Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: 8FUWo4PEjsWnU62Tzw2OA/DG6wcMN8Zw7q6u3/DRcV4=
Subject key identifier: 4D:9F:B2:23:20:92:5F:45:15:31:B5:44:5D:5C:57:69:3C:02:71:9E
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 0194BD1752C4F3AF6F020757B0EDC4A1CE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 01DC
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: +DdZp0GwOifR2vsWYqZL+mLbRmx4jPnR4D/34p6/4hI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:c4:f3:af:6f:02:07:57:b0:ed:c4:a1:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=4d9fb22320925f451531b5445d5c57693c02719e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:a4:92:8d:f0:3b:d7:a0:01:85:f5:a8:79:
37:12:c3:90:57:5f:85:26:02:9c:68:8b:4c:a4:cc:
fa:63:2a:04:61:e5:e2:9f:27:71:5b:39:82:d1:72:
89:9a:74:5a:fa:a4:9f:ea:7d:e8:51:4f:32:1f:68:
68:1c:ca:a8:84:01:2a:d1:05:25:c7:47:33:46:0d:
b5:88:79:0a:c6:e0:4a:98:7a:40:7c:3d:ed:25:f3:
7a:70:22:57:95:b1:f0:ef:fb:40:0f:12:bf:fc:fd:
4e:db:e8:d2:3e:01:36:82:9b:74:e9:ad:f4:a3:7c:
b1:f3:0c:27:5e:7c:83:95:3d:ed:1a:84:d4:cd:61:
0c:e7:73:1a:9a:59:09:1a:e0:fe:3b:c4:54:57:fb:
c3:3b:01:e8:27:44:29:bd:55:3b:85:28:54:08:f4:
0a:06:43:20:c8:0e:89:54:93:55:ee:31:67:aa:33:
2f:4e:dd:f1:99:be:1a:1d:9a:33:58:b2:a8:b7:b3:
62:6c:f9:30:4d:8d:97:da:be:a0:18:f0:28:a7:eb:
79:c6:e4:62:75:c3:74:e8:aa:f8:63:7e:45:e3:13:
df:d5:40:ff:e5:58:29:f5:3f:cb:ed:47:bd:e2:e1:
f2:25:76:b3:82:b0:af:17:40:02:6b:cd:4a:cc:bf:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:B2:23:20:92:5F:45:15:31:B5:44:5D:5C:57:69:3C:02:71:9E
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:75:b3:1c:85:3e:79:57:4f:b7:bb:3f:cc:fd:ad:2b:1a:
13:33:30:68:50:5e:91:60:eb:f6:d6:ae:13:a7:c3:39:01:6a:
0c:a2:ea:c6:8e:09:6a:c7:d9:ab:89:4b:53:04:2b:14:49:6b:
e8:ee:ab:d8:e3:6c:10:e1:46:77:4e:6c:cc:2f:65:5f:dd:9d:
9b:56:fe:96:fa:79:34:5d:7c:1a:6a:1b:c0:bf:26:7c:ca:24:
39:c4:1c:16:4f:8f:9c:8f:2c:e7:1c:68:3c:d2:f4:ff:92:b3:
a5:3e:5f:65:0e:e0:25:7c:10:8f:78:47:0f:ea:94:02:df:c6:
d9:03:58:72:40:5f:48:be:8a:03:07:73:cb:8e:3e:c5:8a:a6:
b5:21:48:1b:93:3b:93:ed:a5:5c:d2:fb:ff:13:76:0d:ec:b9:
9b:31:73:a2:af:8b:5c:bb:b9:82:10:3f:2e:e7:f7:a4:80:46:
55:a7:84:b3:06:bf:a1:ac:fb:63:14:d2:55:d6:17:63:87:29:
7a:a4:1d:a1:3c:f2:73:fb:75:d1:52:2e:2d:64:f2:12:4b:2f:
99:ad:58:87:73:6b:d1:a2:f4:88:32:02:b5:5a:f1:fb:96:11:
39:88:05:1a:d0:87:dc:e3:22:72:66:68:ca:62:85:64:0b:d1:
7e:fb:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:09 2025 by rpki-client