Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
File: NJxIN9k5hA1fbHSqwINm70v-SHQ.mft (raw, json)
Hash identifier: KeUukDqC2OA+03X0aJjSJaIdtRdZ4p8kwOXi71o/wP4=
Subject key identifier: 0D:C8:43:06:E9:0F:17:11:E7:DF:63:F7:5A:ED:B8:E4:69:5C:C9:07
Authority key identifier: 34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
Certificate issuer: /CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Certificate serial: 0194BBCEBBDD201434DF0C2136EDFDD459A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
Manifest number: 16
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: NJxIN9k5hA1fbHSqwINm70v-SHQ.crl (hash: zrmfG2utxj0jVbLrpozkZK9x+KM1sJV6tpxDb4XtClU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bb:dd:20:14:34:df:0c:21:36:ed:fd:d4:59:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=0dc84306e90f1711e7df63f75aedb8e4695cc907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:a8:6b:13:b6:ea:36:00:5b:24:26:72:e1:
16:03:66:40:37:79:16:d1:f1:a2:01:fb:63:b8:30:
4e:6a:58:87:8e:3f:f5:f0:40:71:6f:ad:f4:a1:e0:
6f:35:e4:14:c0:e5:0d:ba:31:bc:cc:34:56:17:44:
ae:16:22:94:89:ac:7c:72:33:7c:54:93:b2:e2:57:
aa:4f:df:8a:09:f2:e4:2e:36:c5:ba:f3:0e:65:c9:
1c:28:a6:d6:63:1f:84:c2:e8:49:e3:f7:f7:2c:96:
49:f5:2c:e2:d8:c2:b4:75:f5:95:e3:f6:c7:92:23:
61:24:dd:2c:bd:a6:3f:4e:8c:04:bf:b0:67:30:cf:
5b:8c:02:03:be:92:bd:69:fa:1c:ed:e2:c7:6a:12:
b8:74:7e:cb:7e:ba:6f:fc:6e:6f:ac:db:ec:47:a0:
8b:87:0c:2b:a4:e1:73:a3:ec:a0:63:c7:97:4e:81:
da:01:ba:e8:19:30:f5:27:5c:19:23:1f:6f:24:29:
21:99:90:be:d6:be:cf:56:08:da:ad:9b:0e:05:d7:
0c:2c:c1:54:6a:73:b9:a9:19:19:8f:26:c8:3a:4a:
55:9d:6a:2c:b4:0e:a7:20:cb:d3:33:ee:89:69:ef:
88:b9:02:61:9c:01:ee:65:6c:7e:4a:99:57:93:84:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C8:43:06:E9:0F:17:11:E7:DF:63:F7:5A:ED:B8:E4:69:5C:C9:07
X509v3 Authority Key Identifier:
keyid:34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8a:e2:90:97:8e:b3:5c:12:92:a2:51:6b:2d:a3:a4:d7:b8:
f6:6b:b7:0b:ee:24:86:d7:48:92:b0:3d:37:e9:99:40:a7:a1:
93:ae:0b:6f:34:45:b7:5f:36:e9:d2:5a:ec:bf:e0:3e:fe:53:
00:f1:d9:0c:52:a4:a8:0f:29:9b:a9:d5:24:02:83:be:93:1f:
a5:09:3a:5a:65:cf:98:3a:64:d2:dd:32:58:a1:2c:8b:54:3e:
78:aa:5c:cc:9c:a6:92:57:10:d7:c5:bc:13:23:6d:f0:6c:f9:
22:72:b9:ab:32:84:ad:3f:b0:c3:d9:f9:81:3c:63:41:ba:75:
12:84:06:ef:f9:a5:ce:b9:03:4c:19:74:bf:8d:d2:5e:27:ac:
9d:1d:78:cd:cc:62:62:0c:53:11:89:da:95:16:b0:4b:10:42:
20:14:13:83:55:e8:a1:3f:ea:55:cf:f1:2c:8c:3d:d1:a1:fe:
fd:54:97:bb:dc:72:d7:39:61:5a:45:4c:4f:d9:dc:2e:c1:38:
3b:c2:52:8e:c2:93:23:08:c3:71:60:8b:5b:87:54:85:76:5c:
36:c9:11:b6:d1:6c:3d:f1:9d:55:1d:5a:f8:a1:d4:86:ee:c3:
26:98:79:d4:10:ad:ca:71:0a:67:bc:c0:17:9e:2c:1c:1d:a9:
c4:35:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:11 2025 by rpki-client