Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier: U06u4jdT9Hph2zBafQsiEMhTqbx1kBjum9RU9/3n3a0=
Subject key identifier: 98:65:21:22:78:C5:A3:20:92:F0:80:24:B4:03:DE:80:2A:65:17:BA
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial: 0194BD17521B5934B560F3D01AF21F3DEBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number: 0122
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: qDRMd7JCxvZkLovKkA54t3sBOa7fNqXURqGGxuQ6XF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:1b:59:34:b5:60:f3:d0:1a:f2:1f:3d:eb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=9865212278c5a32092f08024b403de802a6517ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:ef:d0:fe:eb:e7:8b:9b:88:66:5a:84:de:
c6:3e:55:3b:d4:50:1d:ff:fa:b7:ff:4d:51:be:7a:
62:e7:a6:4f:2d:cb:f7:52:ee:2b:a1:e4:5d:0e:84:
a8:84:1a:dd:89:6a:b3:a3:11:ac:52:0a:02:27:53:
4d:2c:9c:a3:36:62:86:ec:92:6f:2d:7f:d0:a0:1c:
92:6b:05:30:11:02:a6:81:91:b4:47:23:d1:f1:95:
5b:47:b7:79:43:ef:03:a2:c1:70:d6:85:b0:74:e5:
42:02:0d:5c:93:a6:fb:4b:29:80:0a:d0:ab:92:5c:
d5:b3:0c:78:00:cf:ae:23:78:df:a1:a4:41:1a:65:
37:30:12:05:cd:e4:c8:8d:95:7c:c8:da:b0:5c:6b:
b9:6c:a8:98:52:20:7c:56:d6:a0:e7:7f:e0:5c:ed:
e9:e5:a3:98:b6:5d:c5:72:af:bb:49:6f:00:72:f9:
ba:f5:a5:f0:1c:50:ac:99:fc:6e:a4:38:58:9a:ed:
a9:4e:56:5c:b5:85:f5:f0:42:f3:d1:7f:53:f5:d9:
05:80:6d:72:c5:95:41:4a:73:7c:ab:81:e7:49:98:
40:7b:13:5d:8d:84:0b:4b:1e:79:40:e0:8b:0a:9c:
2c:40:f8:22:9a:1c:55:38:2d:8a:85:83:86:7d:75:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:21:22:78:C5:A3:20:92:F0:80:24:B4:03:DE:80:2A:65:17:BA
X509v3 Authority Key Identifier:
keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e6:65:71:99:2a:0a:9f:f1:d1:4c:06:fb:2b:26:d2:48:18:
43:b2:74:c1:23:99:d6:70:1f:62:b9:94:c1:0c:9a:e1:3b:b2:
d8:0e:e3:14:3d:e7:72:6e:c2:ed:1e:8e:57:a5:d5:b4:73:8b:
c6:5a:c9:da:97:43:db:b3:56:2f:72:c3:1a:81:f8:a5:01:1d:
15:09:a8:11:83:56:8e:d0:d2:e1:6a:87:7b:60:1f:e3:cb:6a:
65:63:9f:7b:0d:5d:89:14:1a:b2:45:cc:ee:dd:3e:7c:79:be:
4d:78:56:21:aa:d4:8a:66:1c:26:10:85:5c:23:a3:65:b2:a3:
14:bc:42:30:be:bb:d0:cd:31:cf:88:ed:25:25:67:41:8f:ff:
f4:c8:8b:f8:dc:9c:a5:f9:73:6b:9c:3f:19:0d:d2:c0:00:e1:
08:75:3c:25:d8:04:43:07:91:bd:2c:78:73:36:a8:84:1c:ec:
ac:7e:ba:38:c4:0a:36:63:9e:a2:03:6a:cc:b0:ea:06:b8:60:
1a:45:41:d7:2d:81:f7:4a:4e:37:83:a6:02:5e:96:3b:95:d8:
44:29:f5:c3:08:25:fb:22:c3:1d:50:7a:32:2d:8f:4f:ae:41:
9a:fd:6f:b3:8c:a9:a9:4c:03:14:b5:ad:d0:9b:1e:cd:06:98:
f4:6b:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:34 2025 by rpki-client