Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: zQGJMvQWVk6Pj3muWhFhArFNV2zUGY6oB/Z3OOJl3z4=
Subject key identifier: AD:A5:C5:61:96:20:40:76:8A:B3:4A:94:39:E0:11:CE:D3:2F:75:CD
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 0194BCA9B5E6F99AAF1E47956C698BD22997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 13F8
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: NICS9Ad2IHVbkSYRbf1KDWK4jpHoC7DJRk4TdIRVnY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b5:e6:f9:9a:af:1e:47:95:6c:69:8b:d2:29:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=ada5c561962040768ab34a9439e011ced32f75cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:0e:5c:fb:07:7f:7d:d1:12:40:5b:88:10:
73:63:42:23:bd:e6:1a:62:36:bb:2c:94:0b:fc:55:
47:52:bb:02:b8:7a:c7:32:d3:e9:43:ac:4c:82:34:
01:58:39:7f:45:58:b0:6f:b0:af:be:c5:6c:f0:e3:
28:f5:35:d0:83:ff:17:38:ed:d6:14:03:b4:b5:1d:
fc:6f:b2:96:2a:76:da:e2:a9:80:7e:05:11:45:bd:
b9:ec:83:1e:74:74:5a:86:e8:95:03:38:0f:8d:34:
b4:ed:9f:de:44:fb:25:a3:59:50:64:cc:b4:2b:66:
e8:8a:48:da:f4:46:42:b1:c9:89:e6:76:6e:16:d1:
d0:66:59:3c:1d:20:80:c6:81:36:c9:a4:cb:e3:ad:
ad:2e:0f:a5:d0:26:a8:09:03:92:73:b8:00:a5:43:
43:f1:6f:b1:f5:2b:19:b0:b1:5f:ce:c2:05:af:2b:
ff:09:e3:39:96:b8:c9:02:01:fd:0b:0d:27:f5:26:
c8:75:04:27:bc:ae:17:6d:db:9f:ef:23:00:77:d6:
70:01:85:73:0c:f9:4e:09:86:d4:bb:c1:2a:43:09:
cd:30:3e:5b:99:eb:fd:c1:e0:a4:1e:d1:a2:f1:be:
bc:2b:40:08:99:eb:c7:c4:e7:f8:39:9f:82:43:ea:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:C5:61:96:20:40:76:8A:B3:4A:94:39:E0:11:CE:D3:2F:75:CD
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bd:58:13:87:83:01:e8:fd:e8:22:03:18:26:ba:fd:1a:73:
6c:2c:32:e3:07:fe:c6:45:0d:19:57:7f:6b:6f:57:97:1f:f8:
66:0d:ce:cf:6c:a2:85:ce:60:03:07:17:8d:fa:09:a5:af:97:
6f:fd:aa:1c:dc:2f:0e:f0:c2:48:49:9f:46:c7:69:6f:b0:11:
ea:41:85:23:ce:7f:c9:07:e6:1c:7c:85:72:b3:f4:ff:6e:97:
4d:cd:c3:d3:4e:aa:ce:cf:5e:16:0e:01:f1:a4:c9:6f:42:82:
2b:03:2a:3e:ad:1b:29:43:cf:81:5a:eb:65:dd:47:cb:da:e8:
9e:7b:1f:38:39:14:8f:3c:7b:32:53:ab:bd:c8:b7:2f:e2:d2:
77:a3:fe:3e:79:8e:df:41:22:86:05:bf:59:45:bd:f8:75:81:
7f:90:c6:6b:71:dc:5a:a1:b9:f1:9b:cc:d2:01:31:9e:09:ab:
78:b5:b7:08:d8:24:c0:b7:51:99:04:d1:b0:d8:29:c7:9f:74:
e1:b6:f6:aa:4a:0d:85:ba:eb:cb:32:6a:a5:64:56:a8:97:1b:
88:4a:d9:95:7c:60:00:94:d3:c0:67:dc:24:d9:7b:59:97:c8:
e0:a1:9f:6b:6d:54:59:e5:0a:42:d2:3a:27:be:e7:a1:8e:ae:
0a:ba:fa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:29 2025 by rpki-client