Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: AAkOQGQO7XCPpfNuhnx+gKZzuzXjBqjgPNubzRZl74I=
Subject key identifier: 8D:16:3B:8E:3F:B2:E9:AA:7A:A3:B1:10:49:E3:43:10:7F:BA:FF:21
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 0194BBCE755958DD4810A42C0B9CEB998671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: sIQul41EtjE5sEizvXBVUtcDfCC5PrIgTvFcwxFUNkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:75:59:58:dd:48:10:a4:2c:0b:9c:eb:99:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=8d163b8e3fb2e9aa7aa3b11049e343107fbaff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:de:33:b2:3d:1d:35:5d:3d:c2:b1:f4:09:
9c:3d:f5:45:93:7d:88:6b:b8:f2:1d:de:c3:2b:7b:
d5:a2:12:fb:13:c8:df:93:60:17:24:60:73:00:48:
9a:02:8a:59:d0:ec:bf:5e:6d:7a:24:e4:7c:2a:62:
d0:a2:67:5e:f5:42:ff:81:8d:f0:7a:da:95:f8:20:
5c:f3:57:fb:97:2d:57:c8:ba:af:57:ee:fb:33:fa:
57:b9:ac:9d:3c:13:b8:62:c1:21:5b:6c:df:4b:2d:
0d:b0:b3:46:b8:07:46:7d:32:a6:ca:20:d9:d9:e2:
40:a7:35:a8:74:fa:70:a8:bf:e6:e1:92:92:b1:da:
6c:1e:16:d5:de:72:42:f0:d1:aa:f3:40:a1:c1:85:
9c:55:1d:6f:4f:d0:aa:12:78:ca:3a:50:6a:c8:60:
bf:bb:0f:7c:14:3b:22:8f:5e:8c:45:47:39:48:e9:
1a:95:84:27:10:ad:d5:de:34:7c:ab:32:0f:bb:1f:
6d:ef:70:2b:fc:93:da:13:55:2e:a1:b6:80:a4:62:
20:06:78:45:5a:37:cf:4b:cf:82:57:85:aa:c4:a2:
72:51:d3:e5:c4:57:28:31:a1:23:d1:73:02:41:cd:
bf:8f:3b:da:a9:b4:cf:f7:0c:84:b0:38:07:61:1f:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:3B:8E:3F:B2:E9:AA:7A:A3:B1:10:49:E3:43:10:7F:BA:FF:21
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:fb:ea:f5:7c:7a:c8:8e:eb:12:50:11:8d:c1:24:9c:8a:
73:fd:ed:7e:05:b3:2c:c9:d9:05:37:07:a3:f1:20:c5:db:12:
86:08:c2:38:08:7c:97:7b:8d:c7:45:94:4a:cd:b1:d2:c9:c3:
05:1d:32:79:19:e8:bd:06:8c:8f:7e:4b:e3:32:39:56:80:26:
64:c2:e3:6b:0a:61:c9:68:ad:ec:3c:d3:b1:23:28:4c:1c:44:
4b:19:d7:2f:ac:1a:cb:3b:2e:de:9b:6e:e0:5c:6a:05:55:f6:
cb:67:73:72:31:01:29:95:14:ba:01:04:a3:f8:03:9a:ef:bd:
f7:e3:5f:54:74:fd:a9:fa:32:3f:b7:11:4c:95:6d:60:38:2c:
a4:71:0e:e0:ae:bc:96:0a:ad:4d:7f:eb:67:5b:4e:42:43:5e:
4c:18:e0:76:8e:7a:03:7e:38:85:fd:81:30:ff:48:99:93:bb:
a9:2f:34:01:23:c0:5b:39:88:54:1c:4a:f6:02:87:4a:cc:04:
db:99:ae:d4:5c:f0:9f:c7:c5:10:27:77:70:c1:63:f2:55:cd:
00:c2:07:af:e0:3e:9c:4a:3e:f0:d3:d1:13:d6:b4:66:fc:50:
42:04:e7:6b:e3:08:ed:5a:23:dd:53:56:da:4f:b2:c8:34:36:
25:a2:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:02 2025 by rpki-client