Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: ZR/kyJT5tjM2k+Wvdu+c0duDjC3vTJyp6U2LkfJno1g=
Subject key identifier: D3:9C:A4:AA:31:E0:B8:F0:F7:5C:CC:10:8B:2C:E1:A0:DE:47:24:CA
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 0194BC72C886AD02E40B5999A1BC90B72BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: Z4+CwTrXsai+EbvjcHR2cekyFsUIWORXg6gO2EnSpaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:86:ad:02:e4:0b:59:99:a1:bc:90:b7:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=d39ca4aa31e0b8f0f75ccc108b2ce1a0de4724ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:f4:a2:cd:c7:10:15:38:1b:f8:1b:56:e6:
8e:21:82:50:c3:42:74:59:f5:9d:69:98:e1:57:58:
93:97:02:ec:b6:df:8f:bc:d0:87:77:96:fd:ae:84:
a6:d2:8e:97:d3:e2:43:39:b5:ee:52:bd:35:17:8b:
b1:19:36:00:9a:75:e8:12:41:20:f2:29:bf:06:62:
57:a0:fe:97:c6:a0:7b:d9:a0:f2:2d:a9:e9:3d:37:
3d:81:5d:9a:cc:f8:8d:e8:d5:dc:2a:bc:58:9d:10:
d7:d2:ba:63:5e:8a:6c:54:1b:87:b1:20:65:e3:a8:
f4:3e:10:cb:86:cd:59:4f:4b:6a:03:d2:73:b9:28:
a0:de:ad:62:23:af:e9:94:d9:f7:0a:c5:c1:f4:eb:
b0:32:ea:ed:ff:fb:3f:fc:8a:b2:fc:fe:46:c9:f6:
97:18:15:26:da:83:03:39:36:52:04:79:14:dc:dc:
9e:63:4c:51:34:80:15:41:35:ac:1b:c0:bf:de:79:
37:b2:40:05:c8:14:a4:c0:c0:0a:f7:b2:ba:fb:48:
1d:da:d6:e3:65:d2:22:01:ac:7b:bd:55:68:8c:7e:
91:12:e1:a9:7a:ce:c0:8c:7b:34:31:67:a7:4b:a5:
46:99:f5:3d:ae:ef:ea:d9:6b:fe:12:77:4e:5d:56:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9C:A4:AA:31:E0:B8:F0:F7:5C:CC:10:8B:2C:E1:A0:DE:47:24:CA
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:ab:b3:de:53:28:b6:dc:e5:1f:0b:ea:e7:15:b1:1d:da:
e9:cf:06:e1:5d:6c:5a:8c:7f:a3:1d:7b:c5:e4:fe:bb:20:c9:
77:fb:2c:d5:51:97:13:87:bc:33:b1:77:b0:1a:05:b7:27:2b:
93:73:cd:b7:94:77:b0:e1:6d:89:47:b6:8d:82:5d:68:a6:0b:
0b:c4:76:ff:f3:c4:b5:d9:57:d9:59:68:02:77:1a:eb:c0:c6:
fc:f7:6b:6a:83:9d:31:62:a8:e9:2a:ef:ea:96:ae:58:c1:54:
ef:4d:df:68:96:50:93:fa:90:39:1c:16:81:51:fe:fe:3c:d4:
41:6e:34:a8:6e:bb:5e:52:59:04:61:3d:bd:c2:b1:5d:0f:79:
b6:b2:2f:bf:8d:46:bc:c9:81:26:44:63:6b:7b:a7:d4:76:3d:
eb:8d:e0:39:22:11:44:69:2e:4d:01:bb:5f:e5:db:34:4b:c7:
b8:5a:70:b8:4c:f6:9c:4e:63:03:8d:06:22:af:b4:82:9c:d6:
ea:7b:b8:32:95:b9:de:f5:f1:55:f6:3e:06:86:bd:f0:13:e2:
3a:29:29:1e:a9:9a:8d:6f:13:49:81:0d:67:2d:e0:5e:fd:9b:
1f:de:80:66:47:4a:d2:59:f8:61:bf:d3:28:29:10:d1:8f:51:
0d:53:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:12 2025 by rpki-client