Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: VhEXWMzv2fOnKO7JGXwsDPCvfJ9da+jp9n2TErPwt/U=
Subject key identifier: B3:5E:EF:C6:84:BB:1D:16:C6:B9:83:9E:FB:E8:B4:6E:A9:D1:1A:1E
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 0194BC04EBE9EF08B919FEF0C43F1B602B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 01A3
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: /S9V+cMdLPhRyFrq+M0sMw2qUK7fpoXhxY3UKvhU8zg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:eb:e9:ef:08:b9:19:fe:f0:c4:3f:1b:60:2b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=b35eefc684bb1d16c6b9839efbe8b46ea9d11a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:64:e6:98:77:5e:30:59:c8:2a:37:2f:78:
b8:7d:1a:30:12:30:c6:d3:f1:86:f7:ba:2a:ef:2a:
9e:14:ad:32:41:80:34:ee:7d:f0:fe:6f:b0:ce:6a:
82:4e:b4:62:56:3c:ee:45:15:c7:60:62:97:8d:af:
e1:dc:8d:40:a3:79:60:81:20:64:c3:f8:52:0e:3d:
fa:50:03:63:dd:82:6f:5b:12:10:f1:fc:73:b4:e4:
11:63:33:9e:f6:56:16:71:69:22:61:35:2d:f1:e5:
c8:08:83:46:a4:3a:60:39:80:ee:20:b9:a3:8c:f8:
96:b2:7f:64:bb:5b:ba:ca:d5:03:b8:3f:15:b0:6c:
a7:f8:e4:0b:77:8e:e4:54:4f:19:14:d5:82:95:ad:
8e:b3:03:73:c9:e2:06:48:0e:6f:b3:07:8c:31:f5:
a3:a5:ec:74:0b:c8:a5:b1:6a:4f:c9:63:51:dc:b3:
e6:c7:44:62:d2:0f:5a:08:5e:17:d4:2a:71:68:17:
09:a3:a5:f1:24:16:a2:27:68:12:e0:0b:e6:5e:38:
f8:f1:7a:26:0b:df:9c:08:54:c9:0c:b2:f4:60:3a:
81:3b:12:9a:81:85:b1:7a:27:c2:b7:6a:1a:82:f9:
0d:1d:ad:59:97:25:9a:33:c2:a7:52:cb:e0:f0:fd:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5E:EF:C6:84:BB:1D:16:C6:B9:83:9E:FB:E8:B4:6E:A9:D1:1A:1E
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:36:ae:35:cc:3e:a0:38:36:62:d3:95:09:4f:64:e0:5b:
e3:e1:7e:d2:20:0e:21:55:bb:93:8d:96:d7:b1:83:27:fb:30:
50:b7:17:44:7a:90:a9:e7:7c:8c:fe:2b:b5:3d:07:16:27:01:
39:ac:db:09:23:a1:b3:85:82:11:2b:a5:d0:5b:bb:7c:54:1c:
9a:03:6c:b1:50:3d:d5:d2:2d:d7:bc:b1:89:f0:77:02:d0:59:
52:73:92:dc:f1:4e:b6:73:50:bc:7f:79:d4:ed:69:bb:28:9c:
87:95:af:78:ed:dd:cd:a7:1b:b4:57:b0:b1:21:de:4f:87:5f:
c2:84:8e:8d:f3:98:82:6d:39:13:72:7a:f1:7d:3c:1e:14:31:
41:78:f9:79:48:ab:59:94:4e:c4:cd:9e:43:c9:c8:5f:6c:84:
8c:43:38:c9:aa:ec:ac:b2:38:9a:0b:2f:69:64:87:0d:aa:ff:
f8:4b:4d:f2:28:ab:9a:00:8b:a8:79:f7:58:b8:b8:7e:a2:49:
4a:8a:68:60:8f:8f:a7:db:5e:d8:bb:96:7f:96:82:10:55:e8:
06:ba:77:39:c2:cf:5b:07:7b:70:0d:34:5c:6e:07:5f:b8:07:
6c:c1:73:63:4d:db:9b:b8:82:e9:af:d3:0f:e1:74:c7:e4:55:
20:74:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:24 2025 by rpki-client