Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: 1URwBrNLqrIEjitra/e0lSNBMtICj0rNA3WeSzfb7bM=
Subject key identifier: B1:93:69:32:53:CB:78:B8:A8:C2:56:61:41:BD:A8:38:71:A9:4F:0D
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 0194BD17736E156BFA7E5D50DD599B64C4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 0454
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: 1bTSketCnPWbN8yVmX4zE4QbOijBnm4BrD4h//g4pkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:73:6e:15:6b:fa:7e:5d:50:dd:59:9b:64:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=b193693253cb78b8a8c2566141bda83871a94f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:13:9c:01:ab:2e:6e:6e:68:0d:66:1c:3d:
85:be:fd:28:f4:45:f8:a9:bd:ef:65:d1:ed:3e:1c:
5b:bb:14:b1:7d:6b:71:38:b4:68:59:6e:c2:ee:3a:
56:89:9c:ec:21:a0:cb:47:da:d5:4b:66:cf:6c:f3:
c7:96:5e:9d:58:2a:1d:52:5b:e7:d3:e4:54:52:c1:
73:c8:dc:ed:66:12:4c:6d:bd:31:da:36:bd:c0:a7:
e8:1c:7c:4b:1f:b6:7c:ac:4a:09:f6:31:c1:49:f5:
65:33:5c:20:62:72:f8:31:16:52:c6:cd:50:ed:89:
a7:48:c2:97:1c:a6:1b:3d:0b:6d:dd:ba:a1:80:99:
85:59:83:43:3a:92:cf:7d:92:34:31:a8:4b:80:a2:
c5:7b:6a:2c:76:b4:02:49:8f:c8:7b:15:41:ce:82:
6c:c6:8e:4c:95:23:5e:0b:a5:7a:7a:74:77:07:fc:
3d:62:41:d0:5c:40:ca:97:42:e4:11:6d:a4:c7:4b:
4d:fb:be:ab:b0:9b:07:f2:1f:2a:cd:28:4e:98:04:
6d:63:72:08:05:b1:a0:06:f6:d4:71:d8:d2:88:d5:
12:85:e9:78:c2:2b:7d:bd:1a:04:68:2c:45:42:9c:
20:d2:55:af:b2:28:3d:9c:e9:af:ad:ec:69:09:7c:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:93:69:32:53:CB:78:B8:A8:C2:56:61:41:BD:A8:38:71:A9:4F:0D
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7c:3e:b5:87:14:e1:8f:d1:3d:c2:63:c1:a5:fa:a2:54:df:
c2:be:2a:1a:dd:fb:8f:fc:2e:ed:22:49:f7:3b:eb:9e:25:c6:
02:18:0d:cd:0a:bb:9c:f0:ee:e6:5c:fc:5d:3a:22:03:a5:d9:
09:43:81:53:4c:43:f0:56:9e:35:b9:ec:83:8d:27:eb:64:38:
33:73:30:f7:86:97:b4:91:74:b6:6b:d1:b0:a9:c7:fc:02:3f:
45:d4:08:13:13:9c:93:37:44:ef:dc:01:e4:cf:79:bc:7a:72:
39:99:7d:65:ad:9d:6a:00:93:19:92:34:5f:c5:99:46:81:2c:
ba:f2:1e:3c:f5:d6:cb:c3:48:00:a8:1d:f6:8e:af:5f:0f:97:
3c:78:17:d9:ae:27:a6:ce:45:b7:28:31:72:70:38:e2:21:93:
e6:41:c2:4a:34:8f:67:a9:42:95:c7:91:db:ab:4c:21:60:82:
52:35:7e:86:d5:c7:bc:f9:dc:47:2d:4e:c1:5b:72:46:a0:27:
2b:dd:f9:49:91:bd:d9:88:62:f1:a4:85:41:7c:63:f9:1d:a1:
02:3f:73:06:73:ee:4a:fd:cf:7b:11:f6:7a:4b:84:4c:a3:28:
78:0b:cc:e8:bf:98:ef:74:a3:9f:72:a9:8c:d0:9a:8f:ec:5d:
c0:03:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:15 2025 by rpki-client