Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier: GesWMF0ZYiHhzSnxYkiVL7Rh8mdeSCzmg8zpQpHvFFk=
Subject key identifier: B7:D2:57:B8:15:BE:5C:4E:A0:77:0F:49:29:06:5D:68:B6:4E:43:26
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial: 0194BD1769E625ACD04922961C3E9D62D09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number: 0ACF
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: oQNl0lGJLk2Y7c4NKK/O/5F7mZ14XiCDLlPLSdW4iM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:69:e6:25:ac:d0:49:22:96:1c:3e:9d:62:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=b7d257b815be5c4ea0770f4929065d68b64e4326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:8b:fd:8b:04:6f:55:e6:d0:d3:06:9f:7c:
d3:29:a9:0c:07:b5:2f:74:92:8c:76:d9:20:00:15:
5c:43:59:da:00:89:ca:15:62:16:ab:0f:6e:7c:f2:
45:9e:22:11:5f:cd:8d:44:86:00:c6:88:a9:ba:29:
ac:28:d6:93:3d:d0:98:53:5f:1e:db:52:b8:b4:7f:
af:bd:75:81:1f:46:a1:f4:93:70:87:da:fe:ef:9e:
4c:d0:e9:4d:29:44:00:66:26:88:6c:54:8d:c6:61:
83:87:71:f2:41:49:b4:9a:2d:3d:56:bb:bf:f3:94:
6c:a8:0c:1d:6c:e8:59:eb:de:59:eb:e3:ec:75:5f:
2a:78:1d:6a:71:d3:69:a6:ed:44:c5:5b:e2:1d:06:
e1:21:95:3d:c4:f5:69:40:f3:9f:ab:7f:11:ca:7c:
46:d3:df:21:7d:e0:52:e2:9a:05:78:6e:0d:16:5f:
4e:5b:30:90:95:69:77:28:a0:07:5e:ca:87:d7:45:
e2:63:0a:ea:7f:45:fe:67:ed:7d:b4:d8:49:d7:30:
dd:e5:fa:77:63:b2:d2:17:12:46:da:e6:62:e8:02:
e8:0b:9a:60:6f:2b:6a:f3:92:da:26:0e:71:3a:25:
43:32:1e:95:a6:56:a5:4f:95:7b:54:85:67:65:f7:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D2:57:B8:15:BE:5C:4E:A0:77:0F:49:29:06:5D:68:B6:4E:43:26
X509v3 Authority Key Identifier:
keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:dd:a0:f9:b9:f4:5b:9f:5a:f5:2c:27:e6:b9:8f:a3:60:b7:
82:a3:1b:9c:d8:cd:7b:fa:34:50:33:c0:46:80:6d:9e:9c:d1:
fb:33:91:d0:37:12:55:9f:a8:e6:e7:4e:a5:75:c4:c0:f4:cd:
df:69:c9:ea:ad:b6:d5:5a:75:d5:51:f5:38:e3:00:07:ae:9e:
01:85:41:68:cf:4c:e8:8d:3d:88:09:26:32:17:2f:e1:af:4f:
be:e1:7e:50:38:47:e9:d5:7b:83:f8:b4:0d:17:aa:c1:cf:a5:
ff:76:3f:e7:97:15:fe:20:84:3c:d1:eb:c3:45:66:6a:c4:fc:
2d:d5:70:93:a4:2d:3e:73:b6:c1:bd:63:4d:20:94:2b:dd:aa:
60:6a:9d:13:55:1c:4c:13:16:4d:af:22:44:3f:2c:85:e6:c7:
32:8e:66:c7:3b:5d:1a:19:54:82:ec:f2:a3:1e:52:8f:49:6e:
5b:9f:5b:6b:ad:32:98:a4:02:a9:d9:14:a3:14:40:d6:c8:21:
ab:95:e8:b4:7d:69:76:41:e6:98:6e:a7:27:aa:8b:d4:40:84:
bb:fa:62:e2:00:99:ec:59:02:2d:fe:74:00:c9:fb:0c:5f:6f:
79:fe:7b:6c:0c:85:57:56:26:e4:8f:91:a9:5f:cf:12:01:0c:
a3:07:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:05 2025 by rpki-client