Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: brnOWZ27KnwaZlACdNprMRL8/YGXExdO2DxEt0BF37s=
Subject key identifier: 15:AD:0A:F2:3F:1E:08:EE:13:7A:62:6B:BF:73:AC:4D:8C:C2:A1:7F
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 0194BCE0D8EC4D43D56D63D81B7952D01D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 0141
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: HroeQwPyIOgp05iNL9JFWy52+0ePtj9DCdNmz1lsBqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d8:ec:4d:43:d5:6d:63:d8:1b:79:52:d0:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=15ad0af23f1e08ee137a626bbf73ac4d8cc2a17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:00:9c:0e:ed:13:c7:38:5f:8a:35:10:ed:
dd:32:af:b9:17:7b:a7:b1:02:88:b9:84:c9:45:65:
49:e7:33:9f:82:14:8c:d7:34:c0:e9:91:45:b6:ef:
ff:97:f5:f0:90:34:60:37:a8:05:f2:5f:e4:06:6e:
c1:57:1b:0e:1b:c8:ed:55:83:f1:cc:93:2b:39:fd:
2d:76:11:c7:91:e7:6a:7b:ea:ec:00:e5:6c:dc:5f:
ae:f8:24:dd:0c:8b:20:04:09:04:24:64:56:e9:83:
37:b8:ac:ae:ea:d2:eb:a8:a8:8c:91:3c:e0:72:15:
6d:d2:a6:a5:11:36:3e:e2:9b:44:c8:5e:7f:95:02:
6b:ef:d2:78:f0:81:b5:c9:00:b4:4a:a6:bb:f3:c2:
4c:89:cb:18:1c:4a:a2:c8:2b:12:08:e2:23:38:91:
26:c8:f8:37:25:1c:f8:89:c6:88:1e:b2:0f:b6:b4:
d3:b0:41:65:3e:9e:76:b9:8f:6f:51:a8:f6:d4:63:
5d:e7:bb:3d:e4:8f:b5:d3:34:b2:a8:7c:ec:96:95:
09:1c:29:61:91:fe:28:91:ed:c7:b0:06:df:84:06:
16:e8:71:57:db:40:a0:23:ee:f0:d0:5e:7f:b3:ba:
ea:80:c5:fd:7d:27:de:2e:fc:ad:8d:d8:e5:a8:32:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:0A:F2:3F:1E:08:EE:13:7A:62:6B:BF:73:AC:4D:8C:C2:A1:7F
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:34:b6:66:9a:9e:29:b0:a7:9e:3c:a0:0f:73:a4:c7:2a:78:
94:87:70:a0:a2:93:e5:2d:41:8b:e9:10:72:c5:30:18:61:75:
88:49:f4:f5:24:b1:e5:64:9d:f8:df:39:50:5f:a4:bf:34:e0:
2b:5f:dd:d3:29:9f:5a:77:e2:2f:87:85:24:36:fe:dc:e4:cb:
5c:9c:aa:43:93:35:5d:7c:05:b6:7f:a4:48:29:cc:bb:98:6c:
50:48:51:ed:b7:b9:58:c6:fb:1f:37:26:0e:15:3d:c8:17:cc:
49:ca:8e:f1:ab:a9:05:91:ee:2c:82:25:a8:49:4b:50:2c:7b:
57:ba:45:53:32:3b:41:2e:62:61:da:1d:47:4c:e9:98:ca:97:
43:c6:ba:fd:25:da:c0:f7:f0:3c:94:ff:f9:9a:46:4a:d0:c8:
80:43:c1:1c:2a:cf:73:cb:30:6c:45:26:fc:98:5c:22:78:da:
ad:12:95:42:04:65:1b:a5:6a:1b:8b:5d:ca:20:56:cb:c8:56:
04:4e:53:dd:2a:7a:0b:82:05:f9:a2:ef:35:55:6e:6f:8d:7d:
5d:69:01:b9:d3:85:71:d6:2f:33:6a:c6:a6:52:d7:92:bb:0d:
f3:43:cc:1e:12:50:93:c6:2e:b3:b8:8d:e5:12:72:a6:ab:8a:
2f:bb:1e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:27 2025 by rpki-client