Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
File: NdB1rqTOzB1391EfQdd8pTMCpvY.mft (raw, json)
Hash identifier: bEquJKmlnK9VU09rTJjp+cvXql83sBZpPBTQpEv91EE=
Subject key identifier: 64:D0:2A:E8:49:39:CB:70:4D:0D:05:3A:28:8E:B9:D1:FD:03:CE:D7
Authority key identifier: 35:D0:75:AE:A4:CE:CC:1D:77:F7:51:1F:41:D7:7C:A5:33:02:A6:F6
Certificate issuer: /CN=35d075aea4cecc1d77f7511f41d77ca53302a6f6
Certificate serial: 0194BD1756E177F28A7DEAB0F48B77B26977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
Manifest number: 0880
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: NdB1rqTOzB1391EfQdd8pTMCpvY.crl (hash: nnzEKCwC3nq4HMfs1LWTlqly5/GYYR/8/9stTKbpP4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:56:e1:77:f2:8a:7d:ea:b0:f4:8b:77:b2:69:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d075aea4cecc1d77f7511f41d77ca53302a6f6
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=64d02ae84939cb704d0d053a288eb9d1fd03ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:bf:d1:36:1a:0c:05:b3:c4:47:e2:f5:6e:
a2:16:95:de:14:51:cf:19:62:76:85:81:44:66:2d:
a1:bc:62:9d:d3:e2:29:42:cd:fd:40:3f:6a:5c:61:
b9:a2:ae:67:86:6f:c5:13:30:17:8e:fd:38:1b:df:
10:ee:21:64:45:17:33:70:93:b4:9f:e1:ef:c9:0c:
a9:10:1a:f1:02:9a:28:cf:cf:96:65:be:9a:31:79:
3b:6d:59:d6:e4:af:02:e4:54:dc:00:28:71:84:9d:
d9:c0:72:87:c0:ac:27:c1:72:21:e1:de:1a:ee:bb:
d9:be:30:86:93:b0:c8:ba:ed:de:2d:83:62:56:1c:
df:fe:0b:13:f7:e6:a3:4e:4f:4f:a8:53:cc:cc:17:
0c:9b:aa:d5:91:ef:36:e2:f9:b8:23:43:d7:46:be:
c1:e7:5a:16:70:03:7f:83:44:35:fd:36:25:0a:43:
fd:b3:bd:ca:f5:c6:29:37:80:c0:4b:14:26:6a:a1:
31:3d:fe:bd:3e:05:b3:bc:f7:56:af:ff:6a:f4:7a:
7f:48:71:40:11:f5:25:fd:61:c8:88:ef:c8:d2:64:
c6:e7:bc:78:14:d5:72:7a:1f:12:68:d1:e8:54:62:
35:92:a4:7b:90:b5:fc:9b:eb:fe:0a:1b:c3:64:e4:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D0:2A:E8:49:39:CB:70:4D:0D:05:3A:28:8E:B9:D1:FD:03:CE:D7
X509v3 Authority Key Identifier:
keyid:35:D0:75:AE:A4:CE:CC:1D:77:F7:51:1F:41:D7:7C:A5:33:02:A6:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:87:96:27:2b:2d:31:a7:5d:d2:c4:15:8c:95:f5:d3:fc:f8:
93:5e:bb:4f:ef:1a:4b:6f:0b:e9:1b:4c:57:c5:8e:54:e9:45:
ad:71:de:8e:96:f7:dc:1a:5e:18:f2:e2:82:89:4c:13:2a:62:
4e:62:26:7e:70:2f:e9:0d:5a:7e:bf:86:f7:48:43:64:3b:02:
3c:95:ee:49:e9:fe:90:76:6e:dd:1b:fa:6c:a1:ff:94:fc:c8:
54:47:d2:5f:5a:98:7d:2c:5f:b3:df:30:27:86:90:09:b4:47:
c8:09:84:6b:5a:6b:78:83:0d:5a:60:10:2e:54:67:74:2c:02:
57:e7:45:15:ee:41:7e:89:f9:b8:2d:1b:9e:14:c3:e2:1a:f2:
68:b3:22:e4:ad:3f:44:dd:d7:7b:56:09:64:af:12:6c:e6:b2:
8d:84:84:19:74:3a:4f:67:47:d0:c1:19:13:51:a6:f7:cf:57:
db:dd:ea:e6:9a:eb:02:a6:90:e4:cf:74:05:77:8e:3a:ae:68:
89:42:79:3a:51:35:54:0b:67:d8:8b:0f:2c:bf:b6:84:ff:ea:
d9:23:17:9c:ea:b4:14:6d:80:97:e8:84:d8:07:7e:bf:10:1b:
22:ee:e9:09:ea:14:f2:61:ba:55:2d:bf:b4:39:83:e0:f9:62:
39:83:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:00 2025 by rpki-client