Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
File: NLWONYkAecLWDA5LyOyCwbMxlfY.mft (raw, json)
Hash identifier: 10QlMn+eRpKBgFIn50lX7mGFOAZzsdzOIgvyPRH73eM=
Subject key identifier: 23:46:57:21:54:CF:2B:77:B4:57:F2:AF:8E:9D:F0:CB:DD:F9:73:2D
Authority key identifier: 34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
Certificate issuer: /CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Certificate serial: 0194BC05042BC4065FC2DE3B73C2C3043B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
Manifest number: 03ED
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: NLWONYkAecLWDA5LyOyCwbMxlfY.crl (hash: ryY8/EZb9JjDb7jpYsUFArEKxiKz4dh2XPBPcwVIHrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:04:2b:c4:06:5f:c2:de:3b:73:c2:c3:04:3b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=2346572154cf2b77b457f2af8e9df0cbddf9732d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:5b:b7:fa:d5:56:f9:c6:23:e3:fe:2a:5c:
14:8a:bb:4a:ec:e8:38:ac:f5:19:06:85:05:ec:d9:
06:27:5e:18:00:ef:b8:e3:55:eb:ca:df:4f:f8:b6:
21:61:45:21:10:d1:58:61:53:ae:26:22:f0:cd:d1:
a7:45:35:ef:cc:49:27:57:46:8e:86:2a:fb:f3:fa:
89:20:70:8f:8b:ba:22:70:3d:77:dc:73:17:ca:19:
9d:f8:7d:41:27:a1:e3:60:db:b7:ce:f3:82:9c:84:
03:55:26:b7:4b:7e:a6:80:01:eb:3f:b0:b6:dc:83:
ce:dd:08:e5:fa:fe:0f:04:c1:96:47:0c:69:b5:36:
04:88:94:34:86:65:42:16:88:8f:b0:5c:46:2b:0d:
0e:92:42:92:d6:03:9c:af:85:3f:e0:41:8e:5d:51:
67:b8:15:00:7f:4e:13:18:f2:ec:7f:3a:d1:de:32:
8e:c5:39:d8:9a:5e:c4:91:27:62:8a:29:be:d6:bd:
73:f0:16:6f:9e:0c:29:9f:76:f6:db:8d:f1:2d:0f:
9e:53:44:7e:94:a7:a5:b8:72:a8:3d:6a:8c:62:d0:
52:8d:8d:ec:ec:77:f7:aa:d1:a3:26:3a:d6:6c:8e:
17:e5:21:20:57:5c:a1:8c:e4:c7:87:31:52:eb:32:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:57:21:54:CF:2B:77:B4:57:F2:AF:8E:9D:F0:CB:DD:F9:73:2D
X509v3 Authority Key Identifier:
keyid:34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:90:8a:60:49:50:62:f4:13:a7:6d:48:09:7a:98:b4:b1:2c:
82:fa:4f:bd:bb:82:d5:7c:c9:52:cd:14:09:65:90:52:3b:7e:
35:fe:04:47:28:d2:63:b4:a4:2b:56:57:c3:ce:92:7d:f0:e1:
6a:3f:f6:d6:f7:9c:0d:e7:7d:90:c7:23:d4:a3:cb:fc:b4:e1:
11:65:7a:d8:0e:c3:ef:06:e1:ad:54:8d:a0:39:3b:ca:f7:08:
f5:f9:82:b3:6c:b1:36:be:47:11:d8:18:af:66:7a:9d:02:1a:
fd:91:33:2f:c2:14:bb:8c:8c:b5:13:8c:8c:4c:52:c6:58:5b:
d4:33:fb:72:46:8f:d6:0c:11:9b:62:73:e5:44:13:48:ff:dc:
80:8f:a8:af:a0:0e:32:ea:9c:3d:9c:3d:ae:a7:4b:5f:a1:bd:
c1:c8:de:04:42:28:3e:1c:1e:56:d0:46:d6:3f:9d:26:8a:9b:
ec:e6:1d:ef:30:fd:37:a3:29:d4:df:48:dd:42:14:04:a9:a3:
cc:11:60:01:1c:99:a5:2e:c1:c2:b8:c3:0d:40:52:bc:d2:88:
14:ba:51:00:49:00:97:f9:21:db:be:87:b8:76:46:84:ab:8f:
3e:e3:57:6d:1c:a0:11:7c:11:8a:3a:e4:2e:8a:24:7a:b1:0d:
e9:61:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:51 2025 by rpki-client