Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier: BHnxFfjxVSvNaImVV/O3cePMXcUbXsG2X+xw5EQuE5Q=
Subject key identifier: D1:E6:22:14:B0:6D:22:24:A4:51:3D:AF:E5:25:CE:4F:C4:E4:63:DE
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial: 0194BD174F5043F0222981C2460A9CE1BA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number: 0ED6
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: o9unczH4EEq/TZhg5uCdiBIBbZehMTD02vkrHO1WbxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4f:50:43:f0:22:29:81:c2:46:0a:9c:e1:ba:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=d1e62214b06d2224a4513dafe525ce4fc4e463de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:b5:23:9b:da:ac:78:91:e8:c1:56:aa:e7:
ee:19:31:14:59:9e:0c:85:41:c0:52:80:a0:91:67:
2a:f3:b5:e4:c8:a0:08:29:c6:48:95:d4:4c:fe:d4:
22:08:03:b7:84:d1:f7:17:9b:35:3c:be:e2:93:e4:
78:d4:f9:38:08:89:f4:ed:32:cb:53:ef:d7:99:68:
0a:de:3d:49:94:c4:fd:c3:06:3a:5d:af:8d:4f:92:
9b:cf:54:99:8e:43:1e:69:46:ae:fd:5c:c8:6b:fd:
ee:34:10:c8:08:62:00:6d:18:68:58:e7:f8:fb:e0:
ab:ca:89:a7:61:79:f5:fd:20:14:4f:9b:ed:16:47:
40:d1:42:fb:f8:6f:bf:d3:fa:ab:7c:7c:66:29:fa:
a5:3f:f5:9a:12:4d:5d:5b:32:74:30:e8:11:a7:cd:
f6:87:b3:f2:85:eb:07:27:74:b9:84:7d:94:87:b1:
07:35:37:d0:73:d7:71:85:21:7c:b1:ad:d4:1b:c8:
44:bb:c4:97:32:ef:99:60:da:3b:55:c1:29:c2:ca:
74:34:8d:1b:43:86:2b:b8:19:98:6f:5a:a1:04:85:
96:a9:5f:d9:0b:f2:d7:8a:8a:68:a0:7e:c2:62:74:
61:05:b7:6d:6c:ae:ae:91:af:02:60:63:4a:19:d1:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:22:14:B0:6D:22:24:A4:51:3D:AF:E5:25:CE:4F:C4:E4:63:DE
X509v3 Authority Key Identifier:
keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:74:3a:9e:f7:45:a5:3c:35:bc:95:89:de:f4:fd:2c:f6:
64:ad:cf:51:b2:bb:ac:e8:d6:03:5c:2a:5d:91:09:86:07:80:
c8:43:1a:4f:bf:a8:d3:7a:14:d0:17:99:d1:61:92:3a:d1:33:
83:29:91:b6:d3:b2:39:ec:fa:9d:df:47:58:ce:c5:72:95:83:
7d:12:75:17:34:ea:97:10:ec:41:8f:4e:d9:c4:71:a0:52:34:
82:fd:74:0c:de:0c:ca:81:04:73:55:33:30:15:f1:b8:5b:ad:
2f:25:ea:fc:48:a7:7d:e8:3d:b5:42:27:2e:b4:1f:8f:78:e6:
1c:6e:31:52:57:40:9f:d6:37:0d:c9:ba:14:2d:f6:6b:1c:8f:
da:87:eb:8f:90:dc:13:22:c7:e4:87:54:bc:17:00:54:e6:f5:
a8:b5:c3:bf:92:f9:1d:49:de:63:dd:6b:c8:9a:5a:10:39:28:
4b:31:9c:2f:2a:98:d1:62:38:f5:3b:e5:f2:4c:24:bc:cf:08:
22:e4:7f:d2:b2:00:7d:8d:1c:ba:9f:a7:45:87:e5:3c:a9:11:
d5:68:e4:aa:b0:fd:0c:c7:38:dc:68:4c:33:b4:9b:de:31:69:
8e:3f:06:f5:2c:e4:02:69:1b:cf:8c:8a:49:a7:2d:26:01:a2:
53:20:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:24 2025 by rpki-client