Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.mft
File: NCsDiWx2aYKG-IGmukcqCLeWPKI.mft (raw, json)
Hash identifier: a8qAwsgho+web4XWcZSH6+2YNqNXgfiGMx8WHvk9ZiU=
Subject key identifier: 50:99:7E:7D:16:ED:FA:A9:B3:B3:3C:76:32:25:45:28:B5:B5:89:A3
Authority key identifier: 34:2B:03:89:6C:76:69:82:86:F8:81:A6:BA:47:2A:08:B7:96:3C:A2
Certificate issuer: /CN=342b03896c76698286f881a6ba472a08b7963ca2
Certificate serial: 019495D33F490A1F81DB7C778E828F06791D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCsDiWx2aYKG-IGmukcqCLeWPKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.mft
Manifest number: 1419
Signing time: Fri 24 Jan 2025 01:00:36 +0000
Manifest this update: Fri 24 Jan 2025 01:00:36 +0000
Manifest next update: Sat 25 Jan 2025 01:00:36 +0000
Files and hashes: 1: NCsDiWx2aYKG-IGmukcqCLeWPKI.crl (hash: 9odSpwZrRIkD3gI5QalCfMnuokXbIHSJz34mNPRQc6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:95:d3:3f:49:0a:1f:81:db:7c:77:8e:82:8f:06:79:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b03896c76698286f881a6ba472a08b7963ca2
Validity
Not Before: Jan 24 01:00:36 2025 GMT
Not After : Jan 25 01:00:36 2025 GMT
Subject: CN=50997e7d16edfaa9b3b33c7632254528b5b589a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:e3:37:c4:b4:e1:59:fa:14:21:87:ed:03:
97:fb:22:d9:f1:d6:26:df:b9:70:a9:60:a4:dc:85:
a6:2c:0a:97:7c:3e:e0:20:96:5e:88:df:cb:85:1e:
6c:51:45:5f:75:50:55:38:bd:90:c9:53:bc:73:6b:
bc:fb:8b:5d:16:ec:d9:a1:09:5c:9e:5b:87:21:40:
21:31:61:8d:af:68:7d:ba:18:df:d9:a3:51:43:88:
5d:33:80:1e:4d:53:5d:b5:0b:83:77:ad:6b:4e:77:
76:72:b8:14:c9:53:f1:a3:2d:73:65:e3:64:25:52:
76:38:e9:f9:e9:b4:95:c3:18:63:11:89:0d:de:d9:
41:da:e5:cf:f8:ee:10:ff:56:90:3c:d5:80:8c:58:
f6:95:9d:22:24:fc:3f:92:dd:86:bf:63:fb:a8:5d:
e8:e8:30:36:63:92:5c:05:fa:05:42:ed:55:33:4f:
3b:fb:57:c7:76:3a:b2:c5:e9:61:db:73:87:36:41:
71:f8:70:41:cf:58:81:d4:fe:f8:5b:3b:35:c7:40:
4a:39:3d:2e:09:06:6c:ae:61:70:df:65:ab:52:12:
52:46:01:05:28:b4:d7:c0:cb:2a:b2:05:60:e6:a6:
09:a2:c5:b3:fd:4d:32:d2:c6:01:64:c7:5c:c9:ea:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:99:7E:7D:16:ED:FA:A9:B3:B3:3C:76:32:25:45:28:B5:B5:89:A3
X509v3 Authority Key Identifier:
keyid:34:2B:03:89:6C:76:69:82:86:F8:81:A6:BA:47:2A:08:B7:96:3C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCsDiWx2aYKG-IGmukcqCLeWPKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:75:8a:c4:f4:98:f3:57:68:91:32:e7:d8:5e:dd:3a:1a:b9:
90:96:2e:91:75:46:e2:85:c8:d6:d4:00:0a:6a:8b:56:84:65:
41:db:d1:94:04:13:aa:3b:c4:82:30:59:0e:55:8a:87:75:54:
12:99:af:19:55:1d:13:d1:12:b9:ea:41:76:68:ed:5c:94:1c:
32:71:06:bd:39:2a:d1:94:59:fd:a7:c0:bf:53:4f:9c:65:67:
72:5d:a5:15:8f:14:95:e2:56:27:b4:bc:8e:19:f2:e9:fb:b9:
28:59:59:9e:81:4d:9c:c2:a4:8c:8e:b1:5c:6f:b8:5f:c0:18:
a8:4f:1d:da:b6:c3:92:01:8e:cb:35:dc:dc:c4:b4:a9:82:9f:
ab:26:6a:18:bc:4a:a3:0c:ca:f6:1e:6b:9b:2f:4a:17:66:1c:
3c:f6:5c:d5:c8:09:59:63:18:8d:1f:c9:1d:45:9c:bb:c5:bc:
5e:17:f4:5e:19:ed:cf:01:ab:f8:53:fe:b4:f2:45:43:b8:23:
cf:3a:61:11:a5:d1:2c:39:52:b7:84:b8:47:8d:25:32:ff:36:
28:f1:31:66:4a:2b:c3:5b:22:59:94:ef:c6:08:9d:a7:53:f0:
ae:54:c1:5b:99:29:df:ed:d2:ec:fd:92:89:3e:36:58:c0:68:
8d:f6:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:24 2025 by rpki-client