Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/34a38b-5991-4e7b-ac61-77cc5b51a732/1/NRSnxPYL6jgSlcBLI6nyie3lgZw.mft
File: NRSnxPYL6jgSlcBLI6nyie3lgZw.mft (raw, json)
Hash identifier: 4bw9giQR1/R9kfo1vfGiANCRDRzGttFKkmq9c9o7ziA=
Subject key identifier: 6D:99:00:E0:1D:DD:32:14:F5:00:70:75:8F:E6:4C:B8:8B:EE:00:22
Authority key identifier: 35:14:A7:C4:F6:0B:EA:38:12:95:C0:4B:23:A9:F2:89:ED:E5:81:9C
Certificate issuer: /CN=3514a7c4f60bea381295c04b23a9f289ede5819c
Certificate serial: 019362C3CD93422F92BD1E98CE10A188FD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRSnxPYL6jgSlcBLI6nyie3lgZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/34a38b-5991-4e7b-ac61-77cc5b51a732/1/NRSnxPYL6jgSlcBLI6nyie3lgZw.mft
Manifest number: 029B
Signing time: Mon 25 Nov 2024 10:00:19 +0000
Manifest this update: Mon 25 Nov 2024 10:00:19 +0000
Manifest next update: Tue 26 Nov 2024 10:00:19 +0000
Files and hashes: 1: NRSnxPYL6jgSlcBLI6nyie3lgZw.crl (hash: RyebgD+HCPqXyc8ZEuu3+wduL97Sol1zI5OqupnxuZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:c3:cd:93:42:2f:92:bd:1e:98:ce:10:a1:88:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514a7c4f60bea381295c04b23a9f289ede5819c
Validity
Not Before: Nov 25 10:00:19 2024 GMT
Not After : Nov 26 10:00:19 2024 GMT
Subject: CN=6d9900e01ddd3214f50070758fe64cb88bee0022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:a6:46:f6:20:68:df:70:40:05:91:f5:4c:
11:49:bd:53:56:f1:42:74:7a:74:27:b1:9a:9d:f6:
14:52:3e:75:55:8c:60:15:da:37:b0:61:5c:13:93:
b7:62:aa:a2:80:69:b5:0b:71:a1:1a:dc:c7:b6:28:
6a:47:a1:5f:05:2b:b7:87:1c:9d:c0:7f:dd:0a:b7:
a3:1c:88:3f:f1:a1:d0:68:90:cf:be:10:0b:5c:61:
14:f3:75:f2:fe:96:dc:7e:33:dd:93:02:73:5e:94:
dc:76:ef:96:29:3a:64:5a:99:2f:2f:6f:bc:c8:e9:
2d:d7:e0:de:02:fe:64:87:d8:61:5f:32:14:64:95:
78:84:9f:4f:2d:c9:03:74:8f:f2:b5:1d:a5:bf:77:
36:09:9f:38:40:a9:3a:b4:45:2a:bf:39:50:e7:1b:
29:67:04:de:8f:bc:71:b2:89:c3:0e:b1:be:e3:24:
45:5f:44:d5:2b:b6:66:24:22:d4:a0:59:15:83:9c:
73:1e:ad:15:57:4b:8c:cc:48:99:02:17:99:6e:49:
14:14:59:80:2e:3b:96:61:b1:15:c6:3b:f9:13:1b:
b9:cc:53:5b:17:71:93:09:f1:62:ec:36:25:d2:82:
a5:90:02:29:ef:a5:d9:e8:e5:9d:75:99:ea:24:f5:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:99:00:E0:1D:DD:32:14:F5:00:70:75:8F:E6:4C:B8:8B:EE:00:22
X509v3 Authority Key Identifier:
keyid:35:14:A7:C4:F6:0B:EA:38:12:95:C0:4B:23:A9:F2:89:ED:E5:81:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRSnxPYL6jgSlcBLI6nyie3lgZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/34a38b-5991-4e7b-ac61-77cc5b51a732/1/NRSnxPYL6jgSlcBLI6nyie3lgZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/34a38b-5991-4e7b-ac61-77cc5b51a732/1/NRSnxPYL6jgSlcBLI6nyie3lgZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5b:2d:51:d7:bf:68:09:c7:af:1f:5a:0b:94:35:ee:e4:a1:
75:5b:5d:de:d7:49:d8:e8:2d:b8:51:39:19:60:1c:ea:31:c2:
f9:1a:98:7d:c7:a9:68:2b:92:bd:9a:c8:6c:d2:dd:d7:73:05:
b7:50:6c:88:42:dc:2d:3a:13:cf:02:cf:62:a1:33:15:52:ef:
ad:7f:58:87:07:79:46:de:76:43:4e:ed:2d:3f:93:4d:e8:d6:
13:a8:f8:86:4b:b9:2d:e0:c0:c7:3a:24:56:d5:46:7a:63:b1:
0d:83:3f:97:a3:b6:d2:48:ab:7b:48:3e:a3:b9:b7:6c:12:f0:
b9:76:3c:04:7e:bb:d2:f7:74:91:f7:89:fc:13:ee:2a:c9:22:
7f:96:f5:4b:f0:b5:eb:db:f3:37:3e:23:64:ae:72:3b:2d:54:
66:a2:58:f7:55:1d:bb:52:f0:7f:72:34:2f:40:b3:9e:c2:f0:
15:d5:1f:d0:8b:93:e9:ca:71:09:45:21:37:90:37:b3:b5:13:
1d:62:f8:00:36:09:34:e5:73:e7:f5:ed:90:32:b5:f1:9a:f8:
91:b0:80:64:f4:41:f1:52:8b:3b:4b:20:5c:f5:ea:cb:96:4f:
19:31:39:b8:74:5e:f5:dc:d1:aa:bc:3c:85:05:64:91:4f:e1:
33:59:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:43 2025 by rpki-client