Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
File: NUgzKLASxNGWj8IF3gJK8vmx2rw.mft (raw, json)
Hash identifier: /cmIj7IgU0jWkDUtdgW7w3XGrVUY7vhXiH7dSwZtdQg=
Subject key identifier: B5:5A:5B:3D:FF:DB:8B:AE:05:32:F3:C2:2C:1C:5E:2B:56:BF:22:8C
Authority key identifier: 35:48:33:28:B0:12:C4:D1:96:8F:C2:05:DE:02:4A:F2:F9:B1:DA:BC
Certificate issuer: /CN=35483328b012c4d1968fc205de024af2f9b1dabc
Certificate serial: 0194BD8524CBC9EFEE5B90C5037880A5C8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
Manifest number: CA
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: NUgzKLASxNGWj8IF3gJK8vmx2rw.crl (hash: YTw/ys6CwWN3U4oT8U89luGAtYrv/lGo6Xszp1Obv08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:24:cb:c9:ef:ee:5b:90:c5:03:78:80:a5:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35483328b012c4d1968fc205de024af2f9b1dabc
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=b55a5b3dffdb8bae0532f3c22c1c5e2b56bf228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:2f:f0:02:1d:9f:80:46:ff:99:6c:a7:a9:
6a:80:f2:96:83:72:9a:b5:09:cc:6f:7d:d7:b7:64:
dd:f0:d8:80:ba:67:f9:24:5f:54:48:86:88:1c:d7:
0c:1a:19:43:30:80:fb:01:7d:f7:7f:fc:c1:63:e2:
f2:6e:20:63:42:8c:94:89:cc:49:6d:fd:6f:3f:7a:
28:d1:ef:f9:11:d3:4b:76:1c:46:cb:24:d7:42:0b:
7a:68:4f:51:55:ee:e4:7a:90:26:97:e6:59:a2:3e:
b4:7f:29:e5:58:a4:81:2c:b5:60:59:20:08:ab:d0:
73:20:a8:1a:4a:fe:5f:c2:75:f6:97:4d:e8:5c:d0:
b8:30:93:5f:79:00:13:c9:65:52:c8:35:db:ee:59:
25:39:f5:9f:9e:c4:6c:de:15:f2:dd:59:ff:50:a8:
95:7c:aa:c6:96:92:83:06:09:d9:08:00:f7:9b:fc:
e7:91:52:a3:45:e5:12:13:c2:98:90:17:7a:24:0b:
ea:fc:90:e1:d2:ac:0a:09:ec:a4:de:4d:b6:0c:91:
55:31:80:d2:9f:85:c2:ff:47:02:bb:40:af:01:a2:
ec:f3:8b:19:7c:c0:3c:96:bc:79:38:10:b0:fd:d4:
35:21:5a:6c:bd:69:7a:d8:4d:b2:55:59:e7:ac:13:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:5B:3D:FF:DB:8B:AE:05:32:F3:C2:2C:1C:5E:2B:56:BF:22:8C
X509v3 Authority Key Identifier:
keyid:35:48:33:28:B0:12:C4:D1:96:8F:C2:05:DE:02:4A:F2:F9:B1:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:52:94:b8:79:ce:34:00:1f:41:98:4c:7e:08:db:38:2a:85:
d7:cf:43:ab:81:65:bc:85:3f:8e:70:ae:f0:fe:b1:0d:f1:c5:
ba:e3:6c:1b:c3:8e:49:4c:60:62:06:20:1f:45:60:9f:8b:38:
fe:81:1f:ad:d0:8e:1c:13:55:7f:07:83:2b:46:ce:16:58:aa:
37:c8:70:73:64:c7:3b:fb:99:85:7d:ba:94:8c:0f:db:d4:4a:
4d:48:ea:62:a2:92:39:50:5e:7d:d6:b5:35:d9:7a:41:17:a1:
86:f4:bb:77:87:5c:10:28:0e:c3:5c:c1:56:d8:93:dd:22:3b:
13:25:cd:f8:18:35:ed:05:23:91:b5:14:c6:17:15:33:8b:09:
12:59:03:0f:44:0f:b0:69:0b:ae:ef:b4:e7:ec:8a:fc:99:50:
45:8e:dd:58:f3:c8:ee:91:8f:22:05:41:54:55:e7:d1:c6:9a:
ea:1c:0a:df:13:4f:88:d9:6c:00:f2:bc:1c:53:b2:b2:85:b1:
39:73:3e:75:58:fe:2f:da:eb:4c:16:ff:54:bb:23:2e:24:81:
af:87:ea:70:d6:87:1e:0a:c8:56:5a:46:81:d4:46:8f:7e:0a:
b0:76:2a:e0:37:26:f3:2f:c6:ff:b0:c5:3f:6d:8b:09:21:f0:
c8:40:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:40 2025 by rpki-client