Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: GEtIDhabcynrLiOfwlWFubyb1f0Gnl49dlGu9cfarpk=
Subject key identifier: 9A:C4:4B:94:BB:B4:B8:53:BC:F8:26:86:B6:87:7E:B9:E7:F1:BE:3F
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 0194BD17AD608D3FDDDF763A8FC5B19E123B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 0379
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: aMKTu8d9ljqCEPn64wdPjMYCRVknjKowk1cR7BjG2gI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:60:8d:3f:dd:df:76:3a:8f:c5:b1:9e:12:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=9ac44b94bbb4b853bcf82686b6877eb9e7f1be3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:f0:7e:1d:97:37:a7:e7:b9:af:0c:b5:62:
2a:04:75:da:5a:4d:7a:2f:cf:22:52:b8:95:80:91:
3b:c1:b6:91:2a:30:af:11:4b:57:bd:98:68:54:d6:
b5:08:f3:a4:e3:8a:38:2d:bf:78:d9:0c:d6:48:96:
cd:01:f2:36:b2:69:1c:9f:7b:1c:b5:2b:e6:17:9f:
58:ed:d3:b4:4f:a7:3a:f7:40:3e:72:34:7b:26:91:
ae:72:45:13:85:05:4d:60:36:38:71:6e:22:e8:69:
d3:16:f7:fa:55:68:44:09:86:c6:53:d5:ad:80:17:
04:93:d7:57:94:4b:44:33:27:d8:ff:98:a9:e5:5d:
61:77:01:ab:ab:82:b1:86:25:1e:7a:82:ca:e6:97:
11:40:f6:c7:28:2c:1f:52:d9:ae:4a:62:03:17:09:
98:ec:3c:2d:b4:5f:34:32:45:86:04:a6:ac:b1:84:
91:c5:a3:31:77:ba:94:9c:7d:dd:42:92:d7:d6:bc:
36:b7:b9:e1:4a:b2:bb:ba:1a:37:fe:70:34:1d:1c:
42:96:18:27:5d:7b:23:b8:97:d5:78:bd:e5:3b:5e:
6f:cf:3f:b6:32:e9:e5:bf:27:89:e9:c0:d4:3b:37:
23:72:2f:67:83:97:1b:90:92:cc:a5:83:a1:86:b1:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C4:4B:94:BB:B4:B8:53:BC:F8:26:86:B6:87:7E:B9:E7:F1:BE:3F
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:58:8d:37:59:3c:c7:aa:92:4b:0a:30:9b:09:1f:78:c4:c5:
8b:c9:7f:dd:aa:b5:0e:0a:ef:38:b7:95:4c:40:f3:aa:81:c7:
24:64:26:a9:7b:0d:0e:4e:ad:d3:b3:31:b9:ab:52:be:58:ff:
6b:bd:eb:2c:c4:be:d9:b0:6d:ea:d0:6a:72:f6:2a:9d:45:34:
8e:9d:7c:36:d1:68:8b:51:ed:33:6f:13:56:7e:fb:65:b5:06:
bf:8e:61:79:40:cf:cd:e3:1c:6e:7b:46:13:1f:3c:83:de:50:
ff:07:e0:ef:01:33:56:f8:cf:97:de:9d:37:8d:8c:f1:48:6b:
9f:45:29:de:a6:1a:17:3f:0d:af:75:09:91:2a:d4:37:52:83:
e4:a2:18:aa:4a:41:00:a8:66:91:ba:c9:03:47:40:6f:2d:a7:
54:64:ff:79:0f:b7:bf:93:87:a9:be:1c:e9:8e:d4:f1:bf:3f:
56:83:52:0e:84:77:ec:d9:0d:36:ba:13:ef:aa:58:40:e4:da:
f4:7d:d9:31:bf:23:1a:7f:f3:46:9a:44:3d:27:fd:17:6e:55:
66:3e:02:f9:e7:fc:92:98:ba:21:d6:78:85:db:80:6d:98:57:
62:5d:a0:bb:18:c7:e1:94:c2:46:84:b3:49:02:2a:a1:8b:9a:
45:2d:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:25 2025 by rpki-client