Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/Nv-NjgLh0RSksKn3oiluItBuHWk.mft
File: Nv-NjgLh0RSksKn3oiluItBuHWk.mft (raw, json)
Hash identifier: qfDjNQQArbaOl1qx1b5JDqGgRikrKp51Xo8JLuNTy70=
Subject key identifier: 12:EA:6C:88:E0:87:7B:D2:0F:B1:6C:A4:E7:21:14:83:9E:B0:0A:61
Authority key identifier: 36:FF:8D:8E:02:E1:D1:14:A4:B0:A9:F7:A2:29:6E:22:D0:6E:1D:69
Certificate issuer: /CN=36ff8d8e02e1d114a4b0a9f7a2296e22d06e1d69
Certificate serial: 018B032579C196F7E4481806FF7426D3A92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv-NjgLh0RSksKn3oiluItBuHWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/Nv-NjgLh0RSksKn3oiluItBuHWk.mft
Manifest number: 0F22
Signing time: Fri 06 Oct 2023 04:01:09 +0000
Manifest this update: Fri 06 Oct 2023 04:01:09 +0000
Manifest next update: Sat 07 Oct 2023 04:01:09 +0000
Files and hashes: 1: Nv-NjgLh0RSksKn3oiluItBuHWk.crl (hash: o+LKxdtddv8J0grjcSP0fDr0tM05zN6L0YfHXUVrebY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:25:79:c1:96:f7:e4:48:18:06:ff:74:26:d3:a9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ff8d8e02e1d114a4b0a9f7a2296e22d06e1d69
Validity
Not Before: Oct 6 04:01:09 2023 GMT
Not After : Oct 7 04:01:09 2023 GMT
Subject: CN=12ea6c88e0877bd20fb16ca4e72114839eb00a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:67:5d:dd:30:2f:be:63:0e:ac:54:0a:29:
cd:76:c0:3e:60:a8:c0:5a:f0:e0:7e:53:0a:bd:ad:
eb:dc:7e:7b:bc:43:8d:95:41:25:10:8d:7f:8a:83:
d6:2b:32:ca:71:68:7d:14:0e:b0:d3:24:36:f1:79:
c6:d6:09:c5:55:cf:10:79:04:cb:8e:9f:60:6a:22:
82:75:20:76:bd:41:c0:dc:21:04:c6:a6:de:60:19:
80:f5:e5:8a:e5:ef:42:03:64:20:0d:7a:a1:82:24:
96:60:5e:54:5b:f4:ed:a0:18:67:6c:c8:2d:e8:ef:
3b:70:60:27:c3:5f:ed:96:1c:0b:0e:35:48:b4:63:
67:cd:b7:f0:f7:21:1e:35:7b:ad:93:96:62:1e:d8:
41:29:40:11:56:fc:91:c2:a8:dd:2e:06:79:1f:c2:
82:14:78:6b:7c:6a:7a:0e:de:25:ea:f6:e6:64:cb:
46:41:43:fe:33:ba:7e:83:f3:44:0a:5e:0f:eb:34:
5e:28:71:ca:34:7a:e3:23:d9:05:54:17:88:a0:b6:
16:26:e1:bc:13:b5:f6:51:e6:37:af:21:bf:82:53:
1d:de:03:0d:90:95:4c:02:e3:67:90:84:48:4a:98:
ba:da:b6:b4:7c:e3:8d:60:13:43:ab:b2:04:91:59:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:6C:88:E0:87:7B:D2:0F:B1:6C:A4:E7:21:14:83:9E:B0:0A:61
X509v3 Authority Key Identifier:
keyid:36:FF:8D:8E:02:E1:D1:14:A4:B0:A9:F7:A2:29:6E:22:D0:6E:1D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv-NjgLh0RSksKn3oiluItBuHWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/Nv-NjgLh0RSksKn3oiluItBuHWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/Nv-NjgLh0RSksKn3oiluItBuHWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ea:0a:3f:e8:88:15:91:9f:de:87:7f:22:75:ec:64:1c:2f:
42:15:95:e7:be:17:8e:19:d3:87:93:4c:16:ca:6e:13:5b:c3:
1c:73:88:05:c0:a5:4f:28:00:71:25:d5:39:ae:89:d0:b0:6c:
ee:6c:c6:c3:e5:0f:46:e0:ec:33:81:e1:12:04:8c:32:ae:09:
6d:77:55:5b:b2:79:d0:df:63:4a:98:df:e9:b0:4a:9f:b4:d1:
e3:90:3a:7d:43:35:85:8d:95:55:20:fd:7b:ae:d7:54:c3:9e:
c4:9f:c5:b3:89:3a:b8:43:4b:30:de:81:b9:5f:13:39:be:05:
06:7a:ba:82:a2:07:2f:8f:ec:bd:f6:ad:7d:36:91:32:f0:cf:
0a:71:0a:20:fc:83:c2:62:50:a8:5b:ca:cf:87:85:85:e5:3a:
52:03:3f:88:91:96:e2:fe:53:28:8d:15:7e:6e:b3:7a:53:dd:
9e:98:fe:56:d1:f2:3c:77:17:7a:47:39:79:80:d3:0d:cf:30:
df:ec:4f:be:6f:f0:0f:15:56:85:a7:b7:b3:91:ee:90:2e:ce:
49:75:1d:57:9c:6e:e7:02:67:a8:70:95:1f:77:b3:50:2b:20:
34:f9:d2:23:bc:72:dc:cf:69:5c:8d:6d:49:04:4b:f9:ca:f6:
cf:e3:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:27 2025 by rpki-client