Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: 3bZH8aukSLWlYtSQ2tSTOJDsyyTlQ6WSBs3THGelfRY=
Subject key identifier: 3B:A0:57:A2:53:60:23:32:2E:EE:EF:5D:65:F4:A8:E7:97:BD:32:C7
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 0194BBCE1897017C61594494992A46D90CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 05C0
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: vnSCoxlzCJsThg42F3C5FbhFleIUDetyWa8NJ3koDyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:97:01:7c:61:59:44:94:99:2a:46:d9:0c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=3ba057a2536023322eeeef5d65f4a8e797bd32c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:5d:8a:81:9e:db:c7:2e:6f:88:40:bc:41:
d7:82:cc:3e:cb:e2:0f:6a:5e:b7:94:80:af:49:4b:
4f:d0:2d:39:54:d2:dc:41:2f:f5:e3:5f:64:b4:74:
62:66:6b:b9:3c:fe:a8:c3:bb:48:cf:d8:08:ca:d1:
6b:b8:49:3e:41:a7:0d:5d:61:11:a8:88:fb:3d:7d:
40:3d:21:f8:ad:16:79:93:d5:6b:91:b7:89:e9:fd:
a3:ff:6a:8c:1d:fe:39:6a:34:df:7f:76:da:60:f5:
c9:59:e4:4c:e1:d1:20:36:9c:97:ae:04:b6:be:ff:
be:34:3d:9c:1e:eb:b4:85:f9:85:28:40:38:45:49:
31:8b:19:85:f8:0f:4e:43:2b:00:36:35:e0:1a:f6:
90:c9:be:b2:3c:71:3b:64:d5:d9:d1:33:4c:68:ba:
39:18:a6:a2:4c:60:2d:ff:bd:70:99:7f:68:7b:90:
cc:5a:eb:2c:0c:45:05:d6:cd:4c:f0:45:d4:25:f2:
f2:c8:2e:70:1a:fb:05:98:46:35:c2:10:fc:00:cb:
3b:09:ce:e8:5c:24:e0:e1:cd:87:3e:f1:0e:a2:b3:
57:f8:26:1c:ca:b2:4f:80:3b:bf:c9:f5:ac:73:20:
c0:e6:b4:73:e2:09:a6:d7:a6:7b:8d:d1:a7:ab:92:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:57:A2:53:60:23:32:2E:EE:EF:5D:65:F4:A8:E7:97:BD:32:C7
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:17:c0:f4:b3:52:5b:10:d1:81:ea:69:f5:fa:bb:05:93:4b:
4f:ba:37:25:92:68:39:f7:3e:34:d3:26:10:1e:2c:2f:9e:5d:
db:42:61:6c:7a:2a:e1:ce:f5:ec:57:ab:8e:3a:ef:32:97:7c:
4c:4f:3b:a1:19:70:5e:68:c1:94:6e:17:08:93:bf:f1:3c:a5:
40:6f:2f:08:a8:44:75:39:22:6b:e9:1c:ff:e2:a0:37:07:c0:
a6:9b:f9:44:58:ee:48:19:7e:b4:cc:c5:49:cf:a5:0a:4f:c6:
b4:b0:e5:ea:f5:81:02:98:1f:66:77:d2:17:63:37:3f:bd:9b:
53:e4:3b:d3:d2:12:be:b0:cf:eb:de:78:48:db:2c:dd:62:48:
a1:de:5c:74:b2:71:e8:72:c3:7d:f4:23:57:71:2b:ed:22:9f:
cb:cf:5f:86:4b:16:b2:b7:01:62:a2:bf:46:8a:c1:55:d7:59:
24:d4:1c:7c:0e:90:82:93:67:8d:cb:0e:88:f6:b9:e8:3e:c4:
16:75:33:da:88:07:a4:5b:5f:c6:80:38:4c:c5:16:19:4b:52:
50:6c:c6:42:aa:f5:e5:94:3e:09:2b:66:06:f9:84:55:52:cf:
04:9f:db:74:14:50:b5:04:cb:c9:68:5a:5c:cc:9a:14:d8:38:
0c:81:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:43 2025 by rpki-client