Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json)
Hash identifier: IMZx4FmmOHu3IPUmWE9vNCfQTECo8UL7ObVS47/g/v0=
Subject key identifier: 8F:76:62:0B:76:25:5C:52:12:52:95:CD:76:07:A8:02:50:44:4E:D9
Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Certificate serial: 0194BD17464F0ACC2A6D179A82FDE03BC7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
Manifest number: 0EB2
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: /IcUKOVm6U4B7OoIqgU/t1KvPKaJqxFOUvkr4vNu4qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:46:4f:0a:cc:2a:6d:17:9a:82:fd:e0:3b:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=8f76620b76255c52125295cd7607a80250444ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:03:c8:76:8b:cd:a9:a8:78:7e:50:83:08:
72:3c:77:ce:a0:be:56:00:2d:41:c5:83:a2:ca:c9:
7f:e5:7e:18:f4:f3:1d:3e:da:53:30:62:cc:64:60:
f0:a7:b4:37:14:c1:36:09:82:b8:70:e2:96:95:bc:
6b:00:bd:1c:c6:26:8e:50:11:cb:de:f6:93:e6:bc:
45:30:82:39:7c:91:77:6a:60:8d:a9:3f:6f:c6:2d:
70:29:8b:96:28:c6:c9:bc:ad:0b:86:17:b4:f9:58:
ff:8d:61:c7:db:c9:53:a0:fe:e4:9f:89:e4:9d:c1:
bb:31:49:62:c2:0a:2a:0a:f9:12:30:79:bd:48:8c:
00:12:a3:3f:b8:8c:1d:6c:43:a0:28:14:3b:3d:66:
13:62:37:6d:4f:93:03:ff:c9:fa:3d:08:e7:05:b2:
39:ac:bb:db:df:82:87:f0:4a:4a:12:c2:3c:c0:30:
67:d1:f8:8d:27:b7:19:b6:a9:12:d1:39:19:61:6c:
4a:23:10:77:e6:16:c2:b0:b0:c9:45:0a:45:54:f8:
c3:13:9e:3c:a2:83:49:6e:56:86:7a:2a:fd:eb:eb:
f1:1b:ac:a9:9a:37:25:49:3e:22:24:f0:c1:f0:0d:
74:5e:6d:35:63:02:a6:3b:c5:dc:bc:f2:6f:01:86:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:62:0B:76:25:5C:52:12:52:95:CD:76:07:A8:02:50:44:4E:D9
X509v3 Authority Key Identifier:
keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:63:1b:8a:10:89:a5:fb:02:e7:4c:f6:5f:cc:48:ad:02:8b:
c5:cb:28:e3:59:f3:18:10:b9:d4:52:77:72:c4:75:63:c6:5e:
04:ed:f8:55:2c:e4:72:18:d3:c9:ee:3e:b0:6f:66:0a:f7:33:
f6:79:88:19:75:11:b8:de:3e:a6:3a:d0:5c:78:6a:b1:21:f2:
d2:76:af:70:7f:b2:02:6c:b5:5c:3c:af:db:2b:20:dc:a2:de:
0c:e8:23:3f:74:1c:26:f9:3b:4d:ad:2f:2b:49:3c:eb:3b:6d:
1c:ce:02:4c:28:62:e2:7a:64:05:dd:e3:b3:48:1a:f2:c7:c2:
26:1a:24:d1:e2:a5:8e:06:a0:eb:d5:dc:9e:f7:02:04:d1:82:
22:46:40:aa:b1:90:ec:7b:d6:3f:25:7e:9f:23:cf:d1:06:f3:
2d:ba:f2:04:38:b1:26:e5:8f:cc:ad:e2:d3:8a:ae:bf:07:9f:
28:16:89:d3:e0:a9:f6:73:cd:a8:6d:ed:d0:3b:2e:bf:b7:2c:
7b:a6:08:46:9d:24:2f:70:c5:f9:8c:2e:dd:83:80:b1:9d:ff:
d3:f8:66:e6:12:39:08:84:91:b5:ff:2f:ef:f5:fe:a5:e8:dd:
8e:6d:cf:58:f3:5b:5d:b8:b9:b8:3d:c4:32:07:04:43:37:34:
4e:04:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:00 2025 by rpki-client