Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: Z1zFXtfOJfQWBWaP1lHyjqa3xw/QFdknnnrPrAWaa4A=
Subject key identifier: B7:B6:64:AC:52:C2:17:EF:F1:BB:4F:88:26:BD:BA:C0:38:5D:8F:6C
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 0194BC72D22C116EA097756435EF0FFDBD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 01F5
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: V9jEXqBJCojtTd6WajQlCe1GfPbT4tLS3FI04Dx3op8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d2:2c:11:6e:a0:97:75:64:35:ef:0f:fd:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=b7b664ac52c217eff1bb4f8826bdbac0385d8f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:28:62:22:5f:e9:6d:ae:e4:27:33:1a:b0:ae:
13:0f:13:7c:5a:86:ee:9d:0f:8e:32:c7:fd:6f:d7:
cd:3c:d4:d8:c4:9a:1b:fb:5c:1e:39:40:81:93:77:
92:43:68:39:b5:5d:73:c1:60:03:04:47:9a:05:67:
8f:3d:0e:bd:80:98:3d:86:f3:d7:40:eb:94:18:e4:
05:2b:04:e0:cd:a0:0b:cf:8c:29:79:c7:fb:3b:ff:
4b:62:ea:5a:6e:50:73:84:01:ac:71:8e:d2:53:cf:
df:9c:31:6b:e5:2f:b9:7f:38:a5:0e:44:9c:1f:85:
cb:5b:84:23:4d:ef:34:84:f5:3f:9d:c2:bc:c0:f3:
bb:bf:88:2d:07:a6:f4:94:4f:14:61:59:24:0c:7b:
cd:ec:7e:51:78:e3:49:b9:77:71:b1:95:fb:06:46:
1c:de:8f:e3:9d:07:36:69:f5:8e:fb:01:17:62:eb:
67:7e:fb:ad:a7:83:71:97:c5:33:17:52:41:b3:0b:
80:58:1f:6b:d7:fb:27:f7:63:ba:e8:0b:72:05:4a:
4a:d5:a7:f5:2b:8e:d3:92:37:2e:eb:62:4a:07:c9:
01:7d:a3:bf:4d:1c:bc:14:1c:b1:4e:1a:bd:4b:b6:
5d:88:26:6b:f6:85:30:2c:45:5e:24:6c:5a:34:6b:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:64:AC:52:C2:17:EF:F1:BB:4F:88:26:BD:BA:C0:38:5D:8F:6C
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b9:c2:47:01:2a:32:98:ff:f5:2c:53:4b:97:7c:7b:96:2e:
74:73:c3:12:0c:8a:d0:a3:95:36:ad:32:13:00:84:0a:61:8d:
cd:e4:60:f6:0a:fe:05:59:24:6a:71:0d:d4:f6:0a:b8:33:e9:
a3:1a:8d:04:2d:cb:40:bd:3a:22:ac:e3:9d:ec:69:39:91:23:
50:ee:b0:dd:8f:f9:56:49:ba:4a:59:d5:61:50:7f:2d:0a:6d:
a2:4c:09:54:aa:7f:fc:45:e9:d0:74:c3:a0:11:92:0d:b3:0b:
0b:47:37:c2:d8:40:e1:ff:f6:f5:48:b9:6d:1d:e6:c4:29:13:
51:4e:2c:22:89:57:af:58:a1:52:9d:fb:6c:bb:74:78:54:6c:
8d:9e:59:91:3a:ea:2b:5f:bf:8f:d0:08:65:37:7c:76:8f:61:
45:89:5c:39:57:c4:de:6c:2a:23:29:81:55:87:a1:d3:69:b1:
5e:8d:c0:47:27:56:0c:47:50:fb:2b:03:8b:cc:52:82:69:f6:
f5:3b:01:e7:0c:88:8c:1f:73:fc:c8:68:f8:df:27:6e:a8:4a:
04:33:7f:13:10:e1:8c:57:74:03:98:67:ee:a8:04:15:27:b9:
2a:d5:ef:1a:2b:6a:df:fe:85:d8:29:be:d0:fd:6a:ee:ac:b3:
52:35:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:43 2025 by rpki-client