Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/52d988-dbc1-4d99-9897-75d134432709/1/ntw43kSMJPpB3lwx9zNRZKyyH58.mft
File: ntw43kSMJPpB3lwx9zNRZKyyH58.mft (raw, json)
Hash identifier: Ig3wjdsd1rnEPryq+Y/DqA9vyyQPlLE4cUPXFi4gp8M=
Subject key identifier: A9:4A:77:66:54:A2:E3:12:C1:47:61:52:84:1B:B5:E8:AD:45:1A:F9
Authority key identifier: 9E:DC:38:DE:44:8C:24:FA:41:DE:5C:31:F7:33:51:64:AC:B2:1F:9F
Certificate issuer: /CN=9edc38de448c24fa41de5c31f7335164acb21f9f
Certificate serial: 018BF0E59048BDCCDA5340D59AE6F2DA93B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw43kSMJPpB3lwx9zNRZKyyH58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/52d988-dbc1-4d99-9897-75d134432709/1/ntw43kSMJPpB3lwx9zNRZKyyH58.mft
Manifest number: 0B79
Signing time: Tue 21 Nov 2023 08:00:58 +0000
Manifest this update: Tue 21 Nov 2023 08:00:58 +0000
Manifest next update: Wed 22 Nov 2023 08:00:58 +0000
Files and hashes: 1: ntw43kSMJPpB3lwx9zNRZKyyH58.crl (hash: tOsy8BDKEuXhpo0HQPrxBJf+ZXsFB9jb+lXv7TaiFr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:e5:90:48:bd:cc:da:53:40:d5:9a:e6:f2:da:93:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9edc38de448c24fa41de5c31f7335164acb21f9f
Validity
Not Before: Nov 21 08:00:58 2023 GMT
Not After : Nov 22 08:00:58 2023 GMT
Subject: CN=a94a776654a2e312c1476152841bb5e8ad451af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:bb:62:d7:e2:b2:e2:2b:87:41:af:0b:2f:
c7:64:99:b9:91:55:f8:8f:85:e7:c5:61:86:ae:5d:
77:27:ce:b5:7f:c5:8d:bf:5e:66:a8:bc:5e:f8:d5:
85:71:f3:13:87:48:43:f2:c5:ea:c7:56:66:84:13:
65:0e:01:32:8a:8b:de:29:4c:0a:07:eb:c0:3a:9d:
c2:84:4d:b6:63:5e:32:ed:47:1d:de:23:ef:3b:17:
7f:ac:92:01:e0:29:0e:e9:2f:8e:f7:46:34:fb:9c:
b8:77:cc:fc:38:61:62:41:90:fa:d9:e7:02:b4:f2:
e3:09:63:7c:54:47:85:1d:eb:ec:41:68:de:58:11:
d6:5f:6e:94:4f:db:d7:a9:4a:8c:1f:60:97:76:6a:
ff:60:65:72:14:d6:49:7f:ba:b4:e3:5d:44:fb:be:
eb:18:96:e1:08:01:f9:bb:9b:5c:49:8f:26:53:e6:
f4:31:ea:77:fc:02:a1:21:1b:2e:29:fc:ee:7e:d6:
1b:7c:0c:c0:f9:51:ff:d5:90:a1:37:43:6e:bd:bc:
32:e6:3e:a3:5b:b0:71:90:c0:6d:62:c0:8c:b1:5b:
ad:c4:59:da:02:7e:d7:eb:5b:ee:ce:dd:bc:73:26:
b9:15:3f:9a:bf:5c:ef:ac:42:2d:42:fd:58:8c:d1:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:77:66:54:A2:E3:12:C1:47:61:52:84:1B:B5:E8:AD:45:1A:F9
X509v3 Authority Key Identifier:
keyid:9E:DC:38:DE:44:8C:24:FA:41:DE:5C:31:F7:33:51:64:AC:B2:1F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw43kSMJPpB3lwx9zNRZKyyH58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/52d988-dbc1-4d99-9897-75d134432709/1/ntw43kSMJPpB3lwx9zNRZKyyH58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/52d988-dbc1-4d99-9897-75d134432709/1/ntw43kSMJPpB3lwx9zNRZKyyH58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:01:63:34:fe:89:01:8c:02:7a:2a:1d:ad:64:16:40:80:
de:6d:3a:69:09:c0:1a:92:25:00:1b:fb:7d:e5:66:e7:f6:a7:
c6:5a:a3:29:5d:ea:e5:de:7a:f3:7f:5d:78:fe:20:ba:03:d5:
f6:a0:ce:75:7d:a0:39:38:e9:bf:bc:04:5b:98:5a:86:b2:d9:
59:75:1a:80:71:ce:91:cc:4f:b9:fa:ca:bf:99:b8:4c:0c:a7:
3e:bc:52:87:23:af:0f:53:9b:5b:f1:9c:2a:de:d6:d6:a5:e4:
92:d0:d1:5a:2e:b9:d6:a4:8f:3f:d6:01:9f:16:c6:c9:b1:2a:
86:52:00:a6:80:4e:4b:fb:f2:f7:38:1b:47:2a:e9:7f:40:df:
09:a4:43:35:54:d4:8f:20:78:60:89:b9:c2:bf:35:5c:7b:82:
76:85:ec:63:1c:e9:ac:7a:e3:8a:71:62:e6:c7:82:fe:82:52:
34:a4:96:7e:25:6d:3f:8c:65:0f:6d:c8:10:f9:f9:25:84:08:
8e:38:70:b2:7e:5e:25:84:eb:6a:b8:af:c6:72:08:4c:43:16:
fb:cc:90:e4:90:93:98:38:a7:8d:27:5a:89:e2:f1:d9:50:01:
19:8e:04:e8:75:b0:23:67:8f:af:e3:8b:70:e4:b8:33:ce:ab:
44:f7:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:00:58 2025 by rpki-client