Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File: n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier: iUzAATAwzV6txz6xEBcuFBkEKAkWNIRgj7Ac6nqSVes=
Subject key identifier: AF:55:7B:9B:84:F1:93:05:16:9C:D2:5A:42:30:6A:78:22:F3:C3:81
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 0194BC3C1C62DD76D6AEA3E36A1A3039E16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: jQ/OXmdFuk7xuafMkaW/VDwEqZFbjBG3PEhWHoQe0g8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1c:62:dd:76:d6:ae:a3:e3:6a:1a:30:39:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=af557b9b84f19305169cd25a42306a7822f3c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:99:74:7c:19:80:bb:6e:f2:01:27:38:dd:
96:41:6b:d3:c2:60:11:7c:a8:cc:6b:09:aa:12:b1:
29:c4:9f:e9:80:01:4c:90:4c:c6:ed:7f:b6:15:8c:
ab:c4:6e:09:be:27:41:0e:45:91:9b:4d:39:5b:ed:
51:7e:44:03:18:f6:90:43:c5:9c:3c:f7:80:4a:00:
ad:a9:c0:f0:30:3a:97:40:2f:67:12:10:c6:c3:76:
d0:53:87:1e:b2:a1:63:bd:bc:9d:99:2a:6e:9e:ed:
2e:2b:8b:93:f5:7c:28:ed:17:0a:b1:c0:e3:fd:e9:
d7:0c:4a:0b:8e:f4:f1:e3:6f:9f:13:7f:37:ac:c2:
fd:de:93:a2:30:13:d6:60:80:04:0d:04:aa:fc:ef:
7e:aa:2d:1a:62:19:85:74:85:74:33:b4:4d:d1:60:
9e:9f:66:de:36:9b:b6:5c:eb:c3:2a:ed:9e:14:6f:
ea:1e:cd:ee:c7:32:4d:b7:e2:cf:15:4b:87:e8:2a:
5a:bd:41:04:78:38:81:2c:b3:28:74:7f:b1:44:43:
4d:20:58:5b:3f:f0:ac:fe:13:67:97:0c:98:82:5a:
68:ae:97:4f:e1:2a:47:28:f8:32:ec:e6:68:59:8a:
92:e4:34:16:98:2f:a7:51:ff:aa:cc:de:10:f7:c1:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:7B:9B:84:F1:93:05:16:9C:D2:5A:42:30:6A:78:22:F3:C3:81
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3b:cb:89:41:23:58:f1:56:a6:ee:72:a4:e7:9c:fa:e9:fa:
d1:f0:2a:d4:da:6d:42:2f:c1:6f:9e:62:6e:6c:a2:92:d5:eb:
02:36:90:a3:43:cc:f1:50:0b:26:74:2a:dd:e5:aa:3c:7d:11:
e8:c1:99:3f:8c:dd:2e:d5:e0:1a:22:13:f8:50:3f:05:e9:a3:
1b:49:f2:a6:45:eb:0c:04:93:d5:52:79:29:93:50:d7:13:9f:
dc:e3:3d:78:5d:a3:db:5e:f8:b0:f3:32:42:f3:75:b3:47:69:
66:80:8c:46:98:d8:c4:c4:de:70:4e:bf:07:e3:e2:d7:5e:b6:
54:d4:f6:58:f4:97:67:82:ef:4f:57:ef:c6:6f:b9:ab:fd:7f:
69:25:af:1c:ef:11:64:17:75:32:ad:17:dd:1d:56:c9:06:61:
f9:99:ee:b1:0a:f7:74:06:c4:2e:85:6e:97:4c:75:85:c7:91:
08:4c:c1:26:34:01:0e:fb:ea:e9:71:cb:98:e1:f2:a2:e9:a4:
3f:5a:bc:53:fb:23:49:75:bc:86:88:ea:e8:fb:2e:ef:c5:a7:
f2:59:4b:58:31:72:df:23:33:b0:20:ff:a4:75:1d:86:44:23:
37:78:73:d7:ae:9e:55:f5:7b:e0:5d:7c:29:eb:42:df:8d:fc:
41:a3:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:16 2025 by rpki-client