Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
File: nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft (raw, json)
Hash identifier: g+r3410owtzkVckVhCO590KTCoLMViUy5UcgpXoR548=
Subject key identifier: 0F:71:E2:CD:0D:24:AD:CC:2D:27:69:48:57:69:ED:D2:69:1B:57:90
Authority key identifier: 9D:F6:9F:0B:E6:25:76:80:57:41:B7:30:08:B5:F5:0E:BE:96:CF:FF
Certificate issuer: /CN=9df69f0be62576805741b73008b5f50ebe96cfff
Certificate serial: 01933F5C1060CB37A14177156FBFE7765F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfafC-YldoBXQbcwCLX1Dr6Wz_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
Manifest number: 0918
Signing time: Mon 18 Nov 2024 13:00:18 +0000
Manifest this update: Mon 18 Nov 2024 13:00:18 +0000
Manifest next update: Tue 19 Nov 2024 13:00:18 +0000
Files and hashes: 1: nfafC-YldoBXQbcwCLX1Dr6Wz_8.crl (hash: AD0VVe3umvtB8GryplUqpx9u3bQsxB6s7JJLGKr1AN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:5c:10:60:cb:37:a1:41:77:15:6f:bf:e7:76:5f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df69f0be62576805741b73008b5f50ebe96cfff
Validity
Not Before: Nov 18 13:00:18 2024 GMT
Not After : Nov 19 13:00:18 2024 GMT
Subject: CN=0f71e2cd0d24adcc2d2769485769edd2691b5790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:e1:aa:af:26:94:21:c0:07:cd:ae:2c:56:
05:7b:27:77:9c:1e:f2:48:9a:2d:a2:b4:e6:17:c0:
b3:0b:a3:44:98:49:2f:56:2b:29:60:54:8b:ee:30:
08:a1:0b:ea:a9:55:cf:3d:b3:d7:17:9e:d6:0c:9b:
78:bc:bf:9f:04:74:f1:d7:a5:b1:59:b7:3b:ec:a4:
ba:52:75:ad:03:77:32:d5:11:26:c4:ac:16:7b:01:
8d:fa:81:a5:f9:a2:73:31:1b:8b:1b:b8:b5:fe:52:
31:69:d8:16:8c:09:2f:c4:cd:fc:a0:07:e0:08:a3:
93:84:ba:eb:c6:2d:c2:c0:ec:70:5d:d4:6d:fd:70:
20:8a:69:af:c3:1e:a9:4e:ba:76:66:25:17:51:9c:
33:9f:b1:70:95:11:0c:f4:bb:89:c3:e8:4c:24:3f:
b9:af:ce:25:ad:6b:69:75:30:1c:f6:d3:97:12:24:
be:f8:78:87:c2:68:04:06:da:82:57:60:e3:fb:c8:
0c:c2:8a:31:8d:41:79:b0:53:ac:5d:ca:b5:4f:ac:
c7:60:e2:46:90:33:59:ab:1a:d3:1f:53:39:3c:03:
33:bb:ed:85:01:3a:65:2a:65:33:7f:63:ee:d6:83:
ff:07:62:1f:da:69:86:b8:aa:c3:11:1e:2b:03:d6:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:E2:CD:0D:24:AD:CC:2D:27:69:48:57:69:ED:D2:69:1B:57:90
X509v3 Authority Key Identifier:
keyid:9D:F6:9F:0B:E6:25:76:80:57:41:B7:30:08:B5:F5:0E:BE:96:CF:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfafC-YldoBXQbcwCLX1Dr6Wz_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c0:65:a7:54:67:5b:f9:d2:43:d3:54:90:59:cc:c7:94:b9:
18:7e:01:20:99:3d:07:62:be:1c:ea:dc:db:0f:0c:5e:50:97:
f9:9f:b2:e4:1c:3e:74:d8:a1:2f:a5:b4:2d:7e:c0:b5:bf:f9:
50:1e:a7:b6:7d:2f:9f:6a:e6:49:ef:ce:7f:98:a6:46:f1:a7:
6d:6d:6e:95:1a:9d:e5:79:94:d3:0e:5c:d5:fc:7a:27:f2:cb:
f8:7a:3d:ae:2e:5b:bf:1c:96:3e:50:49:34:fa:76:9f:84:6b:
1f:39:bf:07:e3:3e:f4:be:bf:bf:5c:17:67:ce:43:cb:54:ee:
06:db:ff:33:af:a8:3c:ca:ce:97:41:33:37:be:61:de:1f:e0:
70:57:72:1e:8f:24:e1:e1:d4:f0:bf:d5:5b:0d:63:be:54:68:
0e:a2:c7:ef:05:ca:07:2a:5c:14:e2:b4:69:86:b3:5b:ed:67:
3e:ea:a2:02:e5:ea:d5:66:28:ff:18:c7:d6:59:dd:bf:75:d4:
43:b2:d1:40:38:7b:f7:a0:b4:2a:3d:f0:df:c3:e8:6b:bd:54:
0f:68:9b:20:52:ab:97:9d:85:98:a0:27:a3:93:b1:09:35:9b:
ff:b3:57:c5:f4:c9:59:a3:bc:44:49:16:29:2f:f5:05:08:3b:
5e:4f:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:42:03 2025 by rpki-client