Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4b647-53fa-49ba-9c60-d1301bc05144/1/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.mft
File: NPXec4xRqTVCjv_4gAvPmyZ-3BQ.mft (raw, json)
Hash identifier: O6vc01IX3hXqeOH2xomtyUTPUt63i5Kbr2jLtGIBWJ0=
Subject key identifier: 5C:B8:D4:C1:85:15:48:79:EA:06:32:41:D0:A0:CC:40:68:8D:FE:62
Authority key identifier: 34:F5:DE:73:8C:51:A9:35:42:8E:FF:F8:80:0B:CF:9B:26:7E:DC:14
Certificate issuer: /CN=34f5de738c51a935428efff8800bcf9b267edc14
Certificate serial: 01941581DE7B06B852058AEB07BFC9EB32F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4b647-53fa-49ba-9c60-d1301bc05144/1/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.mft
Manifest number: 0F6E
Signing time: Mon 30 Dec 2024 03:00:20 +0000
Manifest this update: Mon 30 Dec 2024 03:00:20 +0000
Manifest next update: Tue 31 Dec 2024 03:00:20 +0000
Files and hashes: 1: NPXec4xRqTVCjv_4gAvPmyZ-3BQ.crl (hash: DUh4TazOXGUCL56jtKwYPYTCDtQexab4B1UNQ1Et5bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:15:81:de:7b:06:b8:52:05:8a:eb:07:bf:c9:eb:32:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f5de738c51a935428efff8800bcf9b267edc14
Validity
Not Before: Dec 30 03:00:20 2024 GMT
Not After : Dec 31 03:00:20 2024 GMT
Subject: CN=5cb8d4c185154879ea063241d0a0cc40688dfe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:1d:4a:5d:c8:b9:8a:b2:d3:e0:bf:d2:24:
94:a4:4b:8f:5f:f4:d4:c6:ca:7a:60:25:f1:27:0f:
22:7f:16:d4:89:8e:28:5d:d4:75:7e:11:4b:83:c5:
a5:5e:37:61:17:2b:16:6a:1b:71:9a:9b:d4:93:18:
d0:a2:e2:d0:ff:c5:ca:25:67:a8:76:e2:d3:aa:e2:
75:84:57:57:e7:dc:a2:60:a2:5a:23:59:80:c5:0e:
07:82:2c:a8:67:22:97:2b:08:8a:f5:35:fd:7d:57:
6e:bc:d9:27:79:27:52:9f:21:ef:3c:5f:dd:7d:0c:
33:53:2f:02:4b:f5:52:84:4c:0b:37:df:01:ae:4b:
5d:96:66:a7:22:2b:dd:14:6f:be:0d:32:74:aa:65:
88:fe:08:cc:7f:b6:38:70:51:28:9b:db:7b:6e:99:
c0:99:e1:aa:53:27:2d:2c:89:09:33:87:0d:5b:63:
73:f2:fb:78:8b:86:53:9d:6a:49:e9:a6:3b:29:df:
de:83:08:52:00:fa:fe:4f:69:ff:af:74:85:58:73:
84:bf:56:6b:46:5d:c8:3f:ef:c6:cd:f8:90:ae:1f:
43:4c:64:08:88:83:e7:f1:9b:e9:ce:f1:cb:48:26:
b8:51:e0:1f:ea:ea:9a:53:c1:a9:3b:c1:62:e6:07:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:D4:C1:85:15:48:79:EA:06:32:41:D0:A0:CC:40:68:8D:FE:62
X509v3 Authority Key Identifier:
keyid:34:F5:DE:73:8C:51:A9:35:42:8E:FF:F8:80:0B:CF:9B:26:7E:DC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4b647-53fa-49ba-9c60-d1301bc05144/1/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4b647-53fa-49ba-9c60-d1301bc05144/1/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:36:4e:23:ca:6c:8e:96:9f:ca:3f:ed:80:e2:c4:c4:7d:e8:
1f:a8:e4:67:5b:f2:2c:5a:21:a3:82:ed:be:72:4f:b8:8c:bf:
1b:08:c5:4b:9f:bc:9a:de:21:91:e0:e7:76:f0:95:6f:6e:35:
10:b7:e9:54:a9:4f:7c:6f:a4:be:b9:61:f7:8c:c5:c5:b4:f0:
b6:47:f0:d1:e7:73:62:15:86:91:89:19:86:95:6b:bf:ec:85:
9a:35:b1:87:ed:52:0f:21:41:31:86:c8:4a:3a:31:da:62:e6:
5f:45:66:73:8d:7e:2b:5a:6b:bc:a8:45:c1:23:03:f2:6d:25:
1b:ad:60:77:10:03:d4:ef:a1:c7:e0:fb:42:27:75:b2:b9:32:
41:63:0c:43:4d:78:0c:b2:61:ce:d5:d3:a7:59:25:90:ff:84:
eb:33:b6:fb:98:09:6b:83:f4:44:69:cd:9b:b6:f0:7a:f1:d1:
7a:d1:56:8d:75:fd:0f:fd:d4:55:93:20:43:d3:be:73:a1:bd:
0f:30:c6:5e:ef:bd:8a:57:b7:98:ad:7e:45:b5:93:5c:8f:ad:
dc:fe:e3:ae:40:76:eb:fa:c9:53:34:60:63:0a:7c:02:c3:22:
9c:89:9d:22:b8:4b:c3:1b:0c:db:27:09:d1:4e:64:47:af:3c:
25:32:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:37 2025 by rpki-client