Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: rApW+HK1UTxeYWXP23Lp9oqnvNW2XT2HgpKk1wWsvbc=
Subject key identifier: 1C:88:AF:B8:9A:67:80:7C:EA:48:DC:49:4F:3E:DB:5B:D1:C4:09:C7
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 0194BD17DC74B01322B1750E73C99973881F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 1411
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: xUDcCuXeLNQ+AJ1vXyBWIOf0JweeTNR6KRaeP7xzRLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:74:b0:13:22:b1:75:0e:73:c9:99:73:88:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=1c88afb89a67807cea48dc494f3edb5bd1c409c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b8:44:9c:b2:5c:4f:a9:a5:6f:1b:43:d3:d5:
86:e8:25:bc:89:4e:04:53:db:f8:12:96:83:1d:7b:
8d:f4:3d:ec:42:8b:52:c3:83:c0:82:40:21:d5:ef:
8d:ed:d8:0d:5d:f4:19:31:4c:a1:77:65:bc:5e:cd:
46:f0:c8:ef:e5:12:12:9b:09:94:a3:e6:fb:b6:c2:
48:89:2f:8c:3f:70:9d:62:e6:bf:6d:b6:2e:73:54:
57:55:ed:71:b4:64:f4:ce:63:01:a3:d3:11:94:2a:
c7:6f:81:96:da:5d:f7:e4:a3:31:48:76:5a:10:9f:
d9:dc:76:1c:2f:41:1f:85:f2:67:60:9a:ac:dd:74:
37:03:e4:fc:a0:ad:b0:51:60:a5:03:42:ef:66:37:
3c:64:fb:d1:4d:23:a1:27:4f:42:42:1b:b6:60:07:
00:ea:0a:ee:92:bf:a9:07:aa:2c:65:2d:31:6d:48:
1e:bc:39:c2:d7:32:45:bb:ac:5b:56:3a:5f:8e:db:
3d:a4:c4:45:26:c5:fe:69:da:dd:b1:1d:82:54:c6:
8f:4c:38:cc:28:25:6d:5d:3f:c6:04:42:e1:9b:dc:
12:3a:ed:33:e9:ee:9e:96:77:d5:d0:ed:4d:1e:50:
1e:5b:b3:ad:cc:4e:52:76:e7:e1:b9:ff:fd:14:88:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:88:AF:B8:9A:67:80:7C:EA:48:DC:49:4F:3E:DB:5B:D1:C4:09:C7
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a0:e4:cf:a8:ea:23:3b:94:4d:c0:4a:0e:7f:3c:3e:6e:bc:
0d:dd:6f:98:43:b5:51:77:29:4a:a0:a2:7a:4c:51:24:21:0b:
a6:83:96:e0:98:85:d6:11:37:77:3c:85:59:3c:1d:df:7e:36:
06:90:cc:5f:86:f4:a7:85:56:32:08:93:81:5d:0b:a6:b5:40:
5d:fc:07:34:37:8d:14:98:55:3a:bf:4f:38:3a:80:1f:cd:7d:
f4:f4:a8:f8:f4:9c:d0:ef:f0:5e:0b:7d:43:45:cb:3b:fd:7a:
5e:1f:5d:aa:b1:c9:98:96:29:a4:06:35:27:3d:91:b4:67:d6:
6c:50:c2:4b:9d:30:fc:49:43:45:b0:f8:90:6e:90:9b:2a:96:
4f:01:2b:f0:09:43:f0:f8:a1:8b:d2:3b:d4:d6:9b:95:1d:66:
ad:76:bf:50:f4:01:7b:33:b6:c7:87:f7:36:8f:93:35:56:0a:
ca:d1:3d:30:c4:5e:1d:64:8d:68:12:0d:6a:70:50:11:3c:6c:
b3:1c:0c:08:43:4f:26:bd:e0:9b:70:ae:e5:22:3e:98:36:cc:
8d:5f:b6:a5:3d:4d:54:1c:ee:45:2f:3e:1a:9d:b0:dc:21:63:
46:b4:e4:e5:67:68:2a:2f:fd:4d:4c:8d:df:b7:2f:63:aa:06:
fe:d4:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:27 2025 by rpki-client