Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
File: ndrXzlnL6NGaA0EfocbJug1CAqI.mft (raw, json)
Hash identifier: GtUoR0Lbt+6oHzsPWvgIPgH0FYSCzJoVCU0xIsYRUsQ=
Subject key identifier: BC:80:C2:BB:6B:38:1E:9A:85:A1:B0:36:26:42:98:13:D3:5C:0D:C8
Authority key identifier: 9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
Certificate issuer: /CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Certificate serial: 0194BBCEEA9AC3A86BCF944516100006521C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
Manifest number: 079A
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: ndrXzlnL6NGaA0EfocbJug1CAqI.crl (hash: VSatkzGMzH86BfQsYZWTBrjzvv4EVZphJ33Fcc0cHEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ea:9a:c3:a8:6b:cf:94:45:16:10:00:06:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=bc80c2bb6b381e9a85a1b03626429813d35c0dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:b8:f1:9b:28:3c:ad:ec:dc:f1:73:c4:2d:
10:bb:74:af:f7:64:0c:b6:ee:b4:59:c9:9a:53:a6:
a2:ec:19:c3:7a:84:cb:73:19:7f:1f:7d:75:52:a9:
04:0f:e6:9f:2f:fe:bf:13:6b:d9:45:e3:51:9c:a6:
84:fe:99:3c:6b:db:96:29:9d:53:a9:54:19:a6:72:
fd:8b:9f:4e:ad:62:88:0e:d4:50:b5:11:30:7d:5f:
20:1c:c5:2e:14:f7:e6:48:ed:f2:a5:c9:3d:75:b0:
3d:98:4c:f0:4f:e3:e7:fa:12:9b:9c:33:ef:49:83:
78:82:9b:9b:fa:93:6f:d0:19:62:48:29:4b:71:75:
03:07:2d:f0:a7:df:8c:43:fd:56:8f:8c:f1:22:bd:
13:a6:0a:28:cb:1a:1c:9c:ec:a5:0f:2c:10:a1:6d:
3a:ca:34:c0:64:5d:14:b4:95:cf:9e:6c:b0:b1:0e:
30:07:e2:ca:c7:2a:d1:65:f6:b2:36:f9:0e:f7:1b:
9a:94:e7:af:b4:2d:4a:2a:6b:18:c5:51:4f:00:71:
16:b4:07:86:7f:b2:62:6e:5e:53:b7:32:d8:f4:91:
88:80:cb:b9:0c:c3:b0:3d:da:83:54:f6:ca:90:0a:
29:93:65:4d:90:ed:65:3a:10:a9:e5:5b:be:4b:81:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:C2:BB:6B:38:1E:9A:85:A1:B0:36:26:42:98:13:D3:5C:0D:C8
X509v3 Authority Key Identifier:
keyid:9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:38:bb:41:b7:19:c1:fc:46:5a:50:1a:e5:66:9d:0d:e8:f1:
13:ca:97:73:2f:e5:26:b6:f8:63:bb:6d:b0:40:38:c9:a0:0c:
e6:24:c2:08:f4:7a:d8:ce:45:e0:f6:4e:09:15:6f:5a:6c:d4:
11:e2:7b:e4:14:39:22:4c:45:66:f0:08:ed:07:06:23:a5:94:
f2:76:d7:0e:f1:1b:e2:4c:1c:07:d3:b0:aa:5f:2a:3b:37:3c:
91:b1:71:e2:92:5c:e4:ee:df:a5:05:18:47:2f:5c:52:0d:a3:
17:30:70:e5:ec:50:8a:aa:a6:22:d2:1d:48:3f:5e:56:cb:5f:
c2:e0:33:66:cc:c9:73:cf:4b:f3:15:20:f4:f8:4e:93:a3:3d:
25:b0:20:08:65:cf:0a:b6:cd:b3:57:4b:e8:db:50:84:c4:63:
5b:98:91:45:28:03:d9:d4:e1:d2:5e:04:49:3f:cd:8c:e2:cd:
d3:e2:4f:ae:b5:ea:a9:01:af:91:c4:79:b8:5f:05:8c:fd:01:
fd:ec:cc:a9:a0:88:20:d6:be:ac:6e:50:ea:fc:54:96:f1:bf:
31:37:10:3b:4e:fa:d1:49:a9:54:60:44:ba:b2:c7:41:8e:af:
c8:d4:b4:08:73:85:ab:e1:86:eb:fb:04:80:ac:23:93:b1:3f:
71:12:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:20 2025 by rpki-client