Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2aeca7-0837-468d-bd62-03bb21aefba0/1/NB54rk8RnAGERACQzx2JrMiyLCQ.mft
File: NB54rk8RnAGERACQzx2JrMiyLCQ.mft (raw, json)
Hash identifier: lZLkd9ert4SmGOTmi6pZC6Wx5AsM1m3YvKNxNFFLGmc=
Subject key identifier: 9F:5E:35:24:65:14:FF:68:56:68:03:4B:50:CE:56:2D:42:17:FD:DE
Authority key identifier: 34:1E:78:AE:4F:11:9C:01:84:44:00:90:CF:1D:89:AC:C8:B2:2C:24
Certificate issuer: /CN=341e78ae4f119c0184440090cf1d89acc8b22c24
Certificate serial: 01962E2ABDF7638C0B30457F8A9012BC7647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NB54rk8RnAGERACQzx2JrMiyLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2aeca7-0837-468d-bd62-03bb21aefba0/1/NB54rk8RnAGERACQzx2JrMiyLCQ.mft
Manifest number: 02A7
Signing time: Sun 13 Apr 2025 08:01:15 +0000
Manifest this update: Sun 13 Apr 2025 08:01:15 +0000
Manifest next update: Mon 14 Apr 2025 08:01:15 +0000
Files and hashes: 1: NB54rk8RnAGERACQzx2JrMiyLCQ.crl (hash: MPcXPJrh2Np5gSqDBh47InRDMFI+BpG7v1CA1VOC3aQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:bd:f7:63:8c:0b:30:45:7f:8a:90:12:bc:76:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341e78ae4f119c0184440090cf1d89acc8b22c24
Validity
Not Before: Apr 13 08:01:15 2025 GMT
Not After : Apr 14 08:01:15 2025 GMT
Subject: CN=9f5e35246514ff685668034b50ce562d4217fdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:af:84:57:89:f8:33:2c:35:02:87:c7:20:
dc:83:a6:a0:a5:20:04:9a:44:b0:6e:2d:41:e5:12:
76:46:ae:5a:3e:3e:5f:8f:43:97:a4:99:94:b0:dd:
62:7f:82:36:a3:94:5a:1a:bf:13:5e:96:55:24:31:
c0:0d:1b:9d:38:c4:75:ac:83:68:4c:3e:e0:1f:ed:
a3:45:e1:46:0e:5d:8d:3f:95:96:cd:96:c7:07:be:
c3:43:92:9e:be:a1:5c:8c:40:a6:7c:db:67:2d:23:
f7:0a:85:24:8a:50:71:39:59:53:ca:86:74:4b:c4:
53:28:f2:a9:1c:a0:b3:cb:3a:1b:4d:d8:a6:9b:d4:
9f:f8:c6:13:b0:f1:c1:39:25:c7:ff:73:26:94:ac:
6d:28:9b:58:6d:4a:d8:9d:76:6c:06:05:a7:6e:03:
c0:fe:4c:86:8b:10:10:50:af:19:3d:b1:bb:f7:3a:
21:72:e9:74:32:10:27:af:3b:9a:9f:72:ab:15:93:
1b:55:d4:73:60:96:3c:95:83:6d:f3:9c:72:c5:05:
c7:bb:5b:ed:37:b5:42:4a:de:86:2c:b4:b3:19:77:
34:9a:56:b4:c9:b2:bb:18:8c:80:fe:5c:ba:86:58:
62:61:d3:b8:59:2a:09:ae:a4:9c:6c:0a:df:85:b0:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:35:24:65:14:FF:68:56:68:03:4B:50:CE:56:2D:42:17:FD:DE
X509v3 Authority Key Identifier:
keyid:34:1E:78:AE:4F:11:9C:01:84:44:00:90:CF:1D:89:AC:C8:B2:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NB54rk8RnAGERACQzx2JrMiyLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2aeca7-0837-468d-bd62-03bb21aefba0/1/NB54rk8RnAGERACQzx2JrMiyLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2aeca7-0837-468d-bd62-03bb21aefba0/1/NB54rk8RnAGERACQzx2JrMiyLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ad:c3:e4:74:9e:f8:88:9c:b9:f5:52:17:16:52:de:57:fd:
d4:48:16:74:6c:c8:32:40:b1:59:c9:e9:1f:7e:07:18:16:c0:
40:bf:b4:57:b7:50:db:2f:2e:49:24:45:ac:5f:aa:52:55:fe:
ab:03:0d:9e:3c:d2:7b:9a:40:54:8d:bc:3f:2b:e3:a5:27:f6:
77:d5:ff:a4:d1:5c:db:6e:07:76:3f:bd:26:f9:83:ae:9d:44:
e7:78:82:f0:49:ad:ba:6a:4d:c4:c5:1b:c3:b5:23:ff:5a:aa:
26:26:b3:6d:db:0d:05:32:bc:f9:86:30:02:95:c9:ef:8c:67:
88:11:35:0c:cf:f8:39:60:fc:66:b2:62:18:a9:b5:9d:18:95:
f7:85:67:2c:91:bd:3b:c7:2b:0e:bc:11:17:53:a3:6a:02:50:
cd:40:ae:d3:30:1a:ec:99:06:70:b6:0c:90:55:32:18:fa:2f:
45:e7:86:6b:14:bf:06:d9:52:2f:5d:02:c3:fb:be:ae:97:24:
a3:65:fe:f8:c0:73:45:69:78:6d:83:fa:f5:a4:ec:56:0f:dc:
20:3b:fa:0f:c4:2b:b9:9a:7d:a5:30:ed:97:32:c4:b3:30:4c:
04:86:b6:5d:26:aa:40:05:c7:34:af:89:6b:f7:6e:3b:53:ee:
2f:03:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net