
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File: _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier: gYKWcJkNIHOzRoz6BGHlOqdQsAveh/oRw+Wkx62YkgU=
Subject key identifier: 79:8B:2A:69:12:F2:13:99:EE:BE:AC:BF:6E:DF:C9:56:46:2A:98:37
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer: /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial: 0194BC3C04D2F79C61FF2B8A7EA1A1F84355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: l7pG7f5BcDiMnky66KaCfq5nztAVCodHscVgXgi31mo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:04:d2:f7:9c:61:ff:2b:8a:7e:a1:a1:f8:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=798b2a6912f21399eebeacbf6edfc956462a9837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:a7:c0:ab:f5:f4:b0:ca:d5:c4:c0:02:0b:
e8:aa:3e:71:a7:e4:a4:32:14:f3:8e:0f:62:e4:19:
96:f0:2b:76:e6:5f:f3:73:f1:80:56:bc:a5:67:28:
34:14:f2:92:1b:23:10:f6:02:ff:a6:87:6d:a4:69:
4f:cd:bf:73:bb:a0:52:f1:23:90:26:44:ba:33:47:
31:14:02:ea:9d:39:1e:91:64:41:21:66:9e:42:a0:
6f:d5:66:0f:fa:34:f6:10:c5:63:6b:13:7c:d6:ed:
99:08:e7:ea:d4:03:84:34:29:f1:90:0b:b2:22:eb:
55:50:7f:e2:01:68:77:26:ba:a8:97:8a:a0:63:61:
ed:5e:c0:3a:d5:4b:31:96:ee:e7:87:f2:35:98:f9:
2e:9a:10:c8:56:dd:fe:bf:ee:62:44:c2:ee:43:7f:
ef:4b:dc:22:c8:59:e5:75:87:72:40:89:24:22:00:
e9:1d:f5:af:92:52:28:93:ca:68:06:4a:56:56:21:
3f:bb:f7:23:44:ad:af:68:ab:c7:48:a3:9a:ff:ea:
b0:94:19:b2:43:d4:ad:93:c1:32:bc:1f:86:d4:7c:
1e:cd:ed:6a:12:0b:16:0d:5b:b9:c1:ee:97:e7:d6:
32:16:f0:fd:bc:19:fa:9b:3a:15:95:b8:1f:06:a7:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:2A:69:12:F2:13:99:EE:BE:AC:BF:6E:DF:C9:56:46:2A:98:37
X509v3 Authority Key Identifier:
keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:50:c0:43:59:96:b1:a4:15:49:d3:ef:32:70:2f:e4:6e:74:
75:e9:e3:9c:cb:6d:b5:f5:0c:b4:9e:01:fb:0c:d5:0e:9a:bb:
1f:4d:68:1f:11:7c:59:1a:9f:a0:ee:69:72:0e:50:06:72:da:
36:cc:76:53:14:4a:cd:bb:cb:72:26:03:43:a4:a1:f4:f7:6f:
10:c7:41:ce:52:84:2a:e6:70:af:33:54:e0:75:2f:a4:e9:8c:
46:6d:2c:c0:e8:b2:59:2a:79:4c:9a:60:f5:14:74:35:e6:97:
da:9d:54:f9:f0:ab:94:f2:5a:c7:e4:2d:5f:4c:00:29:aa:b5:
b8:2f:3f:5f:cd:92:ad:17:db:a1:2b:8c:16:7b:04:d1:08:ae:
51:37:a1:77:15:15:e7:86:9b:b9:01:f6:cb:1a:7b:63:14:9b:
29:2b:6b:d2:f9:82:96:ab:7b:a9:e8:07:5c:f1:db:3e:c9:f4:
0f:94:c8:8c:cd:37:e2:9e:12:ba:7f:a4:2c:92:5a:7d:16:29:
57:74:07:91:03:c7:c1:9e:d0:1a:3e:d6:d8:84:0f:33:86:66:
39:ec:69:02:9c:02:51:f0:11:2e:82:0f:4c:52:e6:f3:46:f2:
d0:73:79:a6:31:20:d8:35:71:b0:09:3f:0c:e7:2e:e5:25:cc:
84:4c:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:57 2025 by rpki-client