Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
File: NREZcs9Nkki9sYjTtBmuD7flZGs.mft (raw, json)
Hash identifier: NhYdYH01bBP2zMmsFLA87u9aQ5hmnVTsmCrjCWU1NNI=
Subject key identifier: FA:B5:70:B8:6E:9C:6D:47:D3:15:2E:13:73:82:7A:41:B5:4B:C5:1F
Authority key identifier: 35:11:19:72:CF:4D:92:48:BD:B1:88:D3:B4:19:AE:0F:B7:E5:64:6B
Certificate issuer: /CN=35111972cf4d9248bdb188d3b419ae0fb7e5646b
Certificate serial: 0194BBCEE779E19C5A197E48A2203DF5B077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NREZcs9Nkki9sYjTtBmuD7flZGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
Manifest number: 0C38
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: NREZcs9Nkki9sYjTtBmuD7flZGs.crl (hash: gE25wF4lRq83qey/inw522h/yhfvZ/iovC4yeyiE/Yc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e7:79:e1:9c:5a:19:7e:48:a2:20:3d:f5:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35111972cf4d9248bdb188d3b419ae0fb7e5646b
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=fab570b86e9c6d47d3152e1373827a41b54bc51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:7a:82:23:8e:ba:7c:9d:5c:a7:e6:7f:3e:
11:bb:4f:d2:00:3f:1d:9a:35:65:eb:60:61:4b:90:
6f:42:3f:46:c4:12:a8:01:40:f0:17:c2:a4:84:45:
83:7b:b3:91:a9:f8:f6:0e:bd:af:17:ef:61:a4:75:
b8:6f:93:4c:a8:ea:91:14:34:83:5b:d8:3d:49:86:
5d:be:20:da:f3:1b:5e:a0:fb:86:8d:15:af:8b:dd:
26:c5:fe:8c:cb:a3:48:ec:76:88:4e:5f:db:6e:e4:
ca:90:54:18:01:8d:3b:d9:a2:00:72:cc:bb:07:78:
36:8b:3e:94:fb:3e:bc:62:17:4c:aa:fc:9c:e7:11:
cb:33:68:16:d8:20:fa:3c:51:bb:24:fa:2f:3b:de:
d0:1d:8f:79:20:25:2b:87:d8:a6:ac:64:96:c0:a1:
35:0e:75:e4:ea:b0:b7:32:ef:c4:af:98:ac:9c:45:
df:4e:25:21:29:25:c9:74:8e:46:25:c0:7d:f3:60:
a3:4f:69:85:72:da:14:28:42:f3:10:a5:d9:ac:9c:
63:14:88:be:90:e1:b7:cd:58:3d:2e:9c:fe:11:9c:
6d:ab:46:11:60:f1:5d:04:a6:57:c0:ad:a8:50:9d:
50:24:4b:55:fa:1e:c6:6d:4b:4a:a9:e4:43:81:14:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B5:70:B8:6E:9C:6D:47:D3:15:2E:13:73:82:7A:41:B5:4B:C5:1F
X509v3 Authority Key Identifier:
keyid:35:11:19:72:CF:4D:92:48:BD:B1:88:D3:B4:19:AE:0F:B7:E5:64:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NREZcs9Nkki9sYjTtBmuD7flZGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1e:96:72:bc:73:23:ab:e7:90:2b:45:2b:f5:bc:d8:e3:ae:
15:33:0e:7d:14:76:64:8a:ee:21:f8:37:8d:ab:c8:8b:82:78:
00:f8:4b:71:f0:4c:d3:31:b6:ea:14:27:2b:b4:03:6e:94:61:
e9:e3:66:25:60:98:c1:cc:50:cf:86:1e:ec:03:dc:0f:2d:b3:
21:00:34:53:91:ef:fa:be:0d:47:97:0a:80:96:62:55:7e:c6:
5a:06:c9:4a:68:0c:d0:53:de:f8:25:c9:1c:4e:ef:d0:f7:90:
ba:c1:f1:b2:32:d9:1d:56:20:d0:44:d8:34:3e:8d:4d:8b:5e:
bf:e6:f5:60:53:a3:7d:5c:f2:54:81:8a:fc:3e:c2:a0:c5:8a:
33:5b:6b:fe:ce:56:c1:e4:10:4b:bc:e3:75:0b:5c:a5:5b:f9:
7b:3c:4b:ed:82:2f:f6:44:d2:e5:1a:91:9f:3d:15:9a:75:5a:
e3:60:b2:51:88:83:c9:2d:cb:9d:1e:31:ff:1b:d2:80:6d:0a:
d4:aa:7d:a3:a1:6c:77:47:29:62:1d:44:e4:c4:9b:58:a1:6d:
b7:40:93:18:5e:2f:b4:9a:b2:2f:ea:3e:85:e5:59:00:43:dd:
19:dc:46:0b:e8:35:cb:b1:cf:d6:8c:09:74:2a:57:f1:2c:8f:
89:53:ea:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:56:03 2025 by rpki-client