
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier: +E32PytCKqeZ5jTEu2UC2S7o0BWl9B6ZVYiQxHbyqqI=
Subject key identifier: A1:7A:B7:05:C3:BD:97:30:5D:8A:12:1A:65:57:17:9D:04:EF:D2:B5
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial: 0194BBCE9F8ECFB72412DB6D4556DB397D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number: 0A53
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: lAXBBp6m+CyFHEWskuqDyQmb9NFqJVG9OTGHF+hERwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:8e:cf:b7:24:12:db:6d:45:56:db:39:7d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=a17ab705c3bd97305d8a121a6557179d04efd2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:86:1c:15:18:00:f9:ea:eb:21:29:4c:5c:
02:3a:37:4f:e0:6b:81:7c:a4:27:4b:16:3c:e0:cd:
8b:07:ee:0f:c8:a1:9e:8b:d2:f6:40:85:76:2a:d9:
2e:79:3e:02:b4:57:53:9d:a8:07:9f:47:23:b7:c1:
5c:b6:d5:01:b2:2e:78:89:87:67:9a:53:58:1a:69:
d0:c7:3e:41:ad:c3:db:e0:fc:ac:cb:26:25:60:5a:
0a:59:03:03:14:c0:d4:ec:b1:10:63:0e:42:4d:be:
cb:7f:e7:3a:ea:f0:03:65:c7:21:60:4d:4c:5b:2e:
bd:38:66:63:b4:6c:5b:b8:28:81:0f:94:88:4f:ab:
87:35:40:63:73:38:18:3b:ed:62:1d:cd:cf:7b:4b:
e1:49:a9:26:c1:c4:4a:b6:1d:0e:2e:2a:c5:a2:3a:
13:00:df:9c:75:a6:30:f2:e3:2d:1e:92:ca:a2:6a:
d0:9e:27:bd:8f:22:1d:7b:dd:6c:9b:65:2e:90:70:
ea:fc:0e:4b:7f:e6:00:63:82:d3:8c:e7:f3:6a:d7:
45:9a:d0:38:ff:8c:54:31:22:ea:32:5c:91:92:aa:
1f:14:cb:1f:72:62:44:95:cc:c6:a0:08:6d:7a:e9:
a0:ba:67:d1:a4:b9:49:7d:46:76:8f:7e:14:2e:86:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7A:B7:05:C3:BD:97:30:5D:8A:12:1A:65:57:17:9D:04:EF:D2:B5
X509v3 Authority Key Identifier:
keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:59:64:dd:e7:cc:33:d8:36:7d:47:94:2a:54:a6:97:31:97:
7b:8f:39:b3:8e:70:b0:77:39:ec:65:e2:05:8a:4a:2a:e0:e7:
f8:dc:08:55:fc:f7:a4:3c:04:00:01:8a:cc:2d:de:91:1c:73:
1c:d5:76:70:4a:fe:f2:a9:d0:a5:7e:a5:1d:68:37:a8:b5:04:
b8:36:11:2b:e7:01:91:99:33:ef:30:67:4f:25:fd:76:f5:4d:
51:7b:dd:eb:2b:c2:4d:d7:74:02:bc:5b:e7:ce:28:89:aa:6f:
0a:c9:70:74:50:49:a7:59:c6:fc:71:16:c5:2c:8b:0c:f4:0b:
86:1b:8f:14:df:0d:b2:24:59:3b:13:f0:1f:b3:c8:8e:d5:45:
7e:77:93:11:f4:d4:47:d9:db:d8:ba:12:78:59:c4:da:db:ec:
29:a0:5c:a2:83:19:72:ae:18:4c:16:ec:42:04:5b:fc:4c:cc:
c4:46:1d:29:49:62:e1:dc:dd:8e:8a:d0:71:55:e4:65:a4:16:
51:31:8e:5d:b1:bd:ec:1b:a0:83:09:ab:36:d0:cd:51:cb:13:
4c:05:13:9c:aa:ae:de:5b:6a:67:ce:6a:ee:be:77:d6:7e:56:
61:ce:57:00:c9:f1:8c:87:ac:2a:2d:31:cc:67:c3:bb:61:9d:
c0:b9:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:32 2025 by rpki-client