Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json)
Hash identifier: dNVcS/m3T+ayoMMUpBGZsR4a8wjhhK8jPWuuYh+s17k=
Subject key identifier: 30:39:70:2C:5E:D5:28:9C:69:BC:16:27:9B:51:DF:9F:E7:A2:08:FE
Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Certificate serial: 0194BBCDB0D3373E0CB023F35632F7BBBF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: ptj0TWcqGdSd7U7Ktumso9XpdY74zChnAuVL3wuAEMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b0:d3:37:3e:0c:b0:23:f3:56:32:f7:bb:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=3039702c5ed5289c69bc16279b51df9fe7a208fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:52:eb:f7:56:e7:62:6c:5d:28:40:b2:ac:
ee:a1:be:d8:2d:5a:de:11:9a:0b:b4:9d:f9:b8:f5:
7a:7c:98:9d:b2:65:a8:80:40:40:df:b4:29:3e:68:
be:da:2c:13:45:bd:5d:ef:60:73:70:d4:67:06:3e:
72:63:81:cf:a2:61:6f:37:4f:d3:25:1e:7e:29:62:
3a:46:06:d0:1a:fe:c1:4d:67:85:c3:6c:b7:f5:a4:
bb:69:28:4b:5c:db:6d:ec:af:17:a0:6f:09:36:7e:
73:1c:32:78:da:b1:ab:5c:2f:a5:48:03:88:3f:15:
0f:36:60:0d:f4:da:54:51:b5:65:cb:8f:49:d0:0d:
36:77:1d:c1:82:91:99:66:96:8f:8c:de:fb:d0:37:
84:8e:42:3d:fe:77:23:8a:09:6c:72:08:45:3f:ad:
bc:3a:14:1b:4b:85:2c:03:25:cf:4c:4a:25:63:c0:
b9:7d:b1:0d:a0:73:a6:d3:27:9c:57:39:58:bb:85:
38:a3:08:72:f7:15:cd:a8:14:ae:ce:77:45:85:f7:
6a:03:52:89:02:6f:24:9a:7a:67:f7:13:c1:14:e8:
96:05:77:a9:70:2e:fe:b6:a7:7a:3e:b1:6a:7a:43:
95:96:1a:5e:80:3c:e6:a3:e8:8b:53:d7:35:37:1f:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:39:70:2C:5E:D5:28:9C:69:BC:16:27:9B:51:DF:9F:E7:A2:08:FE
X509v3 Authority Key Identifier:
keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f7:12:a7:31:05:85:44:99:5b:5d:ea:2f:7a:86:5b:cd:9c:
20:a3:d6:ef:61:f2:1f:27:eb:a0:ad:8d:2c:17:e7:c9:1e:36:
a5:fa:f0:ee:a4:ca:4f:20:14:e9:75:a4:ef:46:bb:da:e9:d0:
eb:b1:68:70:fd:20:93:6c:7e:21:55:03:96:43:3f:e8:79:57:
4a:86:12:ae:32:43:ce:7e:2b:6b:b5:2d:ca:73:c7:bc:a8:5d:
fb:f3:9e:9c:65:52:5d:2c:59:4b:39:05:25:96:66:74:5d:f1:
9e:90:84:8e:98:fb:0f:13:8f:70:03:94:02:bb:70:b6:1e:ef:
81:69:74:43:4c:4c:0a:77:ce:ed:4a:e7:af:8f:54:08:55:e2:
40:de:4b:a8:66:4f:eb:4d:bc:da:be:b6:63:12:64:90:6d:dc:
d3:29:64:f5:a6:34:02:bf:89:12:f8:9c:14:93:37:d5:81:42:
bb:9e:2f:aa:44:1d:3c:be:6e:e1:d9:09:53:5e:6f:8c:2e:37:
f5:f2:a2:3c:28:e0:02:e8:3f:52:43:ea:6e:4a:b6:5f:69:df:
4b:a4:dd:a6:2b:11:31:25:f6:49:b7:d8:c7:16:e1:56:3e:ca:
4f:14:1a:7f:39:6d:71:5f:35:fe:03:2d:e9:89:2c:23:91:e0:
14:d2:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:06 2025 by rpki-client