Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
File: NuBUKH2-dgYtF3DYPGoWAADbDX0.mft (raw, json)
Hash identifier: ExsDipEr4sJxBo9LGUmi3wtFLJ8o+MWCnjBaY/D2Otg=
Subject key identifier: 5D:CD:81:C6:5C:51:E1:4A:EA:C8:6E:06:45:5A:60:AE:6E:27:79:92
Authority key identifier: 36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D
Certificate issuer: /CN=36e054287dbe76062d1770d83c6a160000db0d7d
Certificate serial: 0194BBCEAEBD3D34CB9BF9415533E312CBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
Manifest number: 03D6
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: NuBUKH2-dgYtF3DYPGoWAADbDX0.crl (hash: h1i+kLBKlFlbrDo1Uq+M3v1p2tOIOX2g7op4of6hRJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:bd:3d:34:cb:9b:f9:41:55:33:e3:12:cb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e054287dbe76062d1770d83c6a160000db0d7d
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=5dcd81c65c51e14aeac86e06455a60ae6e277992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:0a:d9:9c:b9:2a:3c:db:a4:7e:86:33:11:
46:15:49:64:06:c8:2d:22:4c:64:e3:6c:32:42:b5:
5e:41:68:4d:69:0f:0a:c5:99:9b:82:34:4d:c1:22:
6d:59:d6:7d:df:b7:cf:e3:f0:14:23:13:62:25:0c:
65:0f:ac:1d:75:c0:d4:66:66:16:86:89:91:14:18:
98:2f:85:a2:8e:19:cc:28:f4:80:f9:59:9d:43:b5:
91:93:fc:a9:0d:32:34:20:71:c8:ce:5d:da:a9:84:
fc:84:b5:d7:6b:41:e1:a3:64:77:bb:0c:9c:70:8e:
cd:c7:12:cd:22:97:72:f2:c5:81:5b:0e:79:0e:3e:
34:19:61:fb:6f:fa:ee:3a:f4:2b:e6:bb:01:4c:7d:
37:f3:4f:61:71:09:bc:ac:e8:d5:9d:fb:34:ec:31:
6f:33:11:df:68:1b:f9:cf:64:54:21:9a:43:cf:66:
8d:8a:31:af:fc:cf:b5:5b:0c:03:84:19:3f:1b:44:
c7:55:9f:dc:57:10:d2:1e:2c:a0:1d:84:cc:bb:fa:
77:5c:f7:a1:26:27:0b:3d:a3:41:26:02:29:62:0f:
ee:bb:3f:7c:28:53:37:3f:1a:92:84:ba:d7:04:9e:
01:a6:73:6f:64:d9:a0:74:a1:ca:34:ee:35:e4:a4:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CD:81:C6:5C:51:E1:4A:EA:C8:6E:06:45:5A:60:AE:6E:27:79:92
X509v3 Authority Key Identifier:
keyid:36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3c:31:38:89:61:b3:61:73:b2:27:dd:af:60:9e:73:c8:28:
86:ab:54:0d:37:59:f2:c5:a3:f6:c4:1b:e7:fe:3e:6b:b0:25:
ac:cc:c4:d2:f8:80:b2:1f:8e:5a:7a:f1:45:85:ae:df:2d:ca:
0d:34:e8:b2:7b:bf:f1:51:97:bf:fe:e4:f0:f9:37:b7:a5:24:
4b:36:c8:51:db:8a:d9:be:14:63:cd:6d:bc:be:81:3a:55:90:
e4:a1:6c:f8:dd:ad:af:8c:22:5d:65:7d:fe:04:64:40:f2:12:
6c:b4:69:c7:68:a9:e3:c2:99:be:5d:24:9d:8b:35:6b:c7:67:
50:57:96:f8:5e:0c:1d:b3:77:07:6e:9f:18:44:3f:2d:93:91:
61:86:c0:19:2c:07:6b:c5:ca:22:f8:36:fd:79:d8:74:b1:c6:
80:3e:62:e6:7d:6e:f0:d4:bf:56:3b:9e:0e:2f:5d:d0:35:1b:
04:c3:64:15:a8:59:b6:6e:8b:58:86:08:1e:22:ca:4b:e5:ac:
c3:eb:b3:dd:8f:2a:bf:82:87:53:78:86:fb:74:61:eb:e4:dd:
45:c7:16:61:d0:e2:81:57:e4:82:29:e5:0c:e9:1a:e6:ff:c7:
ab:32:6c:77:63:13:21:93:de:01:a0:ac:1e:26:18:57:d1:fa:
17:ab:18:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:02 2025 by rpki-client