Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: sfouyqRzd9ABcDtvMhM1z4Mar3YtdWzlfL74wNkizDs=
Subject key identifier: BA:53:4E:07:21:CF:29:D1:11:D9:6A:CF:A5:CC:09:0D:33:A6:4D:5E
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 0194BD17A542F94504EB60C859114DE9F898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: fFpuuaBMazfFD9DXxerkfe+YiA3SYRM6E1gDhFAKZXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a5:42:f9:45:04:eb:60:c8:59:11:4d:e9:f8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=ba534e0721cf29d111d96acfa5cc090d33a64d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:34:71:9d:44:15:29:35:79:ad:c3:d9:41:
14:0b:fd:52:79:21:f0:d8:cd:c5:6f:d3:fc:a1:d3:
56:91:43:0b:34:b6:c8:36:3f:46:4d:7f:ad:ef:cf:
1a:e6:fb:c4:b0:39:6f:2b:d1:f9:48:15:7b:e7:8c:
93:4e:ca:c9:fd:14:08:6e:4c:4d:2e:34:13:60:dd:
af:7d:f0:76:e8:8d:10:4b:01:33:bd:8e:a4:ea:c5:
52:20:a7:91:f2:74:2e:a5:e8:c3:d8:88:64:74:77:
e6:fe:85:6d:07:c2:09:5b:0a:4a:86:cd:35:69:02:
09:2f:e0:22:5f:04:4a:de:c4:bd:3e:5d:e3:e2:74:
21:64:fd:f4:99:4d:95:18:f3:61:70:18:e3:9d:a0:
a8:41:11:8b:57:47:20:03:64:d0:ae:3e:e6:6c:cb:
5e:6a:58:da:c4:d6:8c:7a:f9:1f:6b:6c:b2:7c:a1:
c3:cd:4b:bc:c8:60:60:8f:7e:4b:99:79:dd:09:5b:
33:59:c4:85:6d:6f:a0:64:ec:2d:84:33:37:9d:e8:
45:a5:2a:a7:3c:29:42:ea:6b:9f:28:88:8f:5d:74:
bf:54:0a:c7:b2:eb:0a:35:0d:d1:87:b4:26:82:72:
67:8d:7e:46:d7:f5:17:20:eb:7b:f2:2f:c1:2f:65:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:4E:07:21:CF:29:D1:11:D9:6A:CF:A5:CC:09:0D:33:A6:4D:5E
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:36:aa:82:74:a0:29:18:80:be:c9:f0:b8:4f:1a:b4:39:4a:
fb:6d:19:d3:92:ef:e6:78:f1:bb:2a:16:36:45:99:ba:37:0e:
a7:a1:8f:6d:67:bf:82:fe:b5:4e:61:32:a0:04:a9:bd:28:4f:
12:ac:0a:45:10:bb:6e:a5:08:f5:72:e6:41:83:44:cb:0f:eb:
74:e9:47:71:a9:f9:46:d5:8e:af:05:d9:c2:01:9a:60:8e:89:
9e:ca:00:0d:ff:39:63:34:72:ea:29:de:83:0b:7e:cd:24:a5:
ef:24:62:34:c2:e6:59:b6:56:8f:ec:62:3b:63:ac:49:74:a0:
ce:17:33:4a:61:15:50:01:20:82:ca:c5:d0:af:4a:7c:fc:50:
8a:c1:df:82:a7:fc:68:03:77:2f:5f:2b:cf:70:c3:a1:00:46:
ae:81:35:2e:18:11:a6:c0:3b:00:4b:67:31:75:a7:2a:f6:77:
0e:ea:99:8b:37:bb:36:94:93:52:08:c1:fe:c9:66:a7:b8:60:
4b:b9:7e:61:55:32:11:a1:73:43:65:86:86:3e:79:0f:b5:a5:
da:e3:ce:44:5f:ff:b9:f1:11:f7:25:ee:69:c2:5f:41:a3:32:
5f:f0:a0:07:fa:03:3e:d4:88:f0:d3:4d:a8:41:41:97:e3:a1:
2c:9a:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:08:24 2025 by rpki-client