Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
File: gTpCg40uRe1drUEUYG2XKaZQHSM.mft (raw, json)
Hash identifier: nzzvFmA14eHXCjW17YRXN0aFUa8AGmUW1G8t35WfJuk=
Subject key identifier: 24:36:B8:EF:A8:93:7B:F6:4D:56:00:1E:98:96:B6:BA:67:81:EA:F4
Authority key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
Certificate issuer: /CN=813a42838d2e45ed5dad4114606d9729a6501d23
Certificate serial: 0194BC3C2B5BDD8BBBF2500117D386D47797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
Manifest number: 0C89
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: gTpCg40uRe1drUEUYG2XKaZQHSM.crl (hash: +yik9KQLMBIGd1VEizWDpkss77dFxCbjWU6oWAPU6io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2b:5b:dd:8b:bb:f2:50:01:17:d3:86:d4:77:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813a42838d2e45ed5dad4114606d9729a6501d23
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=2436b8efa8937bf64d56001e9896b6ba6781eaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:98:0d:a1:9d:52:21:10:f4:4c:b6:29:6a:
99:51:0a:24:eb:1f:bb:1e:3b:27:41:b0:38:3c:e7:
e3:96:6a:51:77:d9:3b:c4:9b:67:b5:bb:07:9b:e4:
d3:62:5c:14:13:94:6b:6d:1e:70:a2:6a:3f:c1:e4:
59:99:e2:70:31:70:f5:90:ea:4c:58:ab:d0:81:b9:
ed:a4:8e:20:52:a2:28:82:77:23:f8:ee:58:2f:eb:
47:61:2e:bb:61:a9:53:81:ca:f1:cc:98:99:1d:2f:
91:b4:eb:42:6c:b8:8b:f4:57:7d:a3:9a:83:d7:c7:
fb:ca:07:b2:ea:17:af:21:3d:e0:6a:ee:a6:4d:99:
bb:7f:22:41:17:78:a1:c2:4a:cb:52:83:ae:0b:15:
4b:37:ba:f2:89:ad:d6:b3:b4:e5:99:e5:47:86:58:
c8:03:f2:b6:be:d7:17:e6:a0:48:59:fb:a7:0b:1f:
cb:5e:82:e9:3a:97:f3:4d:0e:02:1b:d2:f5:e8:9c:
cf:a3:ad:57:5c:19:10:a4:9b:fd:0a:54:7b:50:5f:
47:8c:ab:fd:e0:95:9a:ee:93:1d:4a:99:7f:60:77:
c4:23:38:36:b4:4b:f3:ca:0d:b5:ce:3c:2f:ec:ac:
c9:11:a7:65:f9:1a:e5:06:d3:74:e0:cf:38:22:a1:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:36:B8:EF:A8:93:7B:F6:4D:56:00:1E:98:96:B6:BA:67:81:EA:F4
X509v3 Authority Key Identifier:
keyid:81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f7:ba:2d:ff:37:b8:02:99:37:2a:56:49:65:65:2b:61:fd:
44:2c:13:c1:35:5f:90:ea:47:60:81:b4:28:3d:f1:79:67:9b:
58:57:26:56:18:ac:69:2d:69:26:f1:01:1b:18:61:98:70:0c:
1e:fd:99:c9:63:18:60:85:06:b5:f2:bf:ff:18:9b:ee:25:3c:
31:d2:67:10:58:9e:76:bc:07:16:8a:f7:c2:7f:b9:a7:22:43:
e0:c6:ce:c0:9d:ab:95:1c:95:39:fb:1b:f3:98:b8:16:56:fc:
86:96:ef:e4:f6:8e:bf:07:28:cc:70:fa:51:6c:0e:46:b6:de:
95:9f:3d:34:46:4b:f0:de:1a:06:0b:8f:cc:97:b2:e9:82:e5:
17:25:43:b3:c3:48:bb:85:cb:ed:27:e2:e1:20:95:83:d3:7c:
ff:9a:46:de:fa:58:77:57:39:9c:f9:0a:f3:b0:21:18:2d:08:
4c:1b:80:a9:f1:4d:8c:36:a6:8f:3b:40:09:7f:01:fc:31:d6:
db:c0:35:28:a7:4a:92:82:42:25:fb:a7:40:21:23:f0:c1:45:
07:4f:fb:42:32:f5:0a:3f:e1:2c:f5:06:ab:8c:71:9a:99:3b:
6b:82:66:19:30:8e:64:d2:da:c4:65:6f:b4:4a:5d:94:86:f1:
b9:85:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:07 2025 by rpki-client