Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
File: N5jHIczxJbe4Klf7Pdk7d6YqOag.mft (raw, json)
Hash identifier: p3tx4R19IldPTp/r2xMJ8Wafn0hWkWqHikrlagnD/xU=
Subject key identifier: 05:C1:2D:73:1D:8D:AE:A6:D3:F3:B1:2C:13:FE:82:85:15:8B:D1:85
Authority key identifier: 37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
Certificate issuer: /CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Certificate serial: 0194BC3C17572F2A16E884F90305A205706F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
Manifest number: 0894
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: N5jHIczxJbe4Klf7Pdk7d6YqOag.crl (hash: 9Rjc2AtOHKdEQj11uM0KkVYom3YWm+7k21L8UCkSuDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:57:2f:2a:16:e8:84:f9:03:05:a2:05:70:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=05c12d731d8daea6d3f3b12c13fe8285158bd185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:31:0b:6a:9c:25:7d:ef:22:96:c4:18:15:
72:52:bb:c0:d5:6e:fb:7f:10:7b:48:ab:76:26:61:
a3:d0:d0:cd:fd:7f:cb:21:96:7b:07:82:be:30:2e:
1e:0d:4b:a5:3e:c6:eb:af:58:24:3c:9d:da:f4:96:
5f:3c:be:39:cc:8c:72:2c:fe:64:9b:28:b2:b8:fe:
eb:eb:45:dc:a0:dd:0f:4b:98:d8:b8:90:ed:bc:f7:
d5:62:dd:e6:57:ce:80:f3:7c:dd:d8:a5:53:c1:f9:
04:09:30:7a:63:22:2a:38:0c:7a:4e:58:83:8a:4c:
34:96:2d:4c:9e:66:80:ff:c9:8c:12:93:c0:7d:29:
70:e1:d3:1b:87:ec:ac:1e:f0:e5:88:0e:93:c3:74:
0f:89:f0:69:0b:1e:c3:46:3c:4c:f3:a6:e2:0a:db:
b4:03:21:b7:5a:15:fc:00:01:6d:a3:d5:1a:c7:c6:
48:ad:34:5e:85:5a:14:1a:af:9c:88:26:1a:70:57:
a5:9d:49:6e:b2:8b:40:aa:c8:c8:46:95:0e:c0:ae:
ce:82:ff:d8:6a:47:29:1c:85:2b:ee:37:7b:67:79:
a0:4e:c5:2b:1a:f8:55:4f:2f:37:37:c2:69:56:bc:
a5:5c:4e:88:ae:8f:0c:78:11:84:c1:ad:55:3b:cb:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C1:2D:73:1D:8D:AE:A6:D3:F3:B1:2C:13:FE:82:85:15:8B:D1:85
X509v3 Authority Key Identifier:
keyid:37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:70:eb:c6:4f:eb:35:70:bf:d5:4a:3f:87:78:90:2e:09:32:
1c:1a:87:54:5b:6a:2a:d1:85:fa:85:5a:22:1d:61:6b:1b:fe:
7f:0e:b3:7b:df:92:11:7c:24:72:02:fc:46:a7:1e:75:ac:54:
1a:b1:d5:6f:3b:26:24:df:88:5f:7d:ff:29:cb:fa:d6:5b:1e:
d1:a8:73:40:b8:73:56:93:a0:e6:c9:7e:83:2d:93:3f:02:bd:
7b:16:cc:c2:0c:58:cb:a5:76:6f:35:1e:85:59:ae:29:4b:7b:
f4:d7:66:45:6e:50:16:83:c0:2e:c4:fd:a5:58:23:70:32:4f:
6c:6e:5c:ef:84:bf:1e:ea:94:6f:fc:ae:a4:75:ca:a8:d2:4d:
33:34:93:f3:98:c4:97:0e:04:54:08:90:ac:dd:fc:c6:39:01:
a6:ef:ed:3c:51:7a:36:86:df:62:53:13:55:f2:24:70:e1:55:
ae:23:01:a1:2f:ff:f2:55:fe:a1:f4:ad:65:8f:9c:ac:15:2f:
2b:e1:0b:08:18:3e:57:db:af:10:8b:83:9e:f4:47:6d:15:3b:
61:7d:d4:1f:cd:7d:73:31:27:fd:01:f3:c4:2c:01:9f:8c:ad:
dd:93:55:79:3e:e3:02:a1:5b:41:89:cf:7d:fe:16:49:f4:d7:
f9:23:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:14 2025 by rpki-client