Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json)
Hash identifier: UBDQUDdgm9Vc0vrwshLD3JVHCXHQ+7MLs9PC2ypWibA=
Subject key identifier: 68:10:93:1D:0D:A3:BA:D0:0A:BF:2B:E7:C5:9B:52:99:AF:05:82:80
Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f
Certificate serial: 0194BC729C4041776457C886A7C707F1B123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: PHXh+SVABgfIe+ugruDkge2m4Bi/ZbvSb0h14513l2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9c:40:41:77:64:57:c8:86:a7:c7:07:f1:b1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=6810931d0da3bad00abf2be7c59b5299af058280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:d2:4f:ab:43:8c:e2:ed:a8:d9:d9:f7:68:
8f:df:c2:ef:d8:d9:32:c8:a0:ef:97:7c:91:d1:ae:
9d:23:68:e6:e0:db:6e:a3:08:21:11:1d:c8:c4:3c:
3a:96:2e:31:11:8d:4c:0c:d0:7e:49:64:45:53:1d:
82:8e:51:70:fa:77:84:17:7e:64:5c:13:8c:5b:d0:
51:d2:49:99:7c:34:ad:2a:8c:65:2a:23:0f:27:01:
eb:20:bb:70:21:d9:a8:ba:17:63:ae:a8:19:f3:15:
ef:5d:75:ce:6f:ab:33:af:ff:b5:d7:78:34:d2:54:
db:fa:14:41:03:53:b0:d7:fa:09:55:64:85:a5:5b:
ab:c9:61:4c:71:60:81:61:a5:8b:26:b0:a2:54:36:
c2:a9:90:81:a2:74:6d:fe:95:13:e1:50:57:d8:8a:
6e:16:e5:5d:71:0b:ef:92:62:4d:2f:3b:8d:fe:70:
e7:67:93:fe:71:f3:4e:1e:34:ec:47:18:c9:72:11:
bb:3a:ae:fc:19:2c:45:2d:67:82:81:e6:43:8e:8a:
0d:bf:d2:f6:a9:c3:e7:71:40:1e:3e:a0:0a:96:ee:
62:a9:0a:34:10:5b:7f:e4:aa:c7:c3:7f:2a:8e:1d:
e7:64:85:03:70:0b:e5:4a:08:70:57:4a:9e:11:87:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:93:1D:0D:A3:BA:D0:0A:BF:2B:E7:C5:9B:52:99:AF:05:82:80
X509v3 Authority Key Identifier:
keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:40:9b:8a:e8:a8:c5:a3:0e:3b:95:ab:bd:18:95:0a:56:
b1:3f:48:ba:2c:56:08:99:10:aa:3c:ec:c9:f5:0b:83:e6:da:
c4:a4:b9:01:ce:fc:92:4d:d9:3f:5a:b4:ec:ad:4f:5c:de:4b:
04:08:f6:d6:a1:a8:4b:b7:80:bb:65:ad:de:3a:08:a2:a3:12:
cb:87:f7:d9:43:1d:56:94:e5:67:ba:c5:f2:23:d4:21:69:11:
25:5f:3f:4e:49:64:57:3d:de:1b:9d:9a:1a:b8:3a:50:2c:32:
e3:08:f0:9a:a4:e3:ac:d5:62:52:79:58:08:5f:f9:79:92:63:
e3:ce:b2:22:12:f3:84:bc:e7:8f:86:0c:76:6e:8e:e8:f8:25:
ff:24:7d:20:7c:c3:5a:87:aa:54:10:3b:ce:ac:9d:c0:02:f4:
05:04:7e:f3:de:b4:1d:38:e8:93:8d:3d:78:51:4b:71:87:ac:
c4:22:09:66:f2:c9:33:93:e6:5b:81:9b:03:50:50:d7:3e:91:
7e:32:fd:0d:c4:74:25:63:50:c5:d3:ed:ca:7a:2e:e2:5e:a5:
82:d0:56:ea:48:ea:f2:5e:47:11:67:2d:85:6b:1e:8e:4a:a2:
72:26:4c:42:68:48:98:69:bb:4d:c3:47:51:8d:98:ab:0b:4f:
10:4c:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:25 2025 by rpki-client