Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: QU6zrkNFsP3v9mIo1wxH4L4KMQlM+VFd1SqDAbE5md0=
Subject key identifier: 53:FC:C0:2A:AF:4D:14:C8:2F:CF:2C:13:2B:69:F1:31:BD:2B:91:6B
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 0194BC3C62B74E383104A53E32993843B2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 01DC
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: pSYQ3bVN2S/nJWfJf8nvYgsSh9fQkE8nOuywn0GryzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:b7:4e:38:31:04:a5:3e:32:99:38:43:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=53fcc02aaf4d14c82fcf2c132b69f131bd2b916b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:53:c5:f1:04:dc:ad:ca:f9:2a:af:b1:15:
64:3f:72:d1:92:93:84:f4:46:44:4a:50:dc:9e:d6:
7b:c1:f0:ca:cc:5c:e2:41:f0:e1:be:cb:f3:bd:f5:
be:2e:24:a5:66:76:ab:26:c8:78:56:95:05:fb:19:
54:97:99:18:0b:53:2e:39:b9:05:f9:14:de:86:a7:
5f:59:7b:b7:7a:ea:2d:70:76:ee:e4:b8:0d:66:d2:
74:b3:ba:e5:63:78:fb:6d:d8:59:f2:81:ab:37:61:
73:a9:c9:93:c8:9a:1a:57:13:87:f8:e6:d1:21:d2:
b1:78:39:94:10:81:cc:74:e5:a6:af:2d:da:e7:32:
6f:eb:9b:5e:3a:7c:57:bb:76:75:fd:2e:6e:30:e8:
16:9c:26:bd:e0:6c:11:30:7e:f3:55:31:70:5a:bc:
89:98:c6:68:6b:9b:88:d7:d7:15:00:3d:c0:28:c8:
53:d4:a9:51:0e:4c:08:96:a2:5d:2b:31:d8:13:30:
91:80:78:f8:3c:b8:b8:c4:de:0d:c5:3a:b4:6b:ef:
1e:9b:e7:40:f3:3d:e2:dd:31:e6:b9:31:05:6a:9a:
ef:29:a1:f2:bc:f9:a0:80:66:37:2c:89:70:46:e8:
49:66:82:2b:eb:67:a2:d6:14:84:70:ff:97:5f:b4:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:C0:2A:AF:4D:14:C8:2F:CF:2C:13:2B:69:F1:31:BD:2B:91:6B
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:76:0a:04:fe:08:5f:24:53:fa:8a:7f:b2:e0:78:65:c1:6b:
d2:ed:b4:03:19:6c:72:42:60:3a:c7:27:15:f8:07:82:89:eb:
a1:0f:8d:8f:63:f1:f7:dc:fd:ce:10:96:ff:6c:bb:29:f8:8d:
80:b8:4e:5e:40:48:0f:5e:87:23:a4:60:b6:6d:e8:a0:34:80:
40:42:61:fe:ba:69:04:d0:21:f8:b4:5f:7d:03:02:51:f9:f0:
c6:6a:c0:79:d1:de:49:2b:b5:c9:e0:57:81:6b:0e:11:1a:8f:
8c:d9:d0:cf:60:1a:33:fa:c6:28:c6:5f:00:b0:54:1e:4f:25:
e1:cb:31:98:6d:aa:97:63:b5:2c:76:7a:1b:2b:8a:68:59:97:
62:63:7d:8a:a6:19:6c:80:3f:85:c7:b5:2c:8c:ca:3f:36:3d:
ea:04:93:ed:4f:2e:fc:be:32:25:82:40:aa:ab:59:9d:3f:a6:
47:4b:58:fb:cb:35:08:52:89:cc:ee:2c:ec:1f:93:34:41:e5:
da:6b:4c:49:48:70:6f:e5:f5:7a:86:24:99:cf:50:aa:e0:ef:
05:5f:95:51:67:63:12:fc:48:cc:61:83:db:99:98:ae:28:03:
e7:87:93:89:20:9c:13:d2:6e:42:ff:fe:ea:e9:38:55:11:ba:
5f:aa:34:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:06 2025 by rpki-client