Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: 6eak3paBOgRzA1trDfqzVt6PfVE+KsgtdGuRxFX8moI=
Subject key identifier: 24:A9:53:A2:90:D3:E6:A6:DB:0C:A7:60:B5:19:7E:4A:86:34:D8:A2
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 0194BCA9EC9D5A34EE19EDCE693E24B1C5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 09B5
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: rPnfSDQkamwHs1tJFF6hoSUoxJ1rzZ/ZmoYQe8yHYiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ec:9d:5a:34:ee:19:ed:ce:69:3e:24:b1:c5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=24a953a290d3e6a6db0ca760b5197e4a8634d8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:13:40:bd:04:ed:20:e6:b3:96:75:c7:db:
7b:30:f5:03:ca:d7:06:e1:0f:50:e4:e4:be:14:77:
89:88:3e:76:fe:e4:d4:9b:88:84:b3:88:5f:7b:0a:
63:1c:1e:46:38:48:a9:9a:6f:6c:20:69:b4:f0:ae:
d7:a4:99:7c:a5:4f:c0:4d:cc:67:b8:3d:d0:b4:e7:
91:af:ae:55:0b:7e:3a:fd:e0:66:0d:63:73:97:11:
b5:18:67:66:18:fc:fd:92:d5:ff:38:4c:2c:07:b5:
bf:91:23:0e:31:8b:bd:f1:16:3b:54:02:d6:f7:25:
11:d2:1c:86:db:3d:a5:11:82:49:43:f4:21:1b:71:
2c:37:c2:06:2e:9a:e4:04:6a:cd:c2:91:d2:2e:67:
61:f1:c5:db:1c:a5:61:52:64:97:72:ef:ea:90:2b:
86:b3:e5:55:7a:d0:de:e7:7e:9d:18:8c:96:31:f2:
c8:b8:a4:36:6a:ea:19:ff:da:84:1b:88:65:d8:1e:
63:bb:c6:c3:06:ac:a1:23:89:66:ab:68:6f:c9:ad:
24:48:f5:30:73:ad:6c:c2:58:23:ee:ed:78:b0:60:
91:7a:5f:67:c1:0c:bf:0e:88:6d:78:6c:23:de:03:
c5:d1:6d:41:71:f5:5f:2f:53:58:8d:a7:ea:3b:03:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:53:A2:90:D3:E6:A6:DB:0C:A7:60:B5:19:7E:4A:86:34:D8:A2
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:17:89:e2:f0:cb:48:3f:a2:e1:3b:f1:f0:f7:2e:17:37:a8:
9f:e9:43:d8:66:45:36:24:48:f0:42:ca:6b:cc:04:07:9a:c7:
4e:16:04:6c:cd:d5:16:c3:70:98:b7:d1:74:a6:90:41:58:48:
83:b0:73:03:20:d1:6c:b8:d3:c2:cb:73:79:fa:7a:fb:70:41:
ea:69:ba:ad:e0:7c:3b:35:bc:11:8e:dd:dc:46:e6:c6:d7:c1:
1a:06:bb:6a:7d:1a:b1:c8:02:5d:e3:2a:c1:fd:84:e9:02:7c:
b5:cc:83:6a:a6:20:63:6d:96:19:15:c7:4d:28:c2:4a:79:65:
0c:ad:9a:d7:79:1d:4e:00:6a:9b:2a:29:45:fa:69:81:b6:ac:
9a:8b:41:8b:7c:b4:f5:6f:b0:29:b4:60:fc:7b:e8:c0:31:dc:
8d:1a:ca:80:42:d9:2f:9f:db:86:d0:04:3e:6f:36:2a:01:31:
cb:4b:cc:28:a4:ba:40:9d:4a:5f:4e:b3:d6:4d:51:6e:db:12:
cd:8d:1d:7e:f0:df:3b:1f:42:cf:d4:03:2a:d8:3c:c5:d4:e5:
27:b5:f8:42:11:b5:91:23:7f:11:a6:47:f2:66:ef:84:9c:dd:
43:87:0f:d1:da:a1:7b:6e:fb:77:51:fe:f6:50:5c:4f:80:48:
24:44:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:57 2025 by rpki-client