Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
File: NkITiw7v_lajLMuqWNb_5u3D8p4.mft (raw, json)
Hash identifier: ZK6Xx5dwxXUCu0lnTOEYqn1mBnDtA/gj/rfWhbsE198=
Subject key identifier: B2:2B:5A:C1:66:2E:68:32:43:CE:5F:E0:57:5B:8D:D1:63:EF:6B:87
Authority key identifier: 36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
Certificate issuer: /CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Certificate serial: 0194BBCE9252C8DC990703EC50ABE3A4CEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
Manifest number: 032E
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: NkITiw7v_lajLMuqWNb_5u3D8p4.crl (hash: 45t7n4hJV/VJ8JOGT4ENmL3Ohaq0KKzE2eiMFmwxUaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:92:52:c8:dc:99:07:03:ec:50:ab:e3:a4:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=b22b5ac1662e683243ce5fe0575b8dd163ef6b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:d9:20:4b:f6:1f:0b:8e:c3:9f:95:7d:7d:
b3:24:a2:84:4f:2b:96:fa:de:5a:ff:31:31:09:15:
e4:49:6c:1e:e2:9b:f4:b5:0f:cc:91:f6:c2:a6:76:
d7:ab:73:a1:55:fd:e2:0d:ee:3f:ff:5d:24:71:33:
03:b6:6f:b0:dd:9b:c1:c1:80:49:b0:2e:39:52:83:
c6:d1:cc:78:b2:31:9e:5d:74:72:b3:0b:63:0a:fb:
09:10:cc:8e:42:07:a9:3e:56:e4:f4:e8:50:b0:1d:
a0:59:8a:0d:b3:49:d2:bc:80:b8:7e:d1:93:a1:98:
9f:49:5e:03:c5:6e:48:63:4d:03:30:d4:81:16:f0:
87:3f:0c:9e:c6:54:05:5a:f1:ad:d6:6d:2e:f4:77:
b3:33:e9:44:fb:f5:f3:53:cf:68:c3:c1:25:b5:37:
0f:b5:0f:b5:c0:d8:2f:bc:e1:0f:d9:ab:ea:3f:83:
de:62:1b:0b:7b:86:a3:e9:b6:0d:ed:85:23:11:0a:
0d:b4:05:c4:22:94:fe:00:8f:a5:87:c7:78:f2:06:
01:db:d0:13:5e:9a:09:61:49:35:bd:40:fa:6c:b6:
10:41:a0:8f:f6:36:d1:9f:7d:4f:02:b9:9e:6a:f5:
82:98:ba:76:e8:44:d2:1b:b6:b7:1b:76:d6:bf:12:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2B:5A:C1:66:2E:68:32:43:CE:5F:E0:57:5B:8D:D1:63:EF:6B:87
X509v3 Authority Key Identifier:
keyid:36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8a:bc:ed:48:2a:a1:68:f8:fb:72:c4:0b:8c:51:7b:0e:39:
c3:b0:23:78:12:e2:ae:c3:54:31:da:81:f4:31:93:db:78:46:
be:96:ff:c0:dd:08:c5:90:19:6e:74:38:e8:3b:89:d2:cd:2f:
66:3f:98:0b:68:eb:be:3b:5e:45:4c:4a:55:b3:3c:f1:8b:33:
9f:e4:1e:7c:36:c2:61:38:ee:49:88:86:e2:fc:cb:a1:01:67:
71:f1:1c:fe:44:ff:1b:ab:36:92:cd:b8:22:89:36:d5:4a:14:
24:34:72:75:26:4f:9c:a9:88:70:24:3d:ab:d0:a0:ee:11:62:
75:68:a7:c1:e0:69:f6:f7:fc:3b:57:ea:8c:3b:d2:58:f4:7a:
11:7f:52:e9:f8:5c:57:4f:62:ec:64:57:ea:f9:85:34:a6:b1:
86:99:61:60:39:80:b9:6a:54:58:ac:c2:05:b9:50:9c:bb:92:
69:00:16:3d:5d:67:71:7b:a5:93:31:8f:de:b1:c0:a1:d4:bf:
4e:e7:a3:f5:8c:e7:95:cb:eb:dc:40:b5:2c:ef:fb:48:c8:a5:
61:fb:59:f4:cc:d8:b4:b6:f4:07:6c:c1:ad:43:93:9b:7f:8b:
a9:cf:c8:f9:46:cf:c5:ba:aa:f2:c3:b5:dc:09:07:6d:92:a7:
bb:92:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:06 2025 by rpki-client