Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File: NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier: D1KZa6f4akOZn+yho+NkPtZmLGdQ/T/tzGVDr4SsfAM=
Subject key identifier: 3E:09:56:D8:93:59:77:9B:57:2B:5D:46:71:46:34:11:97:9D:7F:1A
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 0194BC72B57542DC602780775BCEBD81AD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number: 062A
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: YO7tFO3lbCUx3h/CR5nrL9RKQpqKG2Atk6pDB35KKPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b5:75:42:dc:60:27:80:77:5b:ce:bd:81:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=3e0956d89359779b572b5d4671463411979d7f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:85:f7:31:62:a4:4d:ec:08:8f:07:e2:d0:
72:83:71:d8:5d:14:92:89:a5:04:20:8e:a9:49:aa:
83:28:16:99:a6:a6:8f:44:6d:c1:eb:7d:9c:a1:ad:
8a:df:aa:de:63:97:f0:d3:71:9f:16:97:f9:72:c7:
a9:3b:08:59:2e:ce:7a:6b:e8:13:b8:bd:ad:8b:cd:
01:b8:a0:61:56:c0:b4:35:1b:a8:6a:f1:a7:08:dc:
27:46:ce:a2:40:90:4f:e0:5b:27:63:e1:3d:41:b5:
0a:f2:32:0d:47:0b:40:1b:7b:5e:06:38:21:13:22:
f6:fe:f7:c5:31:9d:0d:31:22:b2:6b:bb:bc:68:c7:
29:05:c1:d1:f1:b4:dd:a7:d1:c4:d4:7f:87:a4:e7:
a4:7d:10:f9:64:1e:b9:5b:58:f5:a7:fb:22:b2:6e:
99:e3:77:ef:b2:d4:87:2a:59:ce:b6:7a:64:2e:da:
9e:00:e5:e2:ce:3d:68:ae:91:90:23:56:be:e6:4f:
9a:91:fe:8e:f0:97:a2:71:42:df:af:89:8e:81:f0:
e9:59:06:54:40:d8:39:3b:a0:dd:ec:24:13:83:0e:
b2:b2:60:07:9c:ec:f5:f3:2e:ef:4f:bf:56:e5:31:
e1:07:a3:8f:23:9c:b5:d1:04:db:42:07:15:04:7d:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:56:D8:93:59:77:9B:57:2B:5D:46:71:46:34:11:97:9D:7F:1A
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a0:89:e0:92:a7:ec:05:17:ac:5f:3d:fb:3f:8c:8a:21:12:
fc:7b:5b:e9:ff:c9:ba:91:83:a5:56:be:e0:fd:60:d4:54:5a:
b5:1c:8c:9c:75:19:4d:c0:e8:be:2f:ae:85:9b:63:97:61:5b:
41:85:d1:5e:dd:37:41:f4:70:16:ab:3c:1c:47:3c:f0:57:8e:
f0:fd:7b:22:8c:9d:3a:a0:50:64:f9:a5:7f:94:62:08:63:8c:
c5:30:5b:8e:81:82:06:ac:b1:23:5b:6e:56:b1:3f:7c:7d:6b:
60:25:0c:27:bf:b0:eb:75:97:00:87:43:64:91:ed:e5:1f:15:
07:52:f3:a6:15:e6:a8:2e:2e:5c:6e:0a:96:31:49:e9:d1:2f:
76:4a:88:ba:7f:10:73:39:40:98:92:24:ab:e9:64:54:95:95:
7b:3c:de:e4:49:23:82:82:89:7f:61:51:b6:34:bb:9f:b0:9b:
f4:1a:f2:1e:0f:e6:3e:79:42:85:21:b4:43:0b:c2:e7:1a:2a:
73:2f:bf:f1:d8:ed:fb:67:fc:fd:13:9b:5f:59:a8:96:d0:d5:
24:84:b3:90:d7:a2:1c:58:9b:c8:a3:b3:e8:40:b5:68:3d:ed:
a2:54:92:b2:85:15:af:38:fa:71:d8:d7:49:c3:a5:5f:d5:5f:
3c:e1:8f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:21 2025 by rpki-client