Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: TCBqNjzsA30SxBXU9Z+NcWEEBhhe4JmBIjXbo7qjTb0=
Subject key identifier: AB:78:AF:2E:D9:20:1E:E6:F0:EF:F0:69:5B:00:3F:54:FE:60:65:F4
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 0194BD85A2173E0AD8E641DBA4AC4BA21702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: mCEdPDQNko7BwZCCEJl8gtWADqkbLrho4IJrgiB2DKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:17:3e:0a:d8:e6:41:db:a4:ac:4b:a2:17:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=ab78af2ed9201ee6f0eff0695b003f54fe6065f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:90:26:7e:f9:cc:bb:0f:2f:c6:4e:df:18:
65:6d:87:51:77:54:d0:5a:32:6b:8a:1e:26:cf:4e:
64:26:7e:b5:77:5b:b1:ff:81:65:3e:2b:83:34:a9:
0d:7a:70:58:c2:73:c0:c6:c3:20:85:53:2d:fb:03:
2a:b1:f4:1a:bd:43:b1:d2:0a:ba:62:66:8e:2c:47:
37:da:e7:04:9e:75:8d:25:04:6a:36:e7:28:64:8d:
06:1a:fa:47:40:78:95:be:69:49:c3:22:e2:ca:04:
18:24:bf:4d:79:bb:17:eb:5a:34:97:11:e6:6d:c4:
38:e9:7d:6d:4f:40:82:7f:83:01:80:9a:fa:f8:08:
fe:14:21:a9:58:9a:9f:6c:e6:d9:39:af:50:f8:ee:
62:e0:e3:8c:20:29:81:27:b5:bd:8c:e1:e4:2a:a1:
18:73:5d:e3:da:9a:5e:09:ff:db:d8:90:c4:80:e4:
7d:c3:1e:0c:b9:e9:1c:fe:10:77:f4:00:b8:a3:59:
80:58:05:e0:c5:6b:6d:db:15:82:a7:85:b9:cc:7d:
83:35:b2:af:72:8d:ae:15:5c:43:8a:e7:df:14:58:
bb:f0:67:2c:44:b4:90:86:7d:02:46:2b:c6:2b:37:
3d:2d:da:41:93:b1:74:f8:1d:5e:b0:94:83:86:f2:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:AF:2E:D9:20:1E:E6:F0:EF:F0:69:5B:00:3F:54:FE:60:65:F4
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:97:6b:05:e5:85:8c:0e:76:cb:ea:65:1f:d5:65:1f:d0:1e:
c0:b4:65:3b:b2:6e:52:9e:22:cc:df:78:d0:bf:3b:2a:c5:72:
61:21:fd:1e:a5:8c:66:c4:3c:cc:1e:83:6f:33:5e:5c:2b:c4:
41:da:f1:ae:e6:57:d5:38:7d:e4:26:bf:2d:8a:a8:e4:9a:66:
a6:d9:e1:d4:eb:13:42:ee:26:0d:14:03:fb:c4:e9:3f:72:b0:
e3:dc:32:df:e0:d9:f9:62:0f:b3:70:4f:25:b0:68:71:00:d7:
0f:37:62:4d:03:1d:8e:dd:56:ec:80:15:cb:55:40:6a:88:9b:
39:a5:55:ab:96:48:bd:76:9c:bb:ea:d8:82:0f:b8:38:dc:69:
cc:37:c0:31:08:30:00:3d:fa:2e:45:ed:25:06:bd:a3:97:ca:
a1:e8:0c:9d:24:67:68:f3:aa:5f:7c:49:10:08:12:57:c9:f8:
af:f1:43:5d:ef:c6:c9:c8:45:7b:91:44:1f:aa:8e:49:ac:00:
16:54:e3:a3:bf:77:ff:1d:45:23:85:c5:11:d8:a6:5d:c7:1c:
c7:a7:2f:e0:0c:19:f9:59:1d:ed:62:1b:6f:81:ac:80:74:5f:
3a:f3:b1:ca:f0:5a:0c:30:50:e6:c5:cc:f9:a6:24:47:b4:b1:
87:10:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:50 2025 by rpki-client