Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: eQjyKlcDo0vJosAVwKqorRKfTlrbkKpFyOKBtqHUwc4=
Subject key identifier: 4F:6B:45:61:F5:F9:96:5A:D0:70:E1:9E:BE:BF:2C:1F:DB:DD:DC:41
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 0194BC3BC2FDF210C2DD38D5553B6AEF4ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 0775
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: 4r/nQALaKlZ/jipEnwBpbV1zqt3xqGGaGEFh7MlFiCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:fd:f2:10:c2:dd:38:d5:55:3b:6a:ef:4a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=4f6b4561f5f9965ad070e19ebebf2c1fdbdddc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:dc:86:e0:94:b7:d4:39:ad:ac:90:b5:4c:
46:ab:eb:ed:4e:1c:27:c0:fd:d4:a2:79:da:8a:ea:
09:67:9f:d6:22:ed:93:7b:7f:4a:e9:38:4a:96:cb:
9c:5b:64:bc:22:2c:72:ab:82:e4:2b:3b:4c:3a:ed:
88:a7:ea:d4:e3:08:0a:7e:4c:0c:5d:07:63:f7:55:
bf:a0:57:e4:44:d5:65:d8:d2:e4:da:a2:74:ba:fd:
43:99:03:11:90:f0:b4:6d:60:79:69:f8:05:d6:f2:
f3:19:21:75:74:d7:99:93:53:07:67:b7:12:14:61:
fb:32:7f:29:c2:00:b1:c7:f7:c6:81:3f:4e:e4:96:
f1:4b:ee:0c:6d:cc:4c:45:86:23:6c:05:b3:a5:41:
5b:3d:d5:1c:e7:af:a3:b7:66:f8:cf:20:10:c0:09:
a1:d8:9a:8d:69:5c:27:6c:4a:c6:fd:ca:48:dd:47:
e2:df:86:4e:70:ac:5d:74:c0:db:42:a4:c9:9f:f9:
b5:15:86:84:df:e7:d7:e7:44:29:c7:d3:dd:22:a9:
29:19:41:be:20:97:90:a6:0e:39:ae:87:71:19:a8:
21:96:42:1f:e5:98:6f:9f:46:18:5f:04:bd:be:aa:
e9:d9:05:b1:a0:95:35:13:95:e1:4d:21:01:1e:15:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:45:61:F5:F9:96:5A:D0:70:E1:9E:BE:BF:2C:1F:DB:DD:DC:41
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a4:9f:2c:35:b2:fb:c5:80:92:bb:32:ce:2a:f5:62:ac:23:
fe:c5:96:67:f1:11:6f:61:33:cc:12:4f:f9:08:8b:1b:55:a5:
7a:bc:15:11:d4:a0:38:92:68:41:e7:ed:ba:d3:bc:92:00:a8:
c0:ce:ea:81:b3:b1:cf:65:b5:01:75:76:e3:b3:e4:f2:1a:e7:
de:86:f6:55:d6:71:f9:0b:63:30:0e:2f:a5:ca:58:62:a5:30:
00:89:f9:5a:76:47:cf:a4:33:1d:e8:f7:2d:5f:74:19:90:69:
69:5b:07:f6:c6:b3:71:b6:39:9d:0f:1c:d6:05:1c:a9:a3:a1:
da:50:e6:83:7a:75:79:31:49:95:5c:54:59:bc:6f:96:f3:1c:
1b:bf:70:be:2f:c5:46:15:17:8a:10:a6:b3:b4:1a:26:e1:c8:
4a:c7:96:d8:9c:7b:1d:96:c0:f4:8b:09:99:9a:94:7a:29:3a:
5c:b2:80:9b:35:79:c1:02:62:fe:68:74:88:e1:1d:0c:cb:4c:
7f:b0:63:af:7e:cf:fb:31:4d:7a:39:c3:ed:46:33:69:4f:52:
83:b6:06:e2:da:1f:af:61:b7:09:f5:10:f9:97:f2:fa:2c:2d:
34:74:de:83:be:e1:73:75:73:5f:04:e5:eb:20:06:82:a3:f6:
f7:15:6f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:00 2025 by rpki-client