Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File: nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier: Rn1EAbCaXwU+/lk6CwRgLR+QFNXgAltqzxtzcxZWVdA=
Subject key identifier: 96:B8:5F:AF:64:56:2D:2C:21:49:27:F0:42:1D:B5:F8:61:EC:6F:88
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer: /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial: 0194BD178D986FEC0D7B46464355D95CF2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number: 0411
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: GXz+krb+i+ph3QaAMJVpyFDbJ7+YtcB0ZXu+MuoQuAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:98:6f:ec:0d:7b:46:46:43:55:d9:5c:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=96b85faf64562d2c214927f0421db5f861ec6f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:33:47:8a:71:f8:42:98:87:ec:5e:3c:d2:
74:56:dd:4e:67:88:61:01:4c:bd:3a:cf:78:3d:3a:
bc:8e:3d:51:49:de:f7:64:24:f2:3d:31:43:d1:5d:
66:b5:32:33:90:f2:3f:67:84:a5:c5:87:2e:2b:df:
d9:3c:5e:b8:8d:2a:01:fd:63:0a:03:21:37:45:ec:
c6:da:73:3e:24:fe:c2:66:93:76:ed:31:15:c5:3f:
ae:ff:78:dd:b4:f8:68:92:a5:1c:6a:55:77:7d:35:
4b:cc:61:c1:ec:75:b9:8f:e3:ca:d1:6b:40:e0:74:
ed:66:3a:3f:1a:ed:04:e3:71:bd:b5:ed:50:f3:16:
ba:cc:69:da:e1:ff:c7:86:cf:9c:d5:5c:03:49:6d:
d7:78:88:e6:4f:34:49:bb:15:14:51:2e:78:67:c0:
34:f6:29:c0:a9:8c:51:a3:66:9d:d2:65:c5:a6:23:
8b:36:21:08:7a:50:47:e8:a5:b5:19:64:2d:d1:da:
c3:53:03:84:8e:87:af:7d:3f:7b:16:d9:74:20:bf:
a5:42:98:df:93:37:a6:8b:5a:f8:b0:80:17:b4:95:
a3:20:da:56:50:32:ad:4a:ce:23:c6:5d:11:99:55:
2f:da:e0:af:36:fd:6a:04:d3:a6:36:03:65:7a:c0:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:5F:AF:64:56:2D:2C:21:49:27:F0:42:1D:B5:F8:61:EC:6F:88
X509v3 Authority Key Identifier:
keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:3a:b0:4f:8b:8f:47:c4:6d:52:9c:24:af:38:72:ba:e6:
6c:7f:e0:8d:a4:50:1b:05:89:6a:3c:20:46:53:53:65:2f:ff:
ca:f1:08:34:bb:44:52:34:77:d9:40:47:f3:a9:a1:7f:4d:f0:
be:5f:b7:3c:3c:95:d3:9f:8f:4f:88:74:7b:ea:49:9d:66:29:
91:f4:b8:dc:1d:98:91:25:71:21:5c:ab:d4:4c:1d:0f:0b:bb:
97:5e:e6:6a:e9:7f:f7:ab:bb:09:ef:c0:d7:c9:49:c0:5c:35:
88:b1:b0:68:2b:c1:1c:fa:50:1f:21:96:53:86:83:0e:a0:2e:
37:d4:b3:3b:cf:2f:e2:82:9b:7f:6c:ba:f7:2d:3e:13:cc:8a:
4e:4e:44:73:b3:fa:20:9f:0b:23:05:48:62:d5:6f:45:92:ce:
dc:cd:a3:66:83:28:42:02:7f:fa:33:6b:b3:91:9e:03:7b:e2:
b6:68:7f:ba:63:fd:6b:ee:1e:16:3b:3d:36:71:40:4c:a8:99:
a1:05:cc:f2:68:78:74:68:27:e2:8b:7d:c7:39:9d:6e:f4:01:
62:29:c1:dc:e0:2b:e8:e5:07:aa:62:2e:c3:9a:a3:3b:98:a6:
85:1d:e7:95:4a:65:42:cf:b3:7c:24:19:8c:07:a3:ce:3d:8a:
eb:97:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:42 2025 by rpki-client