Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: MU/PQPBtjF/joLOnYKutZR7eeMM/6SqUECYK5Hv8pnw=
Subject key identifier: DB:57:74:A9:AF:5A:58:59:EE:BB:7A:F2:64:5D:60:F1:15:65:38:95
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 0194BCA9EF1EC0C849A50EDA87A0EED32D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: GmHdBK2uapXr1+HImpkOXM3ouOIP/6trQP4p3/3tJ00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ef:1e:c0:c8:49:a5:0e:da:87:a0:ee:d3:2d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=db5774a9af5a5859eebb7af2645d60f115653895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:2b:75:8f:ee:0a:34:d8:ab:7f:49:57:48:
71:ed:c3:9b:38:a7:4d:40:22:8b:44:2c:d8:dd:7d:
d4:20:65:19:78:fb:26:3f:0a:fe:56:b6:ba:15:59:
44:ec:ab:ba:c1:62:a9:3c:3d:e4:b7:d4:77:0b:eb:
85:88:07:7d:8a:3b:59:44:e3:c8:cd:f3:f4:79:2f:
60:f8:0f:03:65:09:d0:54:62:2e:36:57:a2:69:01:
66:2d:db:da:3a:28:04:86:63:ac:c4:73:43:95:d0:
8d:21:f0:c7:bf:a3:7e:63:5d:b2:14:47:42:76:e5:
bd:2e:bc:30:08:7f:8a:ac:ce:5c:4b:ac:b0:b6:cc:
12:d2:7f:4b:97:c9:f3:d2:f5:27:0d:fa:1b:e6:c7:
81:ea:07:ed:fa:f1:f4:ac:8a:2f:8a:cf:7d:bf:d7:
48:35:d5:f9:4d:cb:21:b2:50:38:95:e1:10:55:27:
c5:89:a4:1f:f4:8e:51:62:bb:d0:f6:3d:cd:98:4e:
a1:0e:ad:ed:8a:ec:f8:4d:bc:d4:c3:f2:9d:a9:e8:
b4:e4:26:67:7b:ca:bc:34:88:e2:cf:9a:be:c4:5e:
f8:07:42:36:e3:8e:a1:5d:4b:44:a5:e2:5b:5c:aa:
8b:72:94:63:25:3f:a0:4f:ab:2c:50:d8:0d:e7:3b:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:57:74:A9:AF:5A:58:59:EE:BB:7A:F2:64:5D:60:F1:15:65:38:95
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ee:8b:b6:6b:e2:71:41:55:d2:2a:14:a0:87:9d:d9:6e:00:
31:12:b5:df:96:e7:79:6a:62:68:b0:09:8f:d3:d3:58:24:ca:
96:81:06:83:ff:9e:53:f1:35:69:83:0b:4a:c6:ff:18:99:76:
05:08:1a:d8:f0:66:c7:49:a1:dc:93:aa:03:ac:b1:d9:c0:a4:
07:a4:86:5f:8a:89:a7:9e:12:fd:98:e9:75:9c:51:65:4f:0b:
26:9d:96:79:80:c6:e6:5d:2b:33:5c:27:b0:e9:f0:28:e2:a7:
da:ac:d9:c9:84:6d:3f:28:9d:e5:cb:69:8a:8d:6a:1a:d7:3c:
09:66:09:3c:2e:25:a7:c4:a7:dd:4c:c7:11:92:be:0a:6f:c5:
ba:26:99:29:f4:02:28:06:0e:7d:4d:95:4c:2d:44:96:ad:2b:
ff:6d:0f:2e:80:0f:24:64:97:49:ee:a3:e5:8a:73:58:e6:8b:
de:c0:30:77:43:04:1c:3c:a3:a0:51:f3:a8:bc:ea:8c:50:94:
63:b9:7a:78:de:76:b8:29:cb:25:8d:ec:3a:e9:a9:1a:d1:a7:
0c:b5:d2:bd:8f:85:cb:4f:dc:f4:93:40:6a:78:e4:a9:36:75:
a6:a4:91:b1:91:75:9c:e9:4a:34:c5:b4:d1:16:3a:fd:ca:76:
c2:b5:d8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:50 2025 by rpki-client