Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json)
Hash identifier: xSQ6XxzGnLVtgNdP3YUWXhXyfIhplPDbvT6/lzLkFDw=
Subject key identifier: FF:26:3E:AC:15:49:79:38:14:82:7A:83:8C:E8:0D:23:DE:96:BB:91
Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Certificate serial: 0194BC3C039C2EAA1A4B3CD247D80D832ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
Manifest number: 0511
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: vFUumEeygxiXdRnBlJf5y8OcIsgiuZMkPqoV4UhXscA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:9c:2e:aa:1a:4b:3c:d2:47:d8:0d:83:2e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=ff263eac1549793814827a838ce80d23de96bb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:7a:c4:23:7a:91:be:40:de:3e:01:ac:47:
11:48:e3:1a:58:17:90:6b:74:8f:0a:0b:bf:19:e6:
cb:b3:34:0e:86:6c:88:56:57:54:52:89:9f:4f:a5:
96:55:db:06:b4:7a:71:fd:a2:cd:6c:0b:81:9c:e2:
d0:80:ab:1c:4f:39:07:ec:c1:d2:c2:d1:8b:39:bc:
95:fd:ee:db:14:6f:b5:51:35:62:46:a0:1a:a1:23:
fd:46:55:dc:f6:46:bd:26:e5:e9:ed:36:ad:a1:10:
11:ac:e3:13:d8:6b:2c:5b:10:8b:93:28:60:69:7d:
4a:98:0f:03:5f:62:b4:b0:d9:b2:9d:98:60:5d:10:
17:b4:a0:14:23:01:5a:83:03:0f:5c:f3:11:eb:92:
92:ca:e9:b2:f1:e0:4a:14:5a:b8:ab:27:e1:1c:8a:
25:85:16:0d:e0:0c:a9:84:ff:bd:98:3d:12:b4:51:
cd:e3:4e:4e:96:6f:a6:f3:ca:75:48:dd:0f:38:f4:
da:3d:a9:87:b7:6b:8e:3d:b8:29:7f:26:d7:c1:fc:
07:04:e0:70:7f:41:c2:bb:6e:e9:10:74:ac:67:de:
4b:06:87:30:35:c8:f3:fe:dd:16:d0:6d:b0:f9:f7:
03:0f:f5:bd:20:41:73:ff:b3:15:23:95:62:11:ef:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:26:3E:AC:15:49:79:38:14:82:7A:83:8C:E8:0D:23:DE:96:BB:91
X509v3 Authority Key Identifier:
keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b8:69:23:61:ea:70:70:45:ab:4e:79:ec:0e:c1:a2:c7:a1:
cb:07:89:7c:fc:c9:f2:ad:67:6b:c5:b3:54:80:ee:85:2d:28:
28:d2:15:63:fb:6b:f1:15:8a:14:94:cc:a9:54:10:48:be:47:
92:f8:68:57:50:12:6f:02:b6:20:a0:5e:f3:1a:d9:05:c9:8d:
09:87:cf:81:ad:dd:d4:17:0a:dc:d1:1e:e0:c9:a0:73:0e:fa:
49:40:6a:19:6e:4e:53:7d:00:5b:69:87:39:59:6f:16:b3:f0:
8f:32:19:45:9f:1a:65:31:17:ce:48:4e:ee:7a:84:9e:23:b1:
e1:b0:68:a6:1e:84:fe:9c:44:2d:2f:db:9d:b8:77:e7:35:f0:
13:91:f0:52:94:e1:ea:94:49:d3:fb:07:5d:6e:65:bd:4c:78:
44:5d:44:cd:db:1f:e6:70:02:a3:62:1d:ff:ae:93:f4:6b:e4:
7e:2c:c4:0c:8b:b6:1e:c9:78:04:3d:dd:96:ae:d5:16:23:22:
0b:08:1a:70:57:7e:01:49:cf:be:6f:9d:2b:a6:0b:9c:c1:27:
4b:a1:e6:c4:84:79:e3:58:59:52:07:0b:aa:00:fe:91:c4:53:
e8:1f:d2:22:3a:24:0e:a0:a1:a8:fc:ae:49:7c:56:c8:e7:46:
8c:d2:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:31 2025 by rpki-client