Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
File: NHkVOIV45h2IaEmiHXC6B1FJwaE.mft (raw, json)
Hash identifier: hBYLXPbijNHLI8ZPGDl4wuuLs0/zSXVcNjdkfkhiLvw=
Subject key identifier: 49:E2:9F:C4:80:A1:41:39:13:3A:8B:65:27:57:16:A8:73:D1:41:33
Authority key identifier: 34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
Certificate issuer: /CN=347915388578e61d886849a21d70ba075149c1a1
Certificate serial: 0194BBCDDC3EA2A2BD68F7B467949C5B53F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
Manifest number: 09B6
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: NHkVOIV45h2IaEmiHXC6B1FJwaE.crl (hash: CoahERV/bO1+N2YTS4UVcUw26RiQ+34GmT7xq9/AAWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:3e:a2:a2:bd:68:f7:b4:67:94:9c:5b:53:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347915388578e61d886849a21d70ba075149c1a1
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=49e29fc480a14139133a8b65275716a873d14133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:92:89:4a:e2:ba:c0:03:6f:d1:fb:56:35:7e:
b5:15:e2:f9:73:5b:f6:10:e6:d8:fe:21:7d:53:67:
51:0f:15:69:11:45:06:e1:05:ad:2c:2b:c8:f5:47:
a2:f3:8d:e3:35:55:1e:f8:f4:fc:65:92:2d:a5:76:
9e:11:f5:1b:4c:95:3f:16:60:c3:59:b2:e7:df:c7:
a3:9b:a0:05:3f:1c:be:6c:11:88:9f:76:b9:71:98:
55:ab:25:7e:c3:c8:15:f4:45:a2:c7:9f:fd:52:9f:
ab:cc:59:b8:4f:1d:3e:1a:b2:cc:91:89:31:4a:41:
b0:d6:32:6e:54:f8:ca:c9:06:c8:ef:72:3d:d6:78:
67:7e:a9:9b:ef:f0:ba:8b:78:3e:2b:11:c0:65:14:
17:7a:f9:16:c9:46:71:a1:33:11:8e:bb:a3:61:35:
58:86:88:ef:5f:df:d5:a1:18:c1:03:9b:3b:3e:61:
37:d9:fe:fd:04:f5:09:2c:95:30:d2:97:d8:7a:c4:
e9:ca:7b:80:c4:14:f1:e5:2f:3b:90:2f:1a:75:b9:
13:25:ff:6f:e8:09:1f:fb:ff:21:2b:56:c3:dd:2a:
ad:76:a3:32:c5:ab:d1:5f:e9:38:ce:3e:60:44:82:
63:e5:0b:2b:56:7b:26:a5:9c:e6:93:3f:3b:9d:00:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E2:9F:C4:80:A1:41:39:13:3A:8B:65:27:57:16:A8:73:D1:41:33
X509v3 Authority Key Identifier:
keyid:34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:29:bf:f8:15:fa:8e:0e:10:61:37:e1:75:9a:12:ff:7c:94:
52:a8:19:b9:58:e1:34:a4:38:12:30:fd:ca:25:0f:d2:3e:55:
be:c0:8c:ef:65:c8:6d:cf:25:71:bf:db:4a:09:10:e0:20:41:
aa:49:74:cd:9c:26:39:7d:0c:45:41:0d:c3:84:04:e8:68:17:
e7:a1:50:a0:af:86:06:79:23:6b:8c:3a:81:a1:00:94:86:18:
38:36:e7:62:b1:21:bb:b9:29:89:8c:1d:7e:c1:de:9b:67:d4:
38:8b:d2:ba:c4:c1:11:20:85:9f:85:fd:e9:06:b9:b0:06:95:
17:26:8f:9d:31:a0:19:2a:0f:08:c3:e1:cd:df:6f:99:5b:70:
53:77:eb:8f:d5:70:62:c9:c4:d5:7a:07:3b:51:05:e1:e7:34:
72:22:a9:33:55:d6:89:75:ff:dd:5d:b7:b5:8c:78:b4:7e:d4:
5b:4f:90:9f:16:84:c5:51:dd:61:f7:1d:85:6f:a3:a6:09:21:
88:77:1c:22:e2:dc:22:7a:e9:b9:2a:9b:05:a8:3a:35:b1:66:
b5:f2:83:d5:9a:61:91:97:1c:1e:99:a1:c6:9e:12:15:5c:8b:
b8:66:a8:c7:06:21:65:8d:0a:1a:00:ac:a3:f7:ec:28:69:70:
00:4f:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:26 2025 by rpki-client