Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: zb7Pg0LQ2fEE4Q9pTbKW63E/0D5zLW/FLod3PIqc7BE=
Subject key identifier: 2C:19:A2:00:12:0B:C3:BE:34:11:DB:52:A9:71:3A:75:79:16:9A:B7
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 0194BC3C2A441304F2A67A28E6DB9F8B3940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: Qyeisif+8f6j3s/B1+ax5Gnxk561axwy0pHdNg5h7hI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:44:13:04:f2:a6:7a:28:e6:db:9f:8b:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=2c19a200120bc3be3411db52a9713a7579169ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:68:4c:54:81:1e:51:e8:a4:c0:45:3e:b6:
1d:7e:e8:97:c0:1e:1e:86:51:fc:98:3c:bb:a1:51:
98:f2:fe:13:12:ab:2c:b6:21:de:65:98:62:8c:b7:
9b:a4:bd:ca:7e:b9:f1:a9:03:50:a8:c9:c1:2d:73:
2b:b4:78:b1:6a:49:43:18:ca:5a:11:d8:25:10:2e:
5f:3c:95:a4:96:ca:c0:f8:af:73:50:35:1d:36:5c:
b1:74:64:fb:66:8d:07:ba:5e:f0:a8:46:69:2d:02:
6b:ff:51:52:33:e2:88:00:fd:35:ae:76:49:2d:82:
c7:e6:15:67:4f:a5:3d:85:82:de:7f:2e:42:cc:d4:
99:bb:1d:e3:77:2c:84:35:0f:8b:21:f7:aa:5d:d1:
77:bb:67:23:a4:05:36:96:5a:a2:c5:92:de:d8:69:
21:fd:70:a9:84:22:11:c1:02:b8:4a:05:bd:cd:5b:
39:76:c8:95:e6:f0:ff:64:9a:eb:4b:88:7a:c2:83:
2e:85:9b:d5:b5:cb:0c:67:a5:c8:1a:3d:29:82:c7:
24:c0:aa:a3:23:45:69:70:b2:7e:bf:cb:c0:90:04:
03:fb:f0:14:3d:11:01:a2:4e:8f:42:5a:05:55:38:
b9:04:e1:93:35:22:87:eb:bf:8a:3b:fe:bd:e2:67:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:A2:00:12:0B:C3:BE:34:11:DB:52:A9:71:3A:75:79:16:9A:B7
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:10:6e:b4:b0:0b:6d:4a:a2:bf:5a:fe:64:49:fb:86:28:4f:
dd:07:a2:ae:0b:ee:da:ab:af:de:51:72:c6:55:f3:a0:c6:96:
dd:7a:29:61:c5:fe:fa:85:bd:27:62:5f:21:88:29:e6:3e:1a:
b2:3f:21:77:36:d1:08:53:e9:5a:ee:70:2f:87:85:fb:2b:ac:
49:cb:3a:a4:7c:99:55:9c:8a:89:9c:e1:34:18:cd:9b:c1:13:
00:b4:b7:28:11:86:91:07:72:2a:46:50:c6:fe:b0:d8:9c:fc:
76:c9:0d:04:04:a9:6c:3e:88:59:a6:63:1b:33:56:51:c8:03:
8e:08:7c:7e:bd:80:a9:c9:42:91:60:46:07:b1:af:ef:7e:a8:
15:68:0f:f4:8c:e9:4a:79:62:65:dc:7e:ae:05:05:eb:6f:dc:
d6:54:35:b7:d9:9a:9a:25:27:69:be:50:0f:39:2d:14:f4:5c:
fd:2c:bb:1d:69:f0:1a:80:47:7e:98:6b:c1:b2:02:24:f9:c5:
8a:d1:8d:04:93:1c:fa:9f:fc:b0:44:9f:37:4e:6e:25:12:fb:
86:70:6d:33:b7:85:ea:14:eb:d8:97:a3:3a:85:d7:d4:79:e6:
96:0b:c0:72:88:5c:d6:6f:50:59:4f:f2:43:94:c2:1f:db:c8:
f4:af:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:16:12 2025 by rpki-client