Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: U7iIJWOLb89HuC7PW+k+1/DKhj9tc5Jh6775L+74HEE=
Subject key identifier: 2A:1A:ED:EA:2C:36:4B:56:98:6C:4F:43:A2:59:FD:2F:0A:C9:73:09
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 0194BBCE5DB65D725E94A2373BF2325EF55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: h8uzNq0wZdCkhvQi1shfBF2HWVZmlYKdJmIjzRcOw5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5d:b6:5d:72:5e:94:a2:37:3b:f2:32:5e:f5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=2a1aedea2c364b56986c4f43a259fd2f0ac97309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:6c:e1:b8:f4:eb:fc:fe:11:5c:4b:3d:05:
64:ce:6d:72:63:5b:49:a7:40:4d:59:97:67:06:46:
93:51:a3:76:e0:ca:99:05:cb:63:61:b2:91:a2:61:
64:a4:c2:90:9c:a0:70:7a:6c:a8:78:16:bd:05:ef:
42:18:0a:bc:d9:5a:2d:1e:88:55:ac:a9:a1:c1:4d:
c4:6d:a3:51:b6:e5:11:6a:f1:e4:50:78:2a:dd:bf:
a1:b9:a0:df:1b:ae:0b:f5:ed:6b:8d:ba:3d:b2:3e:
74:c9:80:a4:0f:d6:16:bc:db:34:d9:82:5b:ab:49:
70:49:7d:72:ea:83:29:81:fe:b1:7b:5c:ae:f8:ef:
bf:41:4f:71:c0:6b:ac:77:5d:3e:90:91:38:7b:b3:
b3:a2:c7:d0:ee:0f:57:18:d1:c9:8c:45:9f:2e:bb:
89:1c:fd:68:f6:70:87:7e:be:e8:97:58:1c:48:7b:
a0:00:8f:10:d7:ff:3b:b6:86:7e:d1:d7:e4:a9:65:
8c:a0:1c:40:a7:28:05:36:b8:52:84:68:8b:73:04:
e6:cd:17:ae:0c:77:05:5f:af:25:ac:0c:35:90:a3:
64:29:51:61:04:a5:94:a6:77:29:83:f8:b9:63:07:
c2:e9:c7:95:1f:d3:16:82:ed:aa:08:4f:68:ef:4c:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:ED:EA:2C:36:4B:56:98:6C:4F:43:A2:59:FD:2F:0A:C9:73:09
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:b9:5f:13:aa:ce:9a:d8:96:c6:a0:66:dd:7a:ef:c1:d1:
3c:f1:0e:50:61:7d:fb:63:4b:89:61:45:b1:86:72:46:11:82:
11:32:f3:9c:97:3a:dc:4c:cf:67:f6:75:f1:c7:9f:d3:55:a0:
a0:2d:51:8f:67:93:39:f0:36:90:0c:07:dc:28:e9:d0:fd:bc:
bc:33:14:7e:2f:d6:99:8c:c0:29:47:c0:f4:fe:6b:4f:0d:49:
e3:d1:3e:c8:13:4a:ac:dc:9e:38:a9:8d:66:1b:18:36:91:22:
29:03:02:00:8c:a3:74:e1:70:95:a0:f8:7a:df:bd:2e:3c:50:
8c:7d:64:d2:12:d1:0a:0d:73:10:1f:26:0e:1c:eb:6a:b8:d2:
40:02:2a:b3:2c:7b:2a:3b:a0:5e:03:0a:59:7a:f6:74:6f:7f:
62:c1:0a:98:ee:db:41:e1:ae:17:a7:c0:61:9c:9f:df:03:33:
c2:a8:52:69:bb:bc:f1:2f:b2:48:6e:d1:51:e2:c3:9d:fb:aa:
06:76:20:0b:e1:8a:f2:8d:8e:c1:2b:29:03:30:8c:f4:b3:3e:
cb:3a:58:42:58:61:b8:fb:9e:06:fa:71:99:67:08:6c:9a:02:
7a:a7:2d:f7:1e:01:1d:41:3a:5e:ca:a9:b1:4f:f1:a5:c4:88:
7b:2f:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:46 2025 by rpki-client