb:d4:07:13:
f3:68:13:7e:58:e0:a6:48:80:10:b3:29:1c:8a:29:e9:bd:af:
09:00:ab:fa:aa:5c:5c:69:76:8e:28:ab:ea:2e:83:84:8d:f3:
4b:65:e8:8b:84:2d:b6:c4:ee:f3:9b:30:c9:47:2a:0d:49:ff:
c2:37:94:92:78:16:23:53:72:9f:6f:e1:d8:32:e4:92:20:bf:
a6:07:44:2b:55:85:f6:e3:2f:36:dd:7f:db:ea:32:b7:92:c3:
25:bf:19:b2:94:e5:36:62:d4:21:70:0f:95:96:0e:da:1c:2e:
79:7c:59:99:b7:85:57:35:d6:a0:e3:83:ae:9b:36:e4:d1:43:
e5:c5:9a:25:ef:74:59:43:a0:7d:cc:61:f8:d2:02:03:36:25:
f4:f1:c4:7a:f0:67:70:bc:55:53:29:5d:29:8d:fe:b9:05:c1:
c9:a2:7a:10:58:91:0a:ba:7b:e1:7c:ab:89:c9:1f:8f:38:62:
cf:52:49:51:6e:b8:17:ac:a4:8a:7d:d2:d7:f9:a0:f7:d3:4e:
59:75:87:b7:54:4f:22:a7:20:23:d9:36:7d:e5:4a:dd:ca:f4:
7d:e5:9e:e9:00:e3:ff:23:f1:16:ba:e3:5e:dc:25:ee:66:94:
f5:be:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:28 2025 by rpki-client