Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: isB5uJKo5nn9KkXY28WZYlAUJVvQm1AoWI+TZzhnG2Y=
Subject key identifier: B5:D9:53:72:B2:92:DD:67:83:15:AB:16:DC:4C:B2:2F:E8:BF:A0:C4
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 0194BBCDC380A81D9DF32BB064CF8309BE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: Du0K/EtDPSYTKGUWn9UkV+2MBjknB1ENvp4UADb+Sn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:80:a8:1d:9d:f3:2b:b0:64:cf:83:09:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=b5d95372b292dd678315ab16dc4cb22fe8bfa0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:a9:fe:0d:f9:64:88:86:b4:32:99:46:e9:
fa:3b:60:27:24:76:9e:9d:9a:d4:82:a4:7a:49:b0:
dc:85:61:9e:c3:bb:99:d1:f7:36:10:a4:00:6a:cc:
97:42:76:59:4b:25:87:f5:bf:0b:df:cb:76:b9:d8:
d4:ba:27:f8:9a:b6:c3:15:d5:5b:fc:3b:c2:70:0b:
f3:89:a3:ca:27:da:d8:e4:a8:a5:a4:ba:b7:80:20:
4e:93:0b:28:06:17:16:35:bf:56:a0:29:47:53:c5:
e2:f2:fd:88:9b:00:05:85:33:a9:81:30:fa:93:f4:
f8:03:f6:7f:a3:bb:72:79:fe:2f:65:5b:7e:8e:2c:
85:34:17:30:ea:15:d2:f4:b6:ba:f8:74:76:b4:33:
f6:c8:fe:d0:a4:2c:ac:93:1c:65:a4:a2:42:b2:bd:
15:db:82:d2:a6:b6:86:f5:58:e0:87:b8:57:91:6e:
74:e2:f9:3c:95:55:b8:74:a5:16:7f:45:c9:5b:1f:
d7:4b:90:c8:0a:a6:bd:98:2f:1b:7a:12:34:21:10:
0d:92:c9:69:5a:30:0f:03:16:0a:fa:8f:f7:e7:84:
ba:0a:3b:7f:96:39:60:21:f4:c3:cf:75:15:d6:9f:
ae:bf:a9:c3:9a:d2:d0:3e:9f:4c:a2:15:63:20:32:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:53:72:B2:92:DD:67:83:15:AB:16:DC:4C:B2:2F:E8:BF:A0:C4
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:47:d9:61:37:e2:ac:60:43:59:23:a6:48:48:a1:4a:e6:35:
82:e6:d8:24:99:d1:9b:17:30:93:e8:b9:1e:eb:e3:cf:1f:fa:
c1:33:13:d3:7c:d9:8d:22:fa:31:46:3b:4d:7d:87:b0:87:29:
2b:e8:29:ad:74:6d:ac:b6:f1:d3:37:22:73:37:a4:eb:6b:eb:
9b:e6:7b:bf:ce:0c:a7:d7:d4:ad:25:f5:9e:12:ba:ab:53:f3:
de:f6:48:52:04:6f:12:57:02:2d:b3:d0:0f:d4:61:3b:f5:52:
53:59:e3:28:b3:ab:c0:31:b0:fa:bf:43:7d:6f:62:26:18:e9:
d1:c0:56:9f:21:13:56:fc:54:99:5b:dd:6f:49:96:77:72:3e:
08:21:86:d4:03:04:a4:b2:d0:e2:40:69:fa:cc:c3:c6:3d:62:
ca:6f:dc:d3:20:d2:f5:dd:3c:7b:39:78:29:4f:31:5a:07:4b:
bd:87:ec:01:aa:7b:46:e1:d9:20:8c:c5:09:bf:5b:c8:9e:28:
d7:bf:7e:c9:6a:3d:1e:f3:f6:11:ce:b4:12:a1:60:d5:ed:f8:
a5:f4:e6:7c:57:9c:f4:99:c7:3e:30:6f:63:f7:ce:bd:6a:6c:
9b:a4:22:9c:dd:ea:aa:ac:40:da:b2:8b:42:48:e2:a5:6d:4a:
e2:2f:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:03:46 2025 by rpki-client