Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
File: Nir0h5VMm5am51wljQQ3o4RJupA.mft (raw, json)
Hash identifier: cORtO7CSrqNwAb8yqjcWbQDWVwDoMaQXGwNmxlvj5jc=
Subject key identifier: 6F:F9:3A:55:CD:01:68:F4:72:FC:3C:64:DF:4A:71:CF:FF:38:13:77
Authority key identifier: 36:2A:F4:87:95:4C:9B:96:A6:E7:5C:25:8D:04:37:A3:84:49:BA:90
Certificate issuer: /CN=362af487954c9b96a6e75c258d0437a38449ba90
Certificate serial: 0194BC3C74AFAB8A2ADB403F03FB415C3386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nir0h5VMm5am51wljQQ3o4RJupA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
Manifest number: 12D6
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: Nir0h5VMm5am51wljQQ3o4RJupA.crl (hash: +hJoq9PRyozgQW6el2GjnaCw/UPgJQ8dHvIdXyDBHMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:74:af:ab:8a:2a:db:40:3f:03:fb:41:5c:33:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=362af487954c9b96a6e75c258d0437a38449ba90
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=6ff93a55cd0168f472fc3c64df4a71cfff381377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:4a:3f:56:c0:1f:d4:9d:09:52:04:33:bb:
92:62:b5:20:f9:25:74:e5:89:6e:27:41:68:32:11:
3f:c3:8f:37:2f:cb:85:75:09:53:94:5e:5f:ca:1e:
b0:f2:9e:a5:f1:83:e2:a2:2e:ee:c7:7b:cf:b4:5e:
9d:e2:82:04:f9:e4:59:b5:dd:5d:0e:8a:28:9e:f9:
fc:57:fa:cc:6b:9d:61:ef:e1:86:5b:0c:4d:eb:34:
ec:36:b4:cf:b9:0d:ba:6f:86:e4:04:f1:b8:6a:9d:
36:bd:02:d4:a5:be:e6:d7:0b:d5:fb:7c:bc:83:23:
d6:40:b5:c5:14:7f:d1:57:f3:15:6c:ed:99:bb:80:
ec:e9:d3:a5:d8:36:11:be:8e:d6:54:f1:b3:b3:8c:
80:0f:43:39:32:73:d1:29:90:f7:b6:e3:62:c4:a2:
d6:da:61:ce:6f:34:a3:20:67:b1:c2:b4:0f:fa:61:
98:c7:90:99:20:20:74:be:91:b4:b0:c7:6a:21:35:
c0:b5:74:a6:85:8e:2a:80:64:76:a8:a8:ec:f8:c0:
64:ae:c4:19:9c:6e:2b:87:0e:75:67:04:fd:c8:53:
86:19:76:af:3f:85:fd:1d:cd:59:09:17:20:78:b0:
76:2d:6a:cb:b4:c4:24:ee:b4:fd:38:a1:5d:ad:34:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:3A:55:CD:01:68:F4:72:FC:3C:64:DF:4A:71:CF:FF:38:13:77
X509v3 Authority Key Identifier:
keyid:36:2A:F4:87:95:4C:9B:96:A6:E7:5C:25:8D:04:37:A3:84:49:BA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nir0h5VMm5am51wljQQ3o4RJupA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7c:68:a6:f0:b5:2e:b7:47:84:c1:bb:1d:1a:49:8d:e2:be:
82:bd:bc:86:ad:46:9f:d2:37:3a:53:18:eb:69:fd:99:15:da:
5e:7f:2e:a6:06:66:8a:a7:44:8b:20:a3:19:c5:78:5c:89:4a:
be:31:dc:24:ff:4a:bc:01:b9:63:9e:2f:41:16:c0:f1:0b:f4:
e4:73:ab:14:f7:20:5f:d3:9f:b9:97:c5:3d:9b:1d:ba:3b:be:
f9:20:1a:3a:fd:ee:2e:f9:74:52:cc:aa:ac:4d:85:e1:4b:f7:
f5:74:3b:6e:f5:b3:e8:23:ab:f3:11:2b:05:75:9f:03:f8:bb:
5f:77:db:fa:47:3c:de:36:e2:3e:ba:d5:22:4e:3b:08:31:6b:
dd:db:69:82:b9:f7:08:7d:c8:f3:88:ab:48:42:56:29:2c:50:
11:57:83:4e:1d:3c:1d:16:bf:09:17:f1:91:67:73:95:70:ab:
d7:80:d5:be:e6:c0:6d:1b:0d:a4:1d:c7:b2:9e:57:40:ec:67:
70:e5:6b:67:b7:6a:3f:2c:e7:db:cc:26:88:3e:ac:06:04:0b:
3e:50:eb:64:3c:7e:1e:01:4f:e0:9d:7c:94:e1:59:1c:97:01:
b9:ad:0a:33:5a:e9:d8:39:6a:fd:c5:5b:3e:dc:ce:eb:f4:b2:
47:74:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:39 2025 by rpki-client