Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: yCT7E70vlaZJPc1Bq7ZJtUg5YSKgdC+BFaaRHaubbgY=
Subject key identifier: 8A:4F:35:F8:1D:49:23:6F:FF:CA:DF:61:55:31:E0:A3:4A:E7:28:4A
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 0194BC3C714C1FA3A9838812F9071EB339E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 0D9F
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: tzM8I8sLI7783P/vYocBjItmLBMxjQSuUy2oshjPvt4=)
2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:71:4c:1f:a3:a9:83:88:12:f9:07:1e:b3:39:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=8a4f35f81d49236fffcadf615531e0a34ae7284a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:14:08:0c:aa:b4:0e:a0:a8:86:49:96:16:
70:6e:77:54:81:aa:c1:26:83:25:e6:db:7f:d3:91:
d4:7c:e9:a0:b3:02:b7:96:9c:93:96:f4:3e:99:3c:
90:82:c2:8f:a7:4f:63:75:93:4f:11:d4:9b:37:f2:
8d:c0:56:7b:4c:5a:13:ff:60:c3:ff:40:e4:7c:ec:
a6:bc:b2:d6:9e:d1:5d:42:51:38:5a:e5:05:0e:bc:
88:8a:ff:9a:d7:f5:94:6e:36:c3:48:7f:88:dc:71:
d4:61:5e:c8:66:ae:95:25:34:c7:16:56:23:cc:df:
4c:a2:61:59:8f:92:45:15:6b:1f:4a:0a:f1:44:97:
b3:de:05:51:f3:ec:c6:c4:f2:b2:0a:ac:23:96:79:
ba:db:ed:aa:11:69:4b:a0:89:ba:b9:82:73:a7:a0:
d9:11:3f:9f:8a:85:6b:f4:85:50:6b:99:5f:04:93:
0d:98:b5:fb:58:4d:1f:e5:8a:89:b0:ef:97:f6:e6:
61:cf:30:77:e9:39:ea:af:7b:cf:6b:10:44:2c:43:
66:15:58:58:c1:d0:43:57:0b:42:b2:81:4b:cf:11:
c3:65:89:b8:75:bf:a1:8e:a9:e2:e2:e4:79:18:23:
50:d4:64:64:23:e2:a8:8d:e0:08:c8:84:96:b0:fe:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4F:35:F8:1D:49:23:6F:FF:CA:DF:61:55:31:E0:A3:4A:E7:28:4A
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:50:2b:5c:8d:3c:f6:98:eb:af:a1:e0:31:d8:51:43:37:ea:
5d:63:db:56:71:8c:43:c7:cf:f7:22:8b:7f:38:f4:6a:2f:73:
d1:dc:c7:46:a8:69:48:85:c5:7a:47:0a:ca:b2:c6:a0:20:c0:
9f:49:cd:e5:27:36:99:dc:fa:3f:4c:47:5d:42:e9:e8:f1:db:
52:f2:58:7f:00:26:d2:52:d3:d0:ea:f6:64:30:d8:11:97:22:
28:d0:04:ac:f6:77:80:7f:d5:39:9c:e4:38:64:a9:51:af:10:
bd:c5:98:6b:a8:6a:60:e5:3c:ce:ea:d6:b7:05:63:7b:e3:72:
89:df:c2:90:c4:f0:10:89:d0:5d:61:f5:4c:a6:73:94:8f:7e:
5c:d8:5a:52:8e:f4:5d:44:97:98:40:5e:28:8f:68:69:9a:e2:
3b:f7:3a:5b:26:df:b4:b1:2f:ee:b1:2b:89:aa:e0:c4:9f:10:
d2:1b:3b:de:3f:67:ad:94:ce:5a:7c:e0:37:8f:55:4a:f0:08:
4e:6d:e2:77:a1:a2:db:3e:69:e1:4c:f5:c7:88:09:63:2e:28:
c8:c6:c6:74:b9:3b:9f:2f:a9:b0:d0:59:82:d4:dc:d0:66:38:
46:b4:0f:d9:d9:bc:a8:eb:84:f4:a9:41:4e:ea:3e:a4:65:94:
7b:fc:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:16 2025 by rpki-client