Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json)
Hash identifier: nEwjbU8WKq00D1IKZuUXUeRffeG8otFRgKeSodReHl4=
Subject key identifier: E0:25:E2:D1:F4:77:84:16:C3:F7:98:B0:4A:5E:0B:26:81:CE:9C:2A
Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed
Certificate serial: 0194BCA9D1704C86AAA932769CE8BBF336C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
Manifest number: 0D3E
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: E9v1CN1tC+Pdrymv+UpziMBJO3bGmBp/TSkisItkNBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d1:70:4c:86:aa:a9:32:76:9c:e8:bb:f3:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=e025e2d1f4778416c3f798b04a5e0b2681ce9c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:88:c5:c0:62:15:6d:23:b9:74:48:be:83:
db:ba:60:90:cb:69:92:3c:06:6a:78:ef:d2:8e:d7:
63:0e:44:0b:02:ee:16:f3:12:04:ed:39:34:03:39:
2e:c2:46:77:94:a1:63:23:d9:a0:5a:49:0c:2d:dd:
10:dd:9e:19:86:7f:26:4a:07:70:20:0c:aa:98:5d:
7f:70:3a:6e:06:4e:39:b7:6b:fc:92:51:b0:27:39:
6c:32:4c:7f:17:78:7d:c1:ae:95:16:75:ca:35:8e:
4b:3e:cb:ee:ec:05:0b:3a:24:20:3d:b7:90:da:b6:
7a:30:57:83:ea:8d:57:11:37:a4:58:91:eb:14:4b:
86:a5:8f:5b:7b:96:55:00:81:88:a1:0b:00:b2:77:
ed:ab:ec:6a:6d:af:1f:cf:75:2c:f5:c6:90:41:f0:
e6:4d:f9:25:5f:4e:94:e0:9b:8a:0d:8e:44:b3:a8:
b8:83:25:84:4b:19:fa:96:ee:2a:13:fe:d0:a7:ee:
eb:3a:7c:6b:ca:66:df:3a:c2:15:25:bd:08:38:94:
bb:d2:02:22:76:4a:a9:ec:f4:39:44:50:04:b4:c4:
d8:f0:9e:fe:e6:e5:f3:df:fa:45:c1:5c:ab:f6:85:
3f:6b:1e:1a:3e:e5:32:b1:2b:1b:ea:7d:bd:c6:18:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:E2:D1:F4:77:84:16:C3:F7:98:B0:4A:5E:0B:26:81:CE:9C:2A
X509v3 Authority Key Identifier:
keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:7c:1b:d8:05:b8:67:5e:14:9e:9d:d6:7d:c1:4f:db:bd:
02:5b:5d:f2:cb:cb:d0:af:57:27:3d:bc:9b:a3:90:e8:96:33:
8e:be:ab:c7:90:14:76:ba:09:1e:d0:d6:55:92:a6:bb:a2:1c:
cf:48:5d:82:da:c8:67:65:c6:5b:d8:36:29:25:47:cc:77:3f:
75:34:57:81:d4:75:03:13:66:4b:53:bb:37:b8:f2:6a:6a:f9:
a6:38:f9:2c:dd:84:4f:3d:d9:a0:a5:03:17:08:ec:51:bb:4a:
73:cc:57:44:43:2d:4a:d8:4b:d4:bd:3a:a7:88:93:64:fa:1f:
3f:eb:55:8d:30:20:d6:10:00:fa:5d:41:b3:74:44:32:6c:35:
5d:ae:42:9c:ca:11:79:da:1e:c7:03:e7:75:92:d5:20:25:39:
c3:2e:89:f3:f1:ee:4e:c4:0b:69:1a:80:f3:9b:e7:5b:60:ed:
da:b4:7a:91:be:03:e0:50:c3:45:bf:db:1a:2f:64:14:d9:fb:
84:34:99:b5:0f:26:ee:0c:b8:b2:6d:cd:d6:67:9b:9f:be:53:
be:cc:09:b9:b5:d0:b9:7a:71:82:68:31:27:b5:05:5f:df:8e:
db:29:66:37:3d:0d:52:05:a9:d0:a3:6c:e2:5d:1e:90:49:e4:
0c:04:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:00 2025 by rpki-client