Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: oWtlXeoB0f/EYdtccXS/UUTFlFV0aCg51T0Zy1giqgc=
Subject key identifier: 3D:A4:50:AD:EA:62:D4:08:1D:B1:C7:1F:D9:95:AE:4A:7C:99:6F:C0
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 0194BBCE0DC8B4E3AFA70BB401E56D69F83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: l6aLYkrtEAxNNQ5ud0sp7ZeOS3XBTGtLQ5xagFY3J/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0d:c8:b4:e3:af:a7:0b:b4:01:e5:6d:69:f8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=3da450adea62d4081db1c71fd995ae4a7c996fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:43:48:cd:91:03:91:4f:bf:8b:81:c3:8c:
dd:bc:df:a5:47:81:0e:a0:60:b8:4e:a0:4f:25:7b:
42:13:35:5b:42:f9:68:2c:53:75:08:d7:ae:d7:bb:
cf:5e:b7:a5:e1:d0:71:02:fa:d4:24:ac:bf:a9:ee:
76:57:47:41:69:1e:b0:6c:ed:75:d8:1d:55:a7:70:
58:34:68:d2:f4:76:4d:71:8d:f2:5b:84:91:ba:ed:
34:c9:a9:88:2c:8d:7c:b8:1e:53:cd:24:58:68:a7:
c6:25:07:37:81:0b:7a:e4:e6:b0:ca:cf:21:24:6d:
0d:95:30:85:e3:1e:92:69:9d:85:2b:70:21:45:77:
a4:5e:de:d8:d3:f5:a1:e1:9c:98:97:bb:5c:8a:ad:
52:c4:47:31:b1:b1:52:4b:41:24:64:ce:c3:a0:31:
f4:eb:97:9f:e5:06:5e:2d:13:15:fa:e2:68:62:ba:
3f:ad:51:2d:67:72:91:3d:1c:f5:6a:41:a9:48:00:
ab:cd:f0:4f:e6:37:64:0b:50:0b:42:7b:f9:ce:2b:
f4:2e:59:24:46:0f:73:f2:7b:c3:13:ea:90:c6:42:
da:8b:ef:7e:3b:1c:e1:8c:39:19:77:b4:fc:ee:0c:
98:dd:d3:24:5d:4d:e0:18:a0:6b:8a:3a:5e:e0:e1:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A4:50:AD:EA:62:D4:08:1D:B1:C7:1F:D9:95:AE:4A:7C:99:6F:C0
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:58:a4:b6:54:cf:aa:57:c4:c7:3b:b1:29:b5:bc:21:0f:7b:
8a:c7:3d:1b:6a:24:3f:98:64:c4:28:e4:e3:ac:12:90:28:70:
4c:58:43:c1:98:2b:5f:58:8a:fe:9e:08:ba:3e:19:b2:12:78:
63:ea:1a:76:12:e2:10:dc:f6:4d:40:24:2d:91:8c:82:60:29:
da:4c:9a:39:a1:b1:1b:8d:7e:23:b5:07:22:df:b2:99:5e:90:
c4:c0:93:ff:d9:29:3b:25:73:a6:82:89:0a:f0:e9:73:22:c3:
7a:5a:71:10:ca:77:35:a3:fd:84:a6:6f:7c:b4:fb:2e:96:ac:
90:f3:3c:13:c6:6a:f5:ec:01:53:83:5d:8a:d4:32:09:a0:8c:
57:be:3a:a2:83:61:11:20:91:eb:14:7e:26:55:b8:47:4b:d2:
c7:3e:86:f9:67:c7:d5:d9:e0:a8:47:46:da:0a:62:8b:b9:4c:
3e:f6:37:95:5a:06:b3:5f:5a:a7:9c:8c:fc:f9:18:5b:e4:bb:
c5:c7:87:d9:6e:7d:a8:07:70:06:21:52:92:33:dc:2f:e1:29:
fb:bd:0d:38:6c:24:b7:69:27:70:07:d5:74:c1:c3:20:e4:bc:
0a:0c:e6:e8:29:1b:e3:89:39:82:19:06:28:67:66:93:14:b8:
91:e2:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:14 2025 by rpki-client