Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
File: NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft (raw, json)
Hash identifier: MDKTe7h7PxEh10Pq4coTdyjrQ9S3hAm3luPYRe/TzIQ=
Subject key identifier: 5B:51:F4:B8:23:3C:26:A5:58:1B:CC:0F:E6:D3:94:44:CB:46:5D:94
Authority key identifier: 35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
Certificate issuer: /CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Certificate serial: 0194BC3C623B7121AA7B7C6059207BA94841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl (hash: IJNU/89DQw7z9r7CvWIv9dzhXKZ4qgQXC4WTuMayMbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:3b:71:21:aa:7b:7c:60:59:20:7b:a9:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=5b51f4b8233c26a5581bcc0fe6d39444cb465d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:16:6e:b2:de:44:c4:80:a9:46:75:c2:0f:
0c:72:54:77:45:05:e5:06:aa:53:20:97:38:06:90:
63:9c:d9:bf:44:50:53:14:b5:9c:57:47:f5:04:13:
77:1f:7c:0c:be:c7:05:f6:fa:52:b0:6b:5a:2f:6f:
41:be:01:74:72:74:5e:d1:cb:c1:eb:c1:5d:dc:87:
82:43:c6:3f:35:bb:f0:89:04:fc:c3:86:b3:a0:ae:
fc:a3:0a:31:c4:13:c9:c7:ef:a6:55:d7:51:0e:0d:
c0:6b:c7:b2:c3:b6:47:96:69:16:64:04:56:06:ca:
05:73:b8:1b:59:79:79:05:6b:38:7d:e9:74:f5:2d:
f8:2a:de:2c:05:db:60:18:86:01:4c:8c:20:c3:ba:
11:dc:85:c5:d3:d8:0b:5a:10:54:ce:61:6a:93:b9:
00:cc:e0:99:7c:73:30:cc:0a:ad:37:58:a4:ef:25:
c7:1f:55:b8:33:cf:85:a3:6d:30:c5:fc:42:6d:01:
b1:9e:31:d6:8d:42:a9:d0:54:48:99:3a:26:fb:64:
97:60:c0:cc:40:5c:62:2e:67:f2:70:8b:88:a3:02:
7d:a1:84:a0:41:91:94:e8:dc:22:40:47:82:b2:44:
9c:7c:ad:56:3b:75:e2:62:f8:7f:1d:79:1f:89:93:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:F4:B8:23:3C:26:A5:58:1B:CC:0F:E6:D3:94:44:CB:46:5D:94
X509v3 Authority Key Identifier:
keyid:35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7d:8f:9b:63:3f:d8:72:6b:6e:83:39:74:b1:0b:e7:91:f8:
cd:24:1b:0c:36:19:1a:33:9d:0a:71:cf:31:58:a1:89:2c:d8:
bd:99:41:54:be:3b:cf:82:5e:e8:87:77:6b:f2:71:81:f0:43:
51:73:61:f2:24:a4:85:29:72:9d:79:6c:be:e7:71:2e:9c:da:
8b:ab:62:51:e2:3d:86:3f:9c:bb:0b:aa:80:c9:f7:af:de:28:
42:60:cc:27:3f:88:54:10:31:b2:43:f8:7d:5f:2e:20:00:9e:
c4:3b:68:02:3a:60:04:b6:ea:50:3a:c7:62:2b:db:6e:24:66:
de:8a:37:a9:62:a8:ed:73:41:d7:99:19:ce:97:e8:dd:ef:5c:
63:82:e9:42:b4:37:0f:56:3d:bb:26:d1:30:bf:47:b3:e6:a8:
df:c9:c8:80:ed:2f:f4:d2:91:e6:71:98:00:d1:d9:0c:5f:16:
ab:75:23:54:30:4c:81:60:ad:7e:0b:5f:51:61:23:fb:6f:c9:
84:d5:d1:ab:18:ef:2c:d5:99:dc:69:2a:11:19:09:e9:d6:5e:
37:4c:ef:8e:ad:1f:ef:dd:40:db:20:ed:88:f1:1e:83:46:c3:
19:36:55:eb:81:dc:07:57:b4:15:90:01:2d:5c:9c:50:0a:8a:
1c:df:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:52 2025 by rpki-client