Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
File: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json)
Hash identifier: aLgnOyv+MF4IOMzXtVLkFaDWYUiWXCUu/EUIPTxuWuM=
Subject key identifier: 56:5F:98:FC:5E:18:95:BA:0A:E8:38:53:BE:DE:14:F4:05:D1:97:33
Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
Certificate issuer: /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Certificate serial: 0194BC731CA17286A881AF9F9467CD3291FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
Manifest number: 02B7
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: EROCaxUD9ls/RrmocPy6wGbYZiCwCVU+s83LmgfEEEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1c:a1:72:86:a8:81:af:9f:94:67:cd:32:91:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=565f98fc5e1895ba0ae83853bede14f405d19733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:a3:3b:c1:cd:38:89:cc:ab:4d:94:9c:8e:
d6:7d:cc:f9:b3:3a:05:a2:af:08:af:a1:ed:27:3b:
63:68:35:af:c0:3a:bd:f7:98:a5:2d:f0:db:7c:b7:
cb:95:75:99:db:aa:01:6a:41:8d:5e:38:94:d1:82:
5c:0c:de:5d:e7:d4:fd:10:bc:4d:1d:65:84:db:da:
7b:d7:fe:09:89:b5:3b:6a:57:99:d6:54:84:b5:2d:
80:73:1f:d7:e2:f9:68:11:7b:35:e6:d1:04:4f:ff:
60:ab:a8:fc:18:60:cb:e5:24:8f:7b:cf:55:42:53:
98:41:20:90:c9:ba:f2:ad:0a:5b:c7:bd:9a:f1:61:
23:40:32:62:39:4d:eb:fb:72:9d:58:9a:cf:05:19:
66:b1:2e:39:dc:50:0d:8f:98:28:0d:f5:d6:c2:22:
12:cb:7a:55:f5:c4:08:99:b9:88:fe:08:11:08:93:
29:91:4d:07:df:6a:02:f1:c9:c6:a7:29:bd:a2:ea:
ce:0c:f7:3a:1a:18:a6:80:0a:39:2c:bf:19:5d:c0:
33:77:9d:13:7a:3b:3d:ac:a4:ca:b0:82:1b:34:0d:
70:fd:be:bf:81:d8:c6:da:20:c1:25:0b:7a:28:1c:
a4:13:03:f7:f9:a5:aa:7f:f1:e7:f9:35:2a:49:b7:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5F:98:FC:5E:18:95:BA:0A:E8:38:53:BE:DE:14:F4:05:D1:97:33
X509v3 Authority Key Identifier:
keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:87:dc:c5:53:f1:a5:96:ee:b9:74:e7:5b:9f:3e:4e:9d:97:
7f:11:f8:63:e2:d9:a8:18:13:80:7e:1c:16:93:54:a9:47:f4:
68:de:c1:84:05:77:6b:d5:2d:69:2a:7b:4e:54:e3:92:98:84:
be:75:1a:fd:a2:a9:ce:6d:86:49:48:7a:18:4e:0a:90:b1:6e:
56:5e:55:ca:4d:32:49:59:55:6d:26:d8:07:f2:b3:a1:52:40:
73:07:4a:15:d9:6f:0f:3a:8b:90:2b:ff:d8:fb:e1:14:72:98:
42:f9:95:ba:9a:69:44:7c:2f:57:39:36:f6:2d:a1:8a:09:11:
7d:09:13:24:4a:59:c3:66:b7:26:2e:9c:55:cc:16:d9:fc:0c:
c8:f1:1c:54:4c:73:c8:79:9b:ff:7f:4d:30:c2:25:58:a1:23:
35:d2:0e:64:da:cc:11:af:0b:61:f3:15:b5:0d:e1:54:22:a0:
1d:24:6f:0a:7e:6e:0f:99:91:4c:e2:37:10:d0:d5:9a:e5:0d:
45:bf:86:2f:bf:5d:84:89:ec:ed:00:3a:ce:9e:31:f4:0e:a4:
ac:92:3a:5f:2b:2d:b4:01:89:1b:b3:05:8d:f9:9d:2b:fe:d6:
b9:da:60:12:32:90:5b:c2:aa:1a:c8:25:92:15:ca:9d:7c:16:
41:b8:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:54 2025 by rpki-client