Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: JM3BJVGf8Fi68e4JLs+umXYX3w2+7NxhXunsVmqshs8=
Subject key identifier: FB:66:D0:59:75:2C:E2:C6:2C:4E:11:EA:11:16:09:EC:54:01:8B:51
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 0194BBCE494B2FB7C0B32912610B5A898CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: RdD2m86YZr5U5hhJyxVnFnGoDRqeDWycMoI7IbCqpCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:4b:2f:b7:c0:b3:29:12:61:0b:5a:89:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=fb66d059752ce2c62c4e11ea111609ec54018b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:ae:1e:5b:cb:4d:1c:20:ad:0c:84:f8:fc:
50:fd:f0:4d:47:af:fa:c4:1c:b9:83:ec:c5:d6:5c:
a2:3e:e6:38:10:fc:3b:ac:de:26:68:b4:1e:db:dd:
11:8b:ee:a9:cd:5b:72:24:88:26:48:ca:32:00:a2:
a3:19:26:06:98:77:55:30:26:6f:74:e4:ad:58:39:
c5:7a:6d:6b:2c:d4:36:4a:df:0d:ea:43:60:3c:8f:
fd:13:e8:86:a0:4d:7f:43:bb:d3:49:e0:4d:1d:10:
03:97:73:62:9c:c6:1e:92:e8:2e:19:08:5c:b5:13:
0d:13:a4:58:9f:b3:4b:ab:af:08:29:b5:b4:c8:77:
80:6c:02:57:08:25:84:05:bc:e1:2e:63:f1:42:2f:
0b:85:43:cf:5c:5e:06:cd:8a:2f:aa:7c:31:d8:a6:
0a:98:56:06:c8:c6:45:de:8b:26:4c:6b:6a:ec:fe:
6a:be:06:30:ba:22:bd:bd:ab:d6:cf:61:7b:86:2d:
f9:1f:7e:6a:c1:9e:6f:fb:52:09:5c:61:09:6a:d9:
2a:c7:f8:ad:bb:df:b1:b0:d7:16:31:e6:35:02:3b:
50:9d:38:cb:19:9b:d4:9e:b2:ff:bc:4f:d2:e3:54:
4c:0e:47:8b:51:10:34:64:fc:34:54:2a:01:80:e0:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:66:D0:59:75:2C:E2:C6:2C:4E:11:EA:11:16:09:EC:54:01:8B:51
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:75:bb:04:4a:90:a7:0c:ef:0d:b0:32:75:16:d7:10:5a:2f:
5c:95:50:ee:0f:b9:ca:9e:80:71:58:ec:f0:f1:ac:33:49:64:
b8:2b:b6:14:bf:b5:99:51:15:db:39:33:b7:92:1c:c9:e9:25:
4b:fc:b1:3f:05:78:a4:99:0c:71:10:48:07:d2:ee:3e:71:a3:
25:21:15:6b:ad:90:1e:6b:d6:58:91:d0:66:57:a7:13:ab:88:
37:11:5a:06:4c:2d:ea:81:70:db:e0:19:7b:c0:36:28:e3:38:
91:02:76:76:c2:6a:c7:27:e4:69:6a:a3:44:a2:b5:c8:04:d6:
53:da:aa:c5:f2:6f:b0:78:c2:b5:68:1d:34:38:34:f9:7d:1e:
ea:b9:66:eb:93:e5:b1:f4:af:79:3c:6f:7c:e2:be:39:79:6d:
fc:af:75:3c:fa:54:b1:66:08:b3:96:85:d8:f7:ea:47:4e:a4:
24:09:6d:4c:e6:ae:2f:0d:e5:6a:b5:f9:64:d1:3f:da:24:18:
96:3d:ff:5e:96:97:a3:76:83:7b:e3:77:7c:30:5d:1f:1a:0f:
ac:76:c9:ee:13:f4:c4:61:61:cf:02:9c:6f:d0:ca:e6:74:c6:
55:7e:1c:3a:32:69:27:92:3b:99:d2:a4:d4:e4:ae:d9:1a:39:
e2:a5:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:42 2025 by rpki-client