Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
File: NTcZltxVWphATH7nEu4pP_YEU4M.mft (raw, json)
Hash identifier: j+4dJLfHMxKY6xhd5g+OrDYZogrTxVbjMEYx5+ZZVSQ=
Subject key identifier: DD:67:C9:B5:8D:4C:CD:76:50:E4:C2:D2:38:85:83:85:E5:06:31:C8
Authority key identifier: 35:37:19:96:DC:55:5A:98:40:4C:7E:E7:12:EE:29:3F:F6:04:53:83
Certificate issuer: /CN=35371996dc555a98404c7ee712ee293ff6045383
Certificate serial: 01931EBE8CA2A6AE8B3B2AC6517163CE4418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
Manifest number: 1054
Signing time: Tue 12 Nov 2024 05:00:24 +0000
Manifest this update: Tue 12 Nov 2024 05:00:24 +0000
Manifest next update: Wed 13 Nov 2024 05:00:24 +0000
Files and hashes: 1: NTcZltxVWphATH7nEu4pP_YEU4M.crl (hash: iSKEJ9LlUO0C+v51lNYi44vUsSaG9rcYvLGj4nZysww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1e:be:8c:a2:a6:ae:8b:3b:2a:c6:51:71:63:ce:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35371996dc555a98404c7ee712ee293ff6045383
Validity
Not Before: Nov 12 05:00:24 2024 GMT
Not After : Nov 13 05:00:24 2024 GMT
Subject: CN=dd67c9b58d4ccd7650e4c2d238858385e50631c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:6f:1e:bb:18:42:ce:a2:96:5d:f1:57:52:
41:d5:13:0b:ee:a9:9b:8e:f7:81:ba:28:df:92:f1:
04:ba:12:67:ad:93:50:47:c0:2b:2f:94:ae:0b:ff:
b2:93:c8:5d:7b:2d:c5:b5:e5:05:9a:53:43:24:61:
98:a1:0c:64:ab:65:ad:25:ba:c1:0d:10:0a:ee:d5:
0d:fa:58:85:18:67:40:72:0e:23:6e:68:95:2c:c0:
77:0f:47:7f:31:8f:87:32:7d:43:30:8f:f2:25:77:
e4:58:1a:5a:a2:57:5d:8d:e1:6a:9f:48:69:94:2e:
b7:c8:d3:89:40:ba:89:92:99:4d:2d:e6:88:09:08:
f7:bf:31:64:4a:27:67:83:d7:80:fd:44:ba:42:e6:
b7:94:31:15:64:e0:4a:0e:b8:18:26:8c:59:66:fc:
8c:97:bf:53:1b:a7:13:3c:b2:69:8d:3c:fe:b2:91:
3f:29:09:91:7f:25:35:f1:68:6c:d3:2d:f5:41:61:
d0:5c:0e:e3:90:e3:24:b2:6c:4c:3e:7d:d1:b7:47:
45:a4:97:83:e4:e2:2e:f5:46:e5:78:b5:93:b8:1d:
73:76:1f:bf:db:ae:68:23:db:f9:63:df:62:65:95:
12:aa:d1:4c:3e:84:de:ed:7b:97:37:6e:ba:cb:8a:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:C9:B5:8D:4C:CD:76:50:E4:C2:D2:38:85:83:85:E5:06:31:C8
X509v3 Authority Key Identifier:
keyid:35:37:19:96:DC:55:5A:98:40:4C:7E:E7:12:EE:29:3F:F6:04:53:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:78:aa:05:84:6b:2d:2d:8f:cc:1a:67:2a:01:02:97:69:b6:
4e:97:fb:f7:05:d5:5a:7b:44:ff:9f:80:2f:f2:ef:c4:ee:ab:
b1:e0:f8:14:df:22:83:ba:df:90:7b:42:02:c7:dc:08:fc:38:
02:40:cd:6c:80:61:6a:00:50:37:51:c1:6f:41:85:61:02:25:
9c:87:b8:97:9c:67:d9:41:bd:2a:f4:68:64:d7:cf:56:b7:64:
c5:9b:02:17:92:72:1b:a9:aa:ab:1d:d7:21:c1:9d:36:61:e1:
4e:38:fd:a4:b9:e3:59:63:03:9e:4e:29:74:2a:e3:ea:ee:aa:
3d:21:86:d0:75:a9:30:19:8b:38:ae:86:ee:90:e1:fb:36:a0:
5e:ca:ca:e9:8e:13:92:7c:cf:7d:c6:a8:01:c2:0d:66:55:06:
d4:ea:97:fa:b7:c5:d6:21:0c:36:83:d1:8a:21:75:74:fc:07:
5f:9a:1a:34:5d:82:63:4b:d0:90:f0:34:c5:69:82:41:a0:27:
a2:02:59:97:64:4d:7a:c4:a2:32:72:e8:6e:01:91:ca:80:b7:
c9:1d:88:68:97:e0:62:7c:81:2e:ff:2d:93:c6:e8:cc:62:08:
15:de:49:f8:3b:60:82:53:c8:e5:18:71:56:bb:32:33:93:8d:
dc:1a:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:22 2025 by rpki-client