Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
File: NKh-9PEuNt_cafTUydRQ7us_9tU.mft (raw, json)
Hash identifier: RDROJamzUT5JtJ+SPHp9pM6UpmhYYTAJoxIPUDL47XU=
Subject key identifier: 27:93:74:04:1C:26:E3:07:59:97:85:6B:5A:33:5B:FE:2D:81:A9:CE
Authority key identifier: 34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
Certificate issuer: /CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Certificate serial: 0194BBCEF59C5D46A84727D9EAD09219C011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: NKh-9PEuNt_cafTUydRQ7us_9tU.crl (hash: v7uMmub1/i/DtwGNKPC9rmBBDX3D2ZvfnmzbNOnTFzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f5:9c:5d:46:a8:47:27:d9:ea:d0:92:19:c0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=279374041c26e3075997856b5a335bfe2d81a9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:61:be:d1:72:5f:e8:d1:aa:21:d0:f4:ba:
c1:80:57:fe:ca:f7:98:2c:b9:5f:5f:07:b0:76:99:
5f:08:48:9d:a2:de:d7:61:80:c4:8b:30:cc:b1:81:
09:4f:f9:5a:99:dc:7a:10:ec:fb:00:79:33:13:44:
af:2e:a8:65:14:dd:4d:90:5c:b2:08:ca:ee:f1:44:
30:c5:3c:6b:c9:2c:d6:29:c9:ff:de:55:c2:51:31:
b6:5c:c6:f1:b1:86:80:d0:f9:c8:99:79:f4:cc:23:
a9:63:20:03:53:dc:45:b7:e9:48:e4:32:4d:93:a2:
23:1f:a0:ee:55:ef:98:5f:56:b7:0a:76:66:ad:da:
8f:18:27:f9:0a:3e:43:3a:e9:c7:03:99:77:a2:35:
d5:23:8d:d5:b7:9a:df:12:58:a9:46:b4:45:c9:0a:
a0:45:a2:7c:8a:60:e4:af:b8:00:7c:51:ea:f5:e1:
5e:27:62:73:17:b6:48:0a:ab:57:a1:c0:19:ca:11:
66:0c:39:57:6c:ab:de:c7:35:2d:09:56:06:b2:f2:
8e:33:d2:e0:c1:06:8a:fc:6e:fc:e2:9b:9d:cd:03:
89:83:09:88:25:e7:30:01:a1:78:ba:3c:16:e6:fc:
1b:57:e3:0f:e1:bd:e1:38:2c:6b:f5:80:f3:0d:b2:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:74:04:1C:26:E3:07:59:97:85:6B:5A:33:5B:FE:2D:81:A9:CE
X509v3 Authority Key Identifier:
keyid:34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:56:0a:39:2e:a8:ea:2a:50:c9:df:ff:f8:8d:e6:fe:f6:
e5:7c:c5:f3:18:f7:7e:63:35:ef:87:82:f0:72:45:77:1b:f7:
af:a0:34:9c:63:f2:47:f0:6e:d3:2f:50:dc:3f:41:d1:fd:db:
93:ae:6b:2e:09:ef:19:0b:25:07:19:91:d9:76:b2:c8:d3:32:
ef:09:fc:58:cb:f1:70:58:33:94:bb:b2:02:d2:d5:8b:c3:74:
ed:1d:cb:7a:97:08:c0:f3:83:cf:f3:cc:2d:3c:97:7a:c5:34:
12:d7:a5:72:8c:9f:75:6d:9d:6f:57:75:c0:ea:a2:3c:48:c7:
9e:25:78:96:7a:f9:1b:08:72:6a:19:d5:c5:c1:b7:97:a6:65:
c3:38:dc:9e:e3:c0:d5:11:6d:50:38:30:d0:e9:b4:0f:5f:e6:
fc:ea:e2:3a:cd:95:e6:41:0e:4e:06:c5:1b:31:4c:dc:f7:19:
7e:0d:06:6a:39:01:82:c7:43:8a:40:4c:a6:3c:04:0c:f5:f5:
f6:a8:26:cd:a6:27:91:c6:8b:90:27:98:6c:65:3b:76:1c:d0:
6d:fb:e1:aa:9e:be:bd:c7:89:3d:41:d4:d5:54:4c:9e:7c:03:
67:87:62:af:af:9d:85:8e:cc:91:21:91:23:4d:f3:d3:25:16:
dc:3f:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:34 2025 by rpki-client