Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json)
Hash identifier: GbngxJMhsXtIs8QzIT4K7z70wC3OH4GZmdNjMgYSTyo=
Subject key identifier: 69:6A:00:A4:73:72:DA:FF:F5:F3:5C:96:80:30:66:20:E0:3E:9A:CB
Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Certificate serial: 0194BBCE655B28CFCB772D509CB690673FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
Manifest number: 0A8E
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: t5OO5xU5viBLYidwnTsZrohw1crYS7WddXiQCrxOkA4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:65:5b:28:cf:cb:77:2d:50:9c:b6:90:67:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=696a00a47372dafff5f35c9680306620e03e9acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:02:b1:15:a2:37:4f:02:2b:14:bb:3d:ae:
e9:ba:71:e8:ec:37:6f:62:d9:f5:1e:e8:84:71:d3:
df:cb:df:ec:87:fd:72:d3:11:7a:02:9c:7f:d1:65:
0c:0e:da:49:40:a3:2b:63:85:9d:8e:91:5c:78:0c:
0e:c9:70:a7:21:cb:a5:8d:fa:9d:07:53:b7:e5:28:
90:8b:d4:13:37:3f:23:d1:4f:35:6e:7f:61:b2:8c:
4c:de:20:b4:2c:57:3a:44:86:f6:2c:d5:90:a5:69:
b9:43:f0:be:5f:d1:15:52:f1:6b:3d:c8:08:9e:ca:
a6:89:f4:16:27:18:f9:d4:e1:54:a3:a8:9e:c6:61:
9f:71:26:e9:56:a9:3d:d0:6b:89:96:19:a5:22:04:
58:cf:0e:a1:ba:87:6c:3c:3f:af:1b:a1:59:5d:f9:
1c:0a:49:d4:f6:dd:e6:a5:cc:40:51:3b:3f:ae:c3:
87:ba:30:20:3e:f2:d6:72:e1:99:e9:58:61:25:b7:
d3:a8:09:38:12:8c:40:bd:63:fc:7d:37:25:ba:c9:
4f:e2:a3:0f:c2:0d:de:91:ec:e3:c8:5d:8a:30:32:
7c:e4:9a:ce:e0:65:c6:81:b8:d0:cc:00:f0:7f:fd:
f6:7d:f1:47:f3:2d:d5:c5:3a:e6:8e:82:57:13:14:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6A:00:A4:73:72:DA:FF:F5:F3:5C:96:80:30:66:20:E0:3E:9A:CB
X509v3 Authority Key Identifier:
keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:70:5c:2a:55:1f:9e:24:4e:a6:80:b7:b7:e4:b8:55:15:03:
3e:36:46:10:c0:b3:76:3a:0a:f2:33:ad:06:5d:c3:6e:04:81:
6e:bc:e2:10:86:b9:1e:ad:f2:53:c0:22:9a:53:6b:53:82:bf:
09:c2:8b:20:26:d1:d8:78:3d:9b:e2:7e:8b:45:9a:10:33:68:
76:9f:13:7e:cf:24:a3:c9:d1:6e:32:ad:bc:4f:8b:85:ab:22:
41:5d:e7:f4:37:7e:2e:fa:22:11:7c:79:4d:46:97:62:39:8b:
28:eb:d9:5e:72:08:10:76:76:0e:5f:1a:b3:53:5b:42:2d:5d:
01:9c:5e:f7:07:e7:c2:80:ed:1c:fe:47:07:16:8e:20:69:a2:
1b:16:52:83:1e:45:1c:4c:bf:a9:8a:24:a3:89:7c:61:7d:a0:
8b:57:8c:19:0d:16:1b:80:97:2b:ed:b8:e4:e6:2a:1b:16:ae:
19:7b:ba:05:79:b3:10:17:87:05:a5:71:90:a4:56:99:df:55:
45:28:a3:b2:5d:bb:1b:27:b4:9d:1e:88:48:5c:07:fc:f7:78:
0b:9e:4e:d0:6c:b2:f0:ea:b3:f3:43:62:be:28:e8:3e:da:6f:
2d:84:18:46:d0:29:8a:b5:d1:95:bc:00:65:52:d9:7c:94:07:
3a:12:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:36:10 2025 by rpki-client