Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: MQX4bXrNMRIzy8oTDe8Na3VlnunsF84HSiI+Ih8SgTk=
Subject key identifier: E4:85:72:10:32:54:3A:D4:93:47:C9:29:45:EF:24:47:7E:6A:77:1A
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 0194BBCE36F1194B7855E75FF40CD7049A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: D0llXu/pS/Iy85y8184aY4c9hu/nPs75tI/qX8wPxIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:f1:19:4b:78:55:e7:5f:f4:0c:d7:04:9a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=e485721032543ad49347c92945ef24477e6a771a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:18:c4:a3:3d:0d:77:56:54:e7:74:c9:dc:
ce:47:72:8b:cc:21:10:24:a5:1e:35:0f:ee:d7:3b:
13:9d:9a:0a:61:04:52:f0:04:02:26:db:04:c8:90:
c8:98:13:12:6b:92:ba:09:52:a4:a8:63:21:61:f8:
47:f2:2a:e7:32:65:93:a7:9a:b0:ec:a0:5d:44:e6:
17:06:36:c6:f1:6f:30:ed:e3:20:89:87:19:d5:b2:
3c:98:75:94:7b:41:a4:d0:00:67:91:f5:2b:89:5a:
4f:49:09:85:e0:4e:7e:0f:60:3b:42:86:6c:59:17:
34:f8:bb:7b:1d:09:68:fd:03:d8:c5:55:c5:e2:fb:
d3:ab:4c:9b:87:02:fa:c0:08:ad:28:38:85:33:1f:
fe:75:0f:9f:69:14:e1:69:35:f8:01:d6:28:41:5c:
b6:8c:35:ca:19:79:fd:ac:b3:bf:7f:f3:2d:2b:c8:
f4:39:77:59:a8:98:b0:34:7e:21:dc:28:00:fb:94:
29:89:73:50:ba:ee:30:bb:8a:95:ad:b0:d4:7d:48:
7b:81:29:29:a6:73:f1:a4:d0:b9:1c:05:6b:39:e5:
aa:e7:ab:9a:c8:84:af:0d:33:c6:41:d8:ca:3e:1a:
6e:7e:3c:7a:b8:39:9c:37:40:e1:d6:6b:d7:56:7a:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:72:10:32:54:3A:D4:93:47:C9:29:45:EF:24:47:7E:6A:77:1A
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cb:ae:7e:7e:56:41:de:0d:c8:10:5f:43:50:e0:3a:47:5f:
31:3b:5d:d1:9f:66:5e:0d:5b:c0:0f:bc:17:02:a6:a2:e5:74:
1a:b0:62:39:1b:61:2f:db:1e:a1:ef:ab:71:f1:60:57:6a:14:
0b:36:cc:2a:92:fb:c5:6f:19:d6:95:89:9d:b1:d6:d1:79:1e:
92:4b:1a:43:22:5e:6b:b6:51:6e:94:1f:5f:fb:a7:7c:28:15:
d2:db:b5:a9:9b:d9:0d:60:68:7b:59:f0:62:40:54:fe:97:18:
38:e6:06:ff:89:c8:90:dd:99:8a:6a:2f:48:90:f3:10:38:4f:
2d:5e:de:e1:1f:f7:c7:f9:80:3c:41:d1:35:79:2e:1d:e9:d4:
c5:5a:f7:5e:2b:17:30:41:80:3f:7c:21:ff:35:1e:74:5d:2c:
75:12:1f:3e:2a:f9:70:bb:15:cc:1a:80:50:3f:5c:89:57:fc:
d7:c6:f0:b8:a6:4a:8d:4f:dc:d6:4a:c4:54:49:dd:95:58:54:
f6:e2:01:2b:28:2f:1d:27:df:d8:9e:51:fa:1e:cc:08:07:62:
35:3d:a0:76:a7:73:9c:9c:b7:7c:57:22:65:b2:16:41:9c:37:
f1:bd:42:8d:55:37:ea:8d:52:e7:a1:2a:f7:6f:99:12:33:fe:
ed:46:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:21 2025 by rpki-client