Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9a2033-42a9-4d5c-882f-11cdfe276c35/1/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.mft
File: nLQsjBNxgK4ZU7LqTr5q4b9sfh0.mft (raw, json)
Hash identifier: F64OYjtbAD+qbb6XWhzqHEA4EXgWgUyKnYAcA6sT5mc=
Subject key identifier: F9:14:EC:97:FC:C5:DB:40:C7:2D:59:66:51:1D:A0:96:AF:C0:F3:36
Authority key identifier: 9C:B4:2C:8C:13:71:80:AE:19:53:B2:EA:4E:BE:6A:E1:BF:6C:7E:1D
Certificate issuer: /CN=9cb42c8c137180ae1953b2ea4ebe6ae1bf6c7e1d
Certificate serial: 0183655830B52ABEFCCACB2674F3B9E448FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9a2033-42a9-4d5c-882f-11cdfe276c35/1/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.mft
Manifest number: 33
Signing time: Thu 22 Sep 2022 13:17:01 +0000
Manifest this update: Thu 22 Sep 2022 13:17:01 +0000
Manifest next update: Fri 23 Sep 2022 13:17:01 +0000
Files and hashes: 1: nLQsjBNxgK4ZU7LqTr5q4b9sfh0.crl (hash: SGqzA+17iqKw4VfNuxE1FUNDEMV+5CiI5xIkAccpcTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:58:30:b5:2a:be:fc:ca:cb:26:74:f3:b9:e4:48:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb42c8c137180ae1953b2ea4ebe6ae1bf6c7e1d
Validity
Not Before: Sep 22 13:17:01 2022 GMT
Not After : Sep 23 13:17:01 2022 GMT
Subject: CN=f914ec97fcc5db40c72d5966511da096afc0f336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3b:2d:a1:28:67:35:29:2d:b6:65:f4:16:b4:
0f:ad:d0:c0:a0:5a:7c:73:f0:94:69:cd:26:0d:16:
f2:e4:d1:0c:7d:cb:67:aa:a5:67:5d:8a:79:fa:b5:
4d:90:c6:33:34:65:16:dd:ed:51:82:41:bc:3c:71:
63:a2:b0:64:f1:7b:10:fb:1b:0b:70:56:92:c0:b3:
8c:13:b9:83:3f:f3:00:84:ab:83:46:0a:f8:ee:1b:
c1:94:83:de:c1:9f:e8:03:18:30:0d:95:b1:5c:a5:
24:63:81:c2:f6:af:ff:ab:41:be:e0:dd:57:54:32:
ad:bb:59:9f:bc:10:f5:9d:18:4c:19:cc:a1:7d:21:
ab:90:dc:21:56:ea:18:c4:d2:8f:2e:f3:70:66:60:
f9:0a:9c:13:18:78:a8:ca:35:77:26:e1:04:2d:aa:
1f:db:ca:7e:90:eb:b7:31:b7:8a:c3:d6:35:de:f7:
71:ca:31:3b:73:c6:60:c6:8b:ee:8e:96:94:c2:2a:
ed:d6:11:2e:9e:12:3d:32:2c:de:07:f4:66:d4:ce:
4d:4e:80:84:19:d9:bb:16:3f:4f:55:78:1b:4d:c5:
5f:ae:f6:60:53:ed:80:db:0b:13:b8:db:ed:5b:57:
fc:17:ca:de:fb:97:71:98:1a:a7:d0:9c:ac:58:55:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:EC:97:FC:C5:DB:40:C7:2D:59:66:51:1D:A0:96:AF:C0:F3:36
X509v3 Authority Key Identifier:
keyid:9C:B4:2C:8C:13:71:80:AE:19:53:B2:EA:4E:BE:6A:E1:BF:6C:7E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9a2033-42a9-4d5c-882f-11cdfe276c35/1/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9a2033-42a9-4d5c-882f-11cdfe276c35/1/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3e:35:2a:1b:96:c3:c0:93:ed:ea:3b:8a:57:14:81:d8:b1:
7a:5e:88:ca:72:d7:51:df:e2:2a:4b:3f:9c:36:90:fb:e9:6f:
9d:85:1d:0d:ac:87:d7:88:bb:41:6b:44:52:8d:77:ac:f4:4f:
63:dc:48:79:a0:29:b8:a3:cb:2a:8e:93:06:30:f6:e4:9b:63:
6d:bc:95:32:86:fc:e0:1b:8d:fa:0e:1b:a7:44:01:81:c4:8a:
8c:f1:2d:08:b4:64:db:f6:09:ab:55:16:4f:d4:12:28:b8:e8:
ce:a8:98:b7:78:d7:8c:dd:5f:a1:b0:b2:7d:c5:5e:d9:6b:2b:
f4:a0:b3:a9:e2:5e:20:33:b5:65:cc:90:bb:a4:6b:4b:dd:42:
a2:8a:df:5e:44:f1:6b:16:f0:79:90:c5:ce:aa:76:3e:b5:72:
ca:04:19:f9:da:34:d4:43:48:f6:da:dd:d7:27:03:61:7d:97:
4c:9e:53:a0:5e:8a:27:a8:55:88:d8:0f:4b:47:be:4e:43:ed:
09:d4:07:4d:62:e7:7c:78:c1:c8:01:f1:99:6d:40:b9:8c:2a:
ba:57:bb:ad:a9:95:94:e4:24:f5:d7:c3:d3:a4:e5:5a:18:44:
a1:36:d9:89:c5:ee:d0:df:6c:5e:e5:31:e6:02:12:64:08:fe:
20:00:19:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:17 2025 by rpki-client