Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/703358-b69b-4893-ab4e-e0699d304919/1/gY1FuJShqq5kDmhOV8_bUw36umk.mft
File: gY1FuJShqq5kDmhOV8_bUw36umk.mft (raw, json)
Hash identifier: +H7hK5JlO2kmS4YrrolteuseLRfVJ6i2gCyak8XbxEE=
Subject key identifier: 77:E5:C8:65:F4:28:F9:F8:2E:FA:BB:97:FC:4A:A8:A4:72:18:A2:19
Authority key identifier: 81:8D:45:B8:94:A1:AA:AE:64:0E:68:4E:57:CF:DB:53:0D:FA:BA:69
Certificate issuer: /CN=818d45b894a1aaae640e684e57cfdb530dfaba69
Certificate serial: 0194BC3C65230CD26023D3BF2A56CEE64E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gY1FuJShqq5kDmhOV8_bUw36umk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/703358-b69b-4893-ab4e-e0699d304919/1/gY1FuJShqq5kDmhOV8_bUw36umk.mft
Manifest number: 08B8
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: gY1FuJShqq5kDmhOV8_bUw36umk.crl (hash: 4aUc6nDw6YWa6pg833L9SjluUD2chQcP9q0r/lq/9TA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:65:23:0c:d2:60:23:d3:bf:2a:56:ce:e6:4e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818d45b894a1aaae640e684e57cfdb530dfaba69
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=77e5c865f428f9f82efabb97fc4aa8a47218a219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:7c:f2:69:f0:d0:b8:48:e8:6b:b3:0e:e0:
3e:71:f6:b7:44:3d:5a:3a:98:83:73:2a:86:18:34:
1f:bb:ae:2f:54:3c:22:bf:9f:73:b1:76:a2:6a:f9:
1e:30:f5:e8:a8:bd:ed:29:74:30:27:89:00:45:19:
a2:fd:bc:c3:c4:80:31:28:c6:65:be:3d:53:40:5f:
91:02:dd:5f:47:0d:ff:0f:80:2d:df:e7:11:36:d0:
a1:7e:7e:06:9c:27:30:5c:d6:d0:d7:8b:f1:57:73:
85:a5:67:c3:c6:2b:6f:8c:b8:d5:83:3b:90:9d:b0:
2b:f0:ef:24:4d:2a:7c:24:22:9f:96:64:5d:03:95:
5d:f0:ef:c5:28:9f:3b:aa:08:57:43:e5:27:0c:77:
90:00:65:95:4a:b9:9e:35:d5:5f:20:72:2b:a3:8d:
8b:8a:5f:32:62:59:4b:99:b3:8a:1b:8c:cc:4b:17:
87:2f:a8:8b:e3:34:8d:60:02:a2:8e:56:5c:3a:31:
32:7b:9a:d6:63:7f:d9:d4:e0:85:77:30:b0:95:52:
33:f7:eb:88:6a:e7:87:24:40:a7:13:91:02:82:b0:
5d:92:00:56:11:6a:38:0c:d8:b6:e5:7f:16:e1:4a:
06:02:d9:4d:02:3e:23:7f:42:91:be:12:f1:55:65:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E5:C8:65:F4:28:F9:F8:2E:FA:BB:97:FC:4A:A8:A4:72:18:A2:19
X509v3 Authority Key Identifier:
keyid:81:8D:45:B8:94:A1:AA:AE:64:0E:68:4E:57:CF:DB:53:0D:FA:BA:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gY1FuJShqq5kDmhOV8_bUw36umk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/703358-b69b-4893-ab4e-e0699d304919/1/gY1FuJShqq5kDmhOV8_bUw36umk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/703358-b69b-4893-ab4e-e0699d304919/1/gY1FuJShqq5kDmhOV8_bUw36umk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:03:55:ab:45:62:cb:10:7d:2a:77:1e:9e:0b:f9:fb:88:46:
71:46:71:5e:b2:be:5e:e0:69:12:62:50:98:68:c0:83:1a:5b:
c4:bb:9d:ee:17:45:bb:a1:ed:73:64:cf:17:b6:1a:04:1c:5d:
26:31:79:92:75:bf:3d:3e:35:46:e8:23:aa:60:29:7d:0e:a9:
a3:6d:88:54:7c:ff:f9:b5:d9:5c:5e:58:b8:24:aa:ac:90:5d:
5c:ce:59:6e:27:4d:f2:1f:cb:be:80:be:51:b3:d4:83:13:fa:
6f:22:ec:65:96:56:c0:d0:8f:de:1a:9e:44:2c:2e:6f:84:92:
00:52:4f:f3:54:6e:b3:40:a3:32:0a:a7:d2:1b:e4:a2:43:56:
15:68:a9:35:41:6a:ca:1f:ab:7b:bb:fc:62:60:5d:70:6e:cb:
ad:e6:58:37:c9:63:03:53:df:cf:5e:94:72:1c:ae:06:c9:bc:
06:d0:75:a4:a9:21:69:98:68:c1:c2:82:d7:55:18:91:44:ae:
7e:93:51:c4:fe:cf:7f:7e:b3:47:13:79:e8:59:45:ad:f6:49:
b2:b1:9b:ee:3a:a9:b7:a3:83:dc:d0:43:b4:ad:fc:6f:33:b0:
f8:bf:55:f0:3a:79:16:16:a2:60:e4:f0:75:21:7f:99:7e:43:
fe:12:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client