Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier: hLscyC4MLDJ7r0WzXCnGrcba8JYKw6bPgcV1X6vW7YI=
Subject key identifier: D4:EF:C9:02:A8:62:57:F5:92:DD:C9:51:0D:69:78:ED:D7:F9:5D:58
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial: 0194BD17E1F742B30A5E1D1D3A995D86E2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: UdMZGlDxpMMKirGc9XglozmYen1yPxGFlLLwDumbnl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e1:f7:42:b3:0a:5e:1d:1d:3a:99:5d:86:e2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=d4efc902a86257f592ddc9510d6978edd7f95d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e2:0f:d0:d5:c0:e0:33:14:be:0d:6b:a4:98:
78:1f:96:54:97:e0:5c:ad:31:6a:70:d9:f6:da:5d:
b3:b4:cc:05:1b:a1:43:36:a1:26:a4:9b:80:ca:2b:
e2:5d:e2:71:bd:9f:21:ac:15:1d:b2:71:6f:d3:05:
e1:24:6f:25:00:46:1a:bb:db:0e:7e:3f:86:6e:5a:
37:eb:6a:88:ed:9f:49:ea:ce:cd:ca:4a:db:48:de:
d5:5c:4b:36:7b:16:32:78:3a:03:de:b9:12:03:4c:
59:c7:1f:a7:2d:1c:92:95:a8:c0:d7:90:de:d2:2f:
da:9a:91:b4:e5:32:a6:07:88:13:17:ac:e5:af:79:
3c:0c:46:79:11:ed:9c:ed:9a:eb:71:17:99:14:61:
d0:a3:f3:63:5d:6d:e2:31:24:04:5a:8d:4b:c8:a4:
5a:d1:d7:31:88:f3:5d:e5:47:c8:67:a6:95:d4:5c:
8b:5e:98:89:af:41:18:96:33:dd:bb:59:92:a5:22:
d3:d0:4c:38:be:60:d1:44:cb:9a:65:ea:66:ab:b7:
44:dc:2f:08:a8:c8:e4:bf:ac:2e:3c:ea:4d:db:ec:
34:4f:d5:94:51:82:57:0a:ac:96:a7:94:ba:4d:5e:
ff:49:f3:50:60:dc:47:57:2e:71:5c:cc:38:85:4b:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EF:C9:02:A8:62:57:F5:92:DD:C9:51:0D:69:78:ED:D7:F9:5D:58
X509v3 Authority Key Identifier:
keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bd:99:d5:fe:b7:23:86:18:92:10:1a:13:0e:0f:96:d3:b0:
d5:7e:ea:f8:73:d7:c3:93:ff:7e:b5:ed:05:9b:65:4e:b6:12:
20:6b:dd:b6:d9:38:b1:a6:c5:7d:0a:59:1b:b8:49:22:6c:25:
6a:e7:f5:f9:28:ad:8d:3b:61:38:95:c7:4f:81:2d:4b:31:e8:
29:e7:27:a2:a8:16:5c:77:f9:03:61:f7:c1:c2:c6:69:db:6b:
86:ea:b4:23:77:1b:05:3f:58:de:c8:ed:a3:29:a9:6f:34:99:
38:31:77:c8:0e:f5:68:ad:04:de:c4:e0:2c:ae:a2:1e:53:40:
54:ed:26:fe:70:c1:cb:95:26:f3:e1:55:b0:d3:9e:be:d0:a9:
39:5d:ca:2c:c9:98:41:e9:6f:12:26:f9:2e:c7:aa:ac:74:0e:
9a:f7:a1:cf:30:38:5c:b4:2b:9e:5d:6e:eb:b3:da:c3:ae:99:
b0:db:95:10:ee:8f:a2:ab:b1:17:81:26:26:0c:d6:d3:02:13:
e6:23:a4:e8:cf:22:80:e5:0e:c9:e9:cf:c6:89:c6:d5:67:c7:
99:e2:c6:ef:73:65:80:e0:76:1c:c1:da:a6:9a:6a:97:e8:64:
a8:9e:ca:7b:e6:06:8c:34:fc:2c:d9:a5:7f:be:70:5a:d0:d0:
93:96:36:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:21:06 2025 by rpki-client