Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.mft
File: NSfzoow8WhVFLOxPVswmno6tnXI.mft (raw, json)
Hash identifier: EV65gDilbUqWGKm9glWZgc/VCV04pvvfA2wR5Cz/+oE=
Subject key identifier: 5B:1E:C0:10:13:7D:2E:2F:78:39:4F:C5:0E:F8:F7:69:96:07:21:EC
Authority key identifier: 35:27:F3:A2:8C:3C:5A:15:45:2C:EC:4F:56:CC:26:9E:8E:AD:9D:72
Certificate issuer: /CN=3527f3a28c3c5a15452cec4f56cc269e8ead9d72
Certificate serial: 0194BBCE813F05E7DD1C4B745450AA9C9CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSfzoow8WhVFLOxPVswmno6tnXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: NSfzoow8WhVFLOxPVswmno6tnXI.crl (hash: TgQFeLVmN2/znJGUIF4y4lcaBL/LoD01KwYoclMfNNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:81:3f:05:e7:dd:1c:4b:74:54:50:aa:9c:9c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3527f3a28c3c5a15452cec4f56cc269e8ead9d72
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=5b1ec010137d2e2f78394fc50ef8f769960721ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:70:46:37:6a:f7:c0:ab:b4:6f:93:a8:22:b4:
67:f9:e2:01:e1:b3:23:7d:7d:ca:0f:02:76:58:9c:
a8:b9:54:ae:85:e9:07:c2:f8:b7:a4:b0:1f:0a:dc:
8e:03:ea:71:5b:50:04:91:4b:de:42:11:3a:09:82:
e6:87:9e:85:1f:22:41:4d:c1:bb:db:94:4b:c0:2d:
fb:90:6c:e9:4b:23:e3:ff:8a:60:a6:37:3f:1c:b0:
48:4e:0d:21:e6:8b:eb:a8:39:45:11:25:79:ab:ba:
ba:69:5c:a3:3d:c9:1c:d1:b8:6c:f2:f2:85:39:ea:
ff:33:bb:a7:74:d3:b4:6d:83:00:34:4f:ac:42:db:
59:4b:8d:91:a3:77:8c:ec:f5:aa:23:13:61:94:8f:
a1:6e:43:b5:08:72:12:fa:1c:bf:f2:6c:9f:50:cd:
cf:1c:fa:16:f1:86:9c:e4:f3:8b:21:3b:aa:50:fe:
63:60:80:6e:2f:30:a2:ba:0f:36:18:05:73:56:84:
06:94:a5:a2:f7:b2:66:d0:5b:47:41:43:3a:54:58:
33:29:7d:01:54:0c:20:89:59:59:15:f2:98:dd:19:
d7:64:04:91:69:76:ad:70:3e:25:19:dd:cc:b4:ab:
1c:be:ca:c4:47:ce:f2:a0:75:fd:f9:92:52:cf:ef:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:C0:10:13:7D:2E:2F:78:39:4F:C5:0E:F8:F7:69:96:07:21:EC
X509v3 Authority Key Identifier:
keyid:35:27:F3:A2:8C:3C:5A:15:45:2C:EC:4F:56:CC:26:9E:8E:AD:9D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSfzoow8WhVFLOxPVswmno6tnXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bd:0d:0e:43:a1:cf:38:77:fc:23:0d:7d:42:16:16:85:5d:
9d:1d:55:2a:0d:22:e6:38:56:6b:41:b8:04:7d:1f:28:41:62:
cf:3d:0c:90:a7:62:33:47:73:b1:7c:aa:1c:3a:fc:c0:33:bb:
e0:13:1c:6f:a9:9d:a8:e5:64:b3:25:d6:62:e5:66:6f:39:d3:
aa:cb:d0:b1:4c:ad:06:ec:9b:4e:17:0d:14:0a:83:2c:93:5b:
5d:33:e6:a9:c9:81:df:ef:b8:05:5a:61:bf:72:20:af:9d:f1:
91:10:7f:32:27:b3:9c:07:2d:06:f3:b5:d7:07:56:1c:a3:4b:
45:30:1a:bb:83:4a:60:b9:73:0d:5e:b6:7e:32:ed:47:ed:ef:
e0:7d:23:8d:85:0a:2f:c2:8b:1f:f7:b2:05:ed:01:4f:f0:ea:
6f:6e:83:ce:85:ed:24:e9:f3:a3:6f:22:68:70:78:06:f0:ba:
76:0d:7b:b8:20:e2:fb:82:3c:d9:e5:09:c0:91:26:7d:f7:94:
a9:cf:cd:25:71:de:e8:4d:fd:d2:6e:89:e2:22:7f:a2:78:78:
7c:3c:df:f2:0e:4e:3f:84:dc:d9:d1:23:80:e9:2a:18:03:6e:
05:5e:87:1d:c7:f1:fe:99:bc:d7:29:66:72:ca:1a:d1:58:35:
b8:26:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:21 2025 by rpki-client