Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
File: NLWONYkAecLWDA5LyOyCwbMxlfY.mft (raw, json)
Hash identifier: 9WoM8W/8eIRqAipw7onlrG3YueMohbOrKdfEpGQ3I5s=
Subject key identifier: 2A:4E:80:B3:DF:3E:52:D3:98:02:B2:73:28:70:19:07:64:A7:91:B0
Authority key identifier: 34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
Certificate issuer: /CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Certificate serial: 0196A87951814BB8085DEA4A17CE56189581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
Manifest number: 04EC
Signing time: Wed 07 May 2025 02:00:45 +0000
Manifest this update: Wed 07 May 2025 02:00:45 +0000
Manifest next update: Thu 08 May 2025 02:00:45 +0000
Files and hashes: 1: NLWONYkAecLWDA5LyOyCwbMxlfY.crl (hash: UKjRqY0v36sKzShYm9yMJg85AC7Sz2JkNnUeqYmFlm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:79:51:81:4b:b8:08:5d:ea:4a:17:ce:56:18:95:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Validity
Not Before: May 7 02:00:45 2025 GMT
Not After : May 8 02:00:45 2025 GMT
Subject: CN=2a4e80b3df3e52d39802b2732870190764a791b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:91:14:8f:22:ea:9c:2a:1a:bc:9c:d9:a9:
13:9f:d7:c9:5a:ab:86:8f:4b:63:9f:e6:05:d2:3f:
e5:28:de:48:56:2b:05:e3:5c:68:7b:d7:db:04:7c:
8d:5e:26:b3:66:52:47:9f:cc:11:59:0f:20:fc:db:
c7:27:38:39:2d:61:b5:b8:07:04:80:0b:77:35:bc:
e2:e4:97:b3:e9:3c:e8:e9:c0:48:10:fc:a9:b5:3c:
17:9f:d6:8a:c5:5d:b9:dc:76:2f:85:38:d3:6b:dc:
69:a6:24:99:17:9a:53:24:20:2d:76:14:34:bf:1f:
15:3e:5a:aa:f7:7d:f9:d6:4b:be:5c:f3:9b:d7:0a:
b4:3a:59:86:97:ad:1d:f2:4a:8a:3c:b4:c0:88:17:
73:8a:ba:ce:94:ab:13:1c:d2:e9:f6:f6:e4:e7:65:
ac:b4:e0:13:3b:03:33:66:e2:3f:f3:a0:44:80:1a:
82:0d:8f:6e:85:b0:49:8a:e2:10:7e:c9:0c:d6:40:
0e:64:aa:f8:72:e2:25:4d:13:5d:88:47:d5:e4:5f:
8e:67:3c:84:a7:eb:70:3a:0a:bc:cf:f8:7e:e2:2d:
11:e8:5b:1c:ba:f0:07:e9:4a:c7:3d:95:96:6d:3e:
31:2a:75:d1:17:d4:6c:0e:51:a3:7a:20:cb:3d:92:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:80:B3:DF:3E:52:D3:98:02:B2:73:28:70:19:07:64:A7:91:B0
X509v3 Authority Key Identifier:
keyid:34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7c:8b:65:8d:7c:a4:7a:88:a9:c6:75:4d:12:da:2a:2f:51:
83:19:f7:c4:03:fe:b1:8a:cc:18:c9:29:43:cf:82:25:e9:21:
78:a5:07:53:f8:23:23:9b:b1:48:79:cb:62:ec:34:2e:9a:34:
b2:e0:28:70:a9:ec:78:40:48:3d:ed:31:c1:70:84:96:12:d9:
50:18:dc:15:ba:d1:96:bb:21:20:82:ed:db:d5:33:59:c3:92:
5f:bd:d4:ee:c3:2f:9b:81:bb:67:64:73:76:8e:43:f8:d8:b6:
d2:db:1d:88:5d:1d:0e:b5:c0:12:bd:af:7b:8c:e3:2f:c8:a2:
02:f1:64:c4:0e:18:f6:22:fa:e3:5c:69:36:94:db:ee:83:ae:
65:da:58:7d:27:2c:5b:34:55:ec:1f:74:85:6e:b4:d4:c0:1b:
70:16:48:50:48:08:f1:9b:bf:ed:ca:41:86:8d:82:b6:4c:8a:
0f:6a:94:2f:f7:ca:20:71:c0:d8:7d:bb:19:33:cd:f2:e3:d9:
36:90:5d:fa:b7:18:f0:70:f5:f6:ff:77:c4:ee:a2:0f:4a:bf:
43:1a:ef:fc:d8:c6:d4:56:a6:ca:b9:e6:6f:cd:12:0c:83:3e:
13:6a:ad:47:02:cd:52:6c:d5:2f:7f:3a:25:83:18:8f:6c:b5:
23:0c:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:49:28 2025 by rpki-client