Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
File: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft (raw, json)
Hash identifier: Emtjbb3OqwqMJyzwTSu/hqx/jaQ6lxyFgnxLpfjV6lM=
Subject key identifier: 0C:BF:0A:C2:8B:06:D8:11:F3:F5:91:9B:B3:7F:EF:9B:C1:CA:90:59
Authority key identifier: FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
Certificate issuer: /CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Certificate serial: 0194BD175812FBBDDA1C1E4C24EB55C312EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
Manifest number: 0DDA
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl (hash: v3/fzI79suT1Rc49+SISnyRNnvBgaKINfIBPtAoJqeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:58:12:fb:bd:da:1c:1e:4c:24:eb:55:c3:12:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=0cbf0ac28b06d811f3f5919bb37fef9bc1ca9059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:0a:56:ed:ea:8e:72:91:36:a0:dd:0a:f2:
de:ef:59:9b:42:82:80:33:4d:63:04:3f:b6:15:c6:
43:d3:32:07:54:b9:ad:61:ce:f2:11:10:db:79:95:
39:ac:46:c5:36:6f:05:5a:9f:6e:31:b1:72:d5:e3:
7c:e3:f1:db:57:4a:9e:34:b0:87:9e:24:92:7b:b7:
f4:f1:35:18:ae:05:68:88:36:8a:bc:00:6d:dc:c9:
a5:70:09:09:35:ee:90:d8:5d:a2:ea:44:f2:fd:9b:
5f:86:1f:20:f1:a9:61:30:5f:07:a0:59:2b:f2:50:
00:08:f7:8a:74:04:27:de:6b:85:1a:74:09:c8:2e:
bb:73:91:67:d0:08:94:4c:c9:9e:30:a7:57:b0:fe:
dd:86:57:f9:bf:80:65:f6:50:30:69:e1:bb:a7:c0:
24:56:7f:8e:a0:9b:b3:5c:1b:d7:35:fc:70:75:62:
8e:4f:06:84:bd:1f:99:8a:4f:51:b8:07:1d:bf:6c:
1b:c0:ca:dd:d3:32:4a:71:4a:62:c3:f5:6b:00:b8:
9a:7c:3f:49:b7:68:2b:a7:88:d9:c4:bc:c8:2b:3d:
59:33:13:b5:a3:d2:c8:00:2e:8b:6d:38:92:ca:d4:
63:c5:f3:00:bc:df:63:00:57:e1:94:7b:b7:93:95:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:0A:C2:8B:06:D8:11:F3:F5:91:9B:B3:7F:EF:9B:C1:CA:90:59
X509v3 Authority Key Identifier:
keyid:FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:17:1c:06:04:98:8d:27:1e:ba:05:ee:ff:53:25:a4:e6:7f:
57:4d:8b:3d:c8:f8:db:50:56:bb:04:ed:0b:ee:e4:1a:f7:6f:
fc:e8:c3:36:5d:db:11:c4:c7:d7:aa:bc:bf:71:23:03:13:71:
7b:d1:00:48:83:81:83:f4:40:ca:39:ea:af:77:d6:75:8b:16:
f7:83:72:18:6a:f8:58:b5:e7:44:ea:c7:9b:4a:32:13:16:a8:
d0:fe:01:12:c0:6f:18:bb:96:87:52:42:07:90:a7:98:86:1d:
88:5a:7a:49:e9:0e:fa:ca:23:9c:74:7f:cd:f6:25:36:30:34:
c8:53:c0:fa:78:a1:48:3e:f3:f6:aa:e0:64:a1:82:bc:31:bd:
82:86:06:96:da:5a:3a:cf:e5:bf:6d:2d:80:30:92:19:d0:97:
12:7a:5e:8a:8d:4c:24:67:3f:0e:06:70:e2:d4:47:a7:eb:e9:
31:b1:53:e2:73:1b:69:bf:34:cd:1c:57:be:fb:c8:d9:14:df:
58:9d:42:b0:c3:c3:d1:85:c5:af:3e:5e:30:87:4e:c7:43:81:
0e:a5:a3:47:61:b0:67:4d:09:20:18:1c:31:de:d5:51:e2:7a:
9c:7b:16:8f:29:60:cc:54:45:a4:71:71:84:99:91:16:de:c3:
83:6c:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:07 2025 by rpki-client