Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0f04c4-45f4-4eb8-8686-65b323f37523/1/NaCsMLXi8EkCklZNeP_rGhWJpM0.mft
File: NaCsMLXi8EkCklZNeP_rGhWJpM0.mft (raw, json)
Hash identifier: RSE514CuHhWH/YXXv2iNNw31ba8ImOmc3rO3PwWk80s=
Subject key identifier: D8:54:7E:66:13:2C:56:14:35:ED:21:5B:F0:1A:66:DF:C2:8D:29:50
Authority key identifier: 35:A0:AC:30:B5:E2:F0:49:02:92:56:4D:78:FF:EB:1A:15:89:A4:CD
Certificate issuer: /CN=35a0ac30b5e2f0490292564d78ffeb1a1589a4cd
Certificate serial: 01845BE468DC4D22DA8B13795363BBAED37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaCsMLXi8EkCklZNeP_rGhWJpM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0f04c4-45f4-4eb8-8686-65b323f37523/1/NaCsMLXi8EkCklZNeP_rGhWJpM0.mft
Manifest number: 0B5B
Signing time: Wed 09 Nov 2022 10:16:46 +0000
Manifest this update: Wed 09 Nov 2022 10:16:46 +0000
Manifest next update: Thu 10 Nov 2022 10:16:46 +0000
Files and hashes: 1: NaCsMLXi8EkCklZNeP_rGhWJpM0.crl (hash: XHEurRGNHsH1FP/47WaZ6GeWYLmoCGryuiE6AvlHRbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:e4:68:dc:4d:22:da:8b:13:79:53:63:bb:ae:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a0ac30b5e2f0490292564d78ffeb1a1589a4cd
Validity
Not Before: Nov 9 10:16:46 2022 GMT
Not After : Nov 10 10:16:46 2022 GMT
Subject: CN=d8547e66132c561435ed215bf01a66dfc28d2950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:c6:24:09:bf:46:a7:8d:75:b9:f8:77:cf:
f6:8d:e2:9e:ef:51:b1:b5:55:a5:f3:d2:ab:0a:f4:
5e:0e:94:2f:76:73:30:c1:83:a9:09:9c:f7:62:77:
dc:b7:82:c9:54:3d:7f:b9:a1:bf:23:c3:73:11:bd:
ee:90:ed:3c:9b:dc:18:44:1a:d4:7f:93:8c:71:ff:
f6:13:c1:97:45:86:47:a0:d6:15:b7:35:61:3d:a1:
d3:46:de:e4:53:ea:ac:a3:77:98:01:6e:e3:63:0b:
c6:bb:13:69:8e:32:32:1f:7f:2b:f7:43:e6:00:6f:
4f:2c:ca:55:22:b9:71:89:cd:1e:b1:16:b7:b8:af:
c3:57:78:0b:34:ec:fb:61:60:f2:65:c0:64:fe:76:
53:6b:3a:66:11:01:59:8d:43:43:5b:5b:7c:80:e9:
44:77:89:26:99:83:7e:2e:3d:35:3c:82:26:02:f6:
2a:83:39:30:5d:32:04:f2:ad:dd:81:c4:26:35:ed:
24:24:a0:fe:c3:18:0d:3c:ba:aa:bd:cc:82:df:82:
95:29:4f:20:be:5a:df:3e:19:9e:13:f0:3b:36:06:
a4:f3:1b:a4:43:2c:1c:b7:92:29:82:af:6a:7e:69:
f6:32:4a:3e:29:52:ac:d5:aa:c8:3f:b1:0e:40:45:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:7E:66:13:2C:56:14:35:ED:21:5B:F0:1A:66:DF:C2:8D:29:50
X509v3 Authority Key Identifier:
keyid:35:A0:AC:30:B5:E2:F0:49:02:92:56:4D:78:FF:EB:1A:15:89:A4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaCsMLXi8EkCklZNeP_rGhWJpM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0f04c4-45f4-4eb8-8686-65b323f37523/1/NaCsMLXi8EkCklZNeP_rGhWJpM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0f04c4-45f4-4eb8-8686-65b323f37523/1/NaCsMLXi8EkCklZNeP_rGhWJpM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:21:7f:17:df:8b:cd:6a:a6:d5:78:d0:68:e4:b7:95:ff:80:
23:74:8e:39:06:f6:4e:59:45:94:e0:c2:2a:f7:6c:9f:ad:ce:
8b:51:f1:3d:42:27:3a:90:69:19:bb:0b:94:da:a2:32:37:f7:
e5:b9:c3:9e:1c:4a:a1:b4:8a:4b:4b:17:21:3c:2b:43:d8:ef:
6f:47:6a:5f:a1:c8:02:e7:81:bd:12:7e:ab:c4:82:cc:cf:0c:
c5:80:50:e9:c4:ec:6d:73:4b:e3:de:c0:0c:fc:39:3e:a6:d0:
73:2a:f5:bf:d4:89:73:90:7c:4c:d1:a4:07:c6:eb:d1:e0:fd:
35:82:e9:79:bb:38:68:2f:fc:97:3a:64:2b:57:e4:23:28:9c:
d6:ee:9a:5f:e2:0e:36:d4:94:27:58:3a:6d:93:05:85:2f:63:
f7:9d:17:25:db:91:aa:52:b6:7e:c8:e4:70:2e:6a:66:c8:16:
d0:50:f7:d8:7b:36:73:7a:14:4f:b3:d2:01:9f:99:8b:12:38:
05:ff:f8:80:93:f0:78:19:f0:a4:05:a2:c4:f4:0f:51:a7:f6:
c8:f4:88:c9:6e:01:85:7f:45:73:f0:31:c7:74:5b:c9:ff:df:
59:d8:6b:33:2a:df:d8:57:53:e9:fb:f6:dd:a8:d3:ab:53:26:
2e:58:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:57 2025 by rpki-client