Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: Gm0fdJ5RDDVprjgL2sN0L9BzDO71dY6M8/GdMuITMLI=
Subject key identifier: 98:B5:82:D8:20:48:13:AA:40:A7:30:50:A7:A4:FC:BE:6F:8F:E8:81
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 0194BD17D17CADDD84EC19DD440EA700FCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: Gg/vXPHiIq7uy74lOI3x/up9Bm5p7oNJVKudid8RkiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d1:7c:ad:dd:84:ec:19:dd:44:0e:a7:00:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=98b582d8204813aa40a73050a7a4fcbe6f8fe881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:d4:be:01:e5:c1:72:56:98:2c:10:53:0b:
6d:65:7e:2c:67:20:0a:40:8d:a8:ce:e5:3b:e0:8d:
fa:0b:ed:95:8a:b8:d5:1e:12:d1:b1:f7:55:e6:7d:
bd:e0:88:e9:51:f9:fb:58:1d:71:5b:23:aa:95:d7:
43:b1:f0:b4:62:08:05:5d:73:ea:83:4b:4b:23:59:
c7:68:69:24:2d:83:35:7f:51:9f:54:c2:c2:bc:85:
58:d8:70:bc:6d:80:73:8a:a3:cd:6a:54:34:95:5d:
44:eb:8a:d8:52:8f:36:f8:ca:0c:a5:fb:b3:57:e9:
0c:73:40:ec:22:34:7b:14:d8:af:47:b5:cc:89:e9:
4a:28:51:b9:c2:5b:e4:d6:88:65:e2:31:e4:54:fa:
6a:f0:11:50:82:2b:4e:9a:0a:fd:de:af:25:41:c6:
39:c9:44:0b:86:03:ac:88:dd:31:a3:d7:a5:94:65:
5e:b7:56:3d:11:cc:3e:06:2e:bd:9c:5e:96:e8:6d:
b0:71:b8:44:6f:c9:8b:2c:9a:9b:28:fe:41:4f:5d:
d5:b7:e5:66:ee:7b:91:00:5c:76:7f:88:57:85:24:
86:e0:f6:22:7d:1f:d8:ef:62:ca:8e:59:76:ad:b6:
91:d5:fd:82:b9:de:5a:fa:14:55:0c:78:49:4b:4c:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:82:D8:20:48:13:AA:40:A7:30:50:A7:A4:FC:BE:6F:8F:E8:81
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b5:96:66:e7:65:7a:78:95:cc:10:94:c0:8b:23:8a:ba:9c:
1d:52:a2:d8:6a:da:e8:7e:ec:a4:dd:58:a2:c9:ee:38:b1:a0:
00:1d:23:6d:2a:ba:6d:5e:c1:62:0e:e4:11:18:8d:80:7c:b5:
18:1d:04:1a:69:5e:71:b9:be:98:8c:72:26:86:cb:6d:fd:55:
6d:86:61:ee:e0:49:4f:17:ab:64:df:e5:a1:c0:e9:91:84:5d:
dc:22:48:28:f5:35:34:0b:24:f6:93:f4:76:78:fc:4d:8e:cc:
c1:7a:51:e4:77:04:61:09:5e:2e:49:42:25:a4:19:26:5e:9b:
33:0c:5f:1e:3e:9b:cb:d2:20:1c:dc:50:0c:58:f7:1a:36:3e:
1b:a6:31:da:c8:c2:23:99:b6:59:66:b2:c6:9d:3c:e6:92:33:
cc:cf:4c:51:a6:fe:c4:79:23:6f:5a:11:b3:af:38:c0:b4:14:
6e:a4:8b:e0:e8:00:60:e8:00:9e:f8:fc:07:59:6c:58:85:70:
77:5f:82:d3:1f:ab:04:64:34:16:99:d8:c0:40:37:cf:0f:80:
d3:b6:89:c2:81:6d:05:18:0a:ae:eb:a1:58:92:bd:74:70:5f:
a8:1d:d4:16:70:50:ae:12:74:66:f5:c3:3b:5a:67:6a:af:de:
a6:1d:99:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:23 2025 by rpki-client