Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File: nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier: HhgfhuhXIuREZVv+xNsIukg2rWCyWorY7dnU+4HvEcw=
Subject key identifier: F4:B7:A5:40:6B:3F:7A:E5:4B:6A:F4:B6:AC:2C:04:CD:AA:62:F2:53
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer: /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial: 0194BBCEC2D971A00616DF604F651CE05194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: XL3KGbA3rjZ22Z+VS5y4ieRSIGg3HmxpJ9w/8sK66Sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c2:d9:71:a0:06:16:df:60:4f:65:1c:e0:51:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=f4b7a5406b3f7ae54b6af4b6ac2c04cdaa62f253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:36:a5:d8:d8:d3:a2:ec:02:7b:ef:99:1f:
d4:30:59:47:cc:21:e1:40:0a:60:4c:80:1e:7a:3a:
a9:66:2c:48:66:40:84:d5:63:7c:71:79:83:67:04:
c9:cd:a6:38:f3:36:d9:60:3e:b4:03:20:48:cd:64:
e6:a2:f5:84:b4:e9:c5:dd:8e:a8:eb:aa:b5:56:f0:
ce:9a:9e:23:34:7f:15:f5:42:dc:c8:fa:03:d6:69:
d3:dd:5a:90:5f:2a:cd:b4:79:d7:c0:28:1d:df:dd:
ec:7b:2f:04:6a:e2:3c:06:1b:99:51:e9:30:27:2e:
db:4b:92:ad:6f:bf:c6:54:81:48:b4:2a:77:c8:4f:
f8:1c:38:42:a2:5f:c7:64:e3:d8:1a:eb:8b:13:d1:
19:91:6d:ed:27:18:8c:2e:4e:82:0a:c0:db:64:78:
6e:d5:9c:68:08:48:48:0d:87:37:d5:19:14:63:36:
27:61:ef:29:22:87:79:e5:8b:a9:09:da:50:09:15:
8a:85:a7:80:ea:5d:0b:ea:6b:25:47:6c:05:f5:3c:
e3:ba:22:14:9a:4b:40:b3:58:33:7b:dd:12:e1:1c:
c1:64:90:68:5b:86:f1:c5:05:36:3b:54:a2:c0:43:
6c:2c:e5:87:e4:5f:f3:bc:e6:10:e5:52:eb:5e:7b:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B7:A5:40:6B:3F:7A:E5:4B:6A:F4:B6:AC:2C:04:CD:AA:62:F2:53
X509v3 Authority Key Identifier:
keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:df:75:65:c6:c9:55:7b:7e:84:4d:8f:2c:e2:07:4c:3b:6b:
3d:51:9f:ba:ee:0e:ff:26:01:91:e4:fa:6c:2d:9f:b7:dd:32:
ad:b3:7c:95:81:b4:c8:cd:cb:f3:65:d5:8f:25:e6:90:ec:f0:
04:c9:5f:ad:d4:a9:23:f4:36:0e:91:dd:94:ff:5d:d3:63:2a:
8d:bf:01:08:38:79:c6:0c:03:f5:95:9f:fe:2f:41:af:72:61:
58:9c:d8:3a:05:34:c2:99:70:6f:4a:8a:bb:78:1c:35:9d:85:
07:e2:d0:a1:a1:ab:f7:0e:c4:8e:12:61:4a:86:a4:00:aa:54:
f0:bf:ef:ce:80:87:05:95:4c:0a:0a:c5:ef:21:1a:21:7f:54:
de:9a:80:bb:80:9b:41:ea:15:0b:f5:a1:47:6c:ba:f5:3c:33:
22:b4:f6:36:de:d0:9d:b0:76:46:ae:b9:81:ae:36:3e:4f:54:
b8:88:23:ae:20:cd:83:76:b8:af:46:d0:e2:33:64:89:45:8e:
cf:ce:91:8d:6d:67:53:3f:69:16:e3:6a:bd:dd:23:38:1d:a2:
38:d4:27:af:6c:73:97:e7:b4:50:fd:a7:3f:0b:b3:44:24:c2:
ce:46:05:66:05:38:b5:6a:77:12:ea:73:38:1e:97:99:e5:7b:
82:c7:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:31 2025 by rpki-client