Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File: N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier: 1kIav82VO9pb9Pt+Fea7Jaxa5KKZ5xWMyqHly6zV7sU=
Subject key identifier: 14:F0:DC:83:F4:1E:F2:4F:4B:81:B6:96:21:E2:92:29:5A:4C:EB:1B
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer: /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial: 0194BC72C3D81FBDAADC675B1ED34B8880D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number: 0241
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: /akmsXoPNtPBM1T4hT3WzS/EM8Z7l7m1gcy5+BdPzKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c3:d8:1f:bd:aa:dc:67:5b:1e:d3:4b:88:80:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=14f0dc83f41ef24f4b81b69621e292295a4ceb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:c2:16:58:fa:0f:bb:88:26:46:84:f9:ff:
c9:e5:9c:99:1d:d5:aa:e4:7d:9a:aa:16:db:bf:cd:
29:b8:ae:96:56:ab:da:2c:c8:e4:9d:86:ae:43:ac:
de:b3:55:1b:55:bf:b1:e0:ff:39:fa:80:f5:41:3a:
29:8f:16:97:2e:42:3e:89:72:4d:aa:eb:72:9a:fe:
64:f9:7d:5d:f9:7a:09:c2:da:40:1a:0b:f3:74:25:
37:af:fa:b0:13:19:ff:b9:a0:42:42:8a:20:92:7f:
44:03:29:25:22:46:05:c9:d7:26:1b:ad:02:ab:7a:
c9:d3:4d:58:b4:8b:df:f3:3c:ce:b4:67:24:fb:6f:
9f:8b:d4:e9:6e:4d:53:35:b9:1e:88:bb:aa:1f:f2:
ac:c3:d7:70:17:e6:e5:02:05:fc:b1:1e:3c:94:d3:
4b:f0:95:1f:34:e5:da:e5:ed:cb:62:1c:b4:be:a4:
33:7a:48:c8:27:70:02:59:75:d5:2e:7c:78:b8:db:
d7:0f:eb:6d:9a:fc:45:bb:37:a5:9a:fc:fc:80:8f:
17:3e:32:8a:d1:cb:06:02:35:dc:f1:e7:14:85:37:
19:ec:b8:fc:42:ce:8a:a3:3a:47:b1:c2:84:29:61:
c7:10:af:d8:2d:88:0f:e8:5d:ee:f8:e4:df:42:67:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F0:DC:83:F4:1E:F2:4F:4B:81:B6:96:21:E2:92:29:5A:4C:EB:1B
X509v3 Authority Key Identifier:
keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:bd:2e:c7:58:b5:8d:65:fd:0b:2f:48:32:f9:c1:81:9b:
7e:bd:a7:19:82:89:0b:55:17:5a:d5:bd:3e:c6:6e:31:d0:14:
7b:df:b3:52:ba:dd:b7:ec:16:36:b9:49:cc:f1:d7:3d:c4:40:
62:83:6f:67:1c:ce:6b:08:2f:0f:72:cd:99:db:7b:e6:20:81:
26:3b:89:06:10:7e:9e:36:d4:94:32:59:e1:80:cc:e8:b2:64:
20:c2:5a:c3:b3:a4:a1:82:30:21:76:9a:bd:78:70:8c:7e:dd:
fa:ec:e5:97:06:0c:f2:1d:f7:d7:78:94:77:4a:d5:e9:25:a7:
5c:fc:d7:2e:d7:38:b5:17:3f:ca:b0:cb:9a:8d:0c:ff:aa:eb:
2e:49:56:03:23:44:fc:dd:5e:f1:44:24:f7:f5:f3:e3:86:12:
40:8e:92:1d:59:a6:98:ce:8e:30:a2:7e:5c:ae:74:76:4c:fa:
b4:81:c1:b8:ee:45:7e:bd:8b:97:7d:f6:e7:ee:48:be:42:0d:
f9:b8:2c:5b:7b:93:82:5b:f8:21:4b:d4:29:5a:d1:20:94:ab:
ea:a8:40:6c:1c:b3:60:8e:60:79:ef:b3:37:d7:ee:25:53:f5:
5b:fb:9b:5a:00:a9:a8:54:9b:6b:50:d4:f1:e3:c4:10:d8:f0:
bc:26:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:11 2025 by rpki-client