Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: rNh9IbXhXRnYd7dJYYfEsuK70sFzJB8DyWd5gwtKXgs=
Subject key identifier: F7:3A:FB:BC:E6:E2:47:0F:53:47:7F:8C:90:E8:C1:B5:54:BB:00:C4
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 0194BC3C449DCA18A539581F1E06150FEA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: W6jY4l6r8FEW5Hx932tz693wyTcz2VpulK9B5aeSFBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:44:9d:ca:18:a5:39:58:1f:1e:06:15:0f:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=f73afbbce6e2470f53477f8c90e8c1b554bb00c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:1c:a5:57:b1:cd:51:34:2f:e9:47:d2:35:
a7:25:c1:a9:49:e4:12:2b:3f:48:12:50:f1:5c:69:
fc:dd:e6:bc:46:fc:2e:b0:49:9a:b7:af:70:65:31:
19:ce:eb:35:85:b0:6c:a5:f6:b2:b2:1c:67:22:0c:
19:b0:d9:55:2a:39:99:16:52:08:8e:8c:48:e3:e3:
44:b5:99:45:93:ac:26:58:de:07:0e:6d:ef:ce:ad:
ef:a5:f0:04:61:e2:2a:a9:9e:d9:1d:1b:4a:12:3e:
05:b5:63:27:b9:bc:1c:13:68:b9:85:3d:ef:8d:73:
be:84:02:e0:91:b3:db:b2:3c:b8:30:a0:54:7e:d1:
39:88:ed:34:53:0f:6b:e0:69:c0:7a:12:36:c9:a4:
21:9d:88:72:c9:5f:8a:c3:66:7d:8e:75:87:e8:02:
af:6c:6f:77:59:1b:ce:6b:25:b5:09:2a:b8:27:95:
58:a4:69:70:01:5d:c5:4f:7c:92:45:78:11:de:b4:
ee:e0:93:19:cf:d9:a8:5c:0a:e8:3b:7c:06:16:ba:
eb:87:89:9c:47:5b:b8:f9:8d:d9:4d:4c:50:4d:40:
0c:1f:9d:0b:6a:b4:fb:f5:89:ed:69:d9:92:fd:a4:
9e:95:e3:05:17:02:cd:c7:6e:f7:e1:df:c9:62:a6:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:FB:BC:E6:E2:47:0F:53:47:7F:8C:90:E8:C1:B5:54:BB:00:C4
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4d:a5:03:95:e5:fa:42:8d:5d:a6:3d:a7:cc:46:ac:9b:04:
f0:df:8b:0d:a0:7c:a4:5d:83:9d:bc:5f:b4:28:0e:8e:7e:e4:
d0:09:f3:14:5c:c4:e4:0b:33:5c:3f:1f:97:3a:30:77:af:f2:
c4:1d:3c:c8:9e:8c:d8:77:38:a1:52:97:0a:2a:ac:82:7b:d0:
83:3b:76:1d:71:69:fd:81:f5:dd:4c:23:5e:62:9a:f5:e8:53:
98:52:4e:c4:5c:78:b8:69:6b:75:41:0e:b8:b8:07:ad:e9:03:
46:d7:01:c3:75:ad:c5:35:de:0c:53:a2:58:aa:a6:00:11:e4:
1e:90:3c:65:ef:9c:2c:65:4b:32:4f:de:14:e9:98:ca:ce:fd:
25:22:69:10:d0:6c:58:42:c9:21:58:f4:51:25:7b:a9:f3:1e:
3c:d9:9d:82:79:44:4b:d6:91:0e:f2:cb:5e:85:fd:98:3a:5a:
9c:d7:ad:e9:72:76:cc:77:7d:bd:94:37:01:8d:30:61:93:25:
a6:da:a4:7f:c1:b5:0f:0f:98:3f:9d:8f:ba:c1:91:73:cb:b0:
fa:61:50:db:6c:bb:5c:95:c4:7b:4d:c2:84:8a:04:0e:c1:d5:
1c:09:15:df:57:62:75:21:04:75:dd:3d:fe:94:5d:97:7e:74:
b6:4c:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:20 2025 by rpki-client