Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: aBBBCT21/CD6fF2U7GNZDbOr/bJl9I32m33suB0B12k=
Subject key identifier: F1:D7:65:3F:73:EA:90:7A:02:72:D6:E3:DB:0B:CB:E6:1F:D9:04:0D
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 0194BBCDC7CC583D36EFCAF2971A3AA3DAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 0AF0
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: aMeksa1vxdZGl3d2sXSAIGK6fXaYlpfHI0BGYhui2sk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:cc:58:3d:36:ef:ca:f2:97:1a:3a:a3:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=f1d7653f73ea907a0272d6e3db0bcbe61fd9040d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:a6:1f:fa:ad:64:05:bd:51:54:cb:59:4a:
a3:c3:8b:06:ac:39:68:fa:8b:4b:1c:70:f0:46:57:
2c:9c:75:3d:3b:68:68:90:f2:87:fb:3e:0c:7f:a5:
75:9f:63:48:73:d2:3a:84:a3:94:8a:27:a2:ac:85:
72:81:cd:a2:93:85:3c:fb:f8:7a:71:b0:96:e9:06:
87:c5:a6:0f:4f:6e:2a:3a:a0:2c:a3:5e:cd:6e:38:
15:42:4a:bf:f0:89:1e:67:a3:ea:59:28:cc:b2:8b:
34:c6:aa:9b:f5:2b:87:0b:60:b3:d4:6b:6b:89:2e:
4f:47:fe:eb:98:a2:95:5b:58:ba:04:33:6f:38:2e:
0c:ee:ac:19:f3:a8:05:21:2c:d4:b2:80:0b:02:8e:
d0:79:3a:6f:1a:b2:5e:95:14:cb:b7:90:09:60:10:
e0:65:fb:85:66:10:a2:42:0c:07:25:46:eb:b6:68:
7d:36:03:ad:c0:07:44:4c:63:a5:86:ec:bb:c2:bb:
c2:db:44:66:f4:4a:40:56:7e:45:77:1f:40:ce:28:
ce:f1:d6:13:29:d2:77:11:e1:e9:ac:f8:7c:b9:26:
0b:d8:ac:a8:76:a6:cb:c4:5d:49:dc:34:99:60:0e:
9f:d0:3f:71:4b:db:a5:76:c6:8e:9f:1c:64:4c:aa:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D7:65:3F:73:EA:90:7A:02:72:D6:E3:DB:0B:CB:E6:1F:D9:04:0D
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1d:e6:cb:52:c8:64:12:7e:94:43:0a:03:91:d8:27:44:c4:
1c:92:9a:09:f9:af:33:ed:38:2a:d7:14:e5:d0:39:9f:88:eb:
00:35:76:7d:e3:39:6f:47:d2:c8:f6:e8:6e:95:bf:15:f3:85:
e7:4d:aa:4d:0b:9b:51:0a:22:9d:9c:8a:14:7f:24:56:29:ff:
c1:51:7d:59:01:fb:9b:74:81:b9:f1:d1:cf:33:68:78:06:c0:
28:7c:39:bf:5e:62:c9:76:80:ff:6f:a5:06:0f:37:91:31:ce:
40:44:87:c4:14:b8:c0:c7:a9:02:69:b3:bf:d9:02:88:bc:7d:
7d:85:e8:cd:51:aa:8b:e9:8c:62:c7:1d:b3:ea:cb:81:7a:d5:
17:e2:74:4b:bb:d6:65:63:6f:1d:6d:21:be:6c:1a:3f:ac:53:
77:34:6b:06:cd:52:66:dd:05:9d:5b:63:25:a9:03:59:85:bc:
ac:e5:3f:9f:3c:b7:83:dd:7b:d0:4b:a2:3a:43:d9:bf:d9:b5:
d5:2d:c4:d7:6c:94:40:97:0b:98:83:66:85:45:14:aa:2f:dd:
e7:4f:7f:69:8f:43:1b:d3:0e:78:8a:8e:63:58:5a:f6:26:90:
71:21:8a:7a:9a:7f:d3:5d:df:b4:7a:8e:00:73:bd:97:76:7e:
15:cc:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:50:49 2025 by rpki-client