Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
File: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft (raw, json)
Hash identifier: Rh1CNB319+L0WNbPEujO5P3uj3I7ioOj68a63GYRTIs=
Subject key identifier: 37:8E:27:24:12:50:13:60:52:4D:6B:C2:EF:87:7B:3B:CC:C9:55:02
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Certificate issuer: /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial: 0194BBCE482208D24BF2D88B5451028AC521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl (hash: iHiu7SUpgz5k+d7j5qDMFtqIYD2lOtgEWZXo/7Qah+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:22:08:d2:4b:f2:d8:8b:54:51:02:8a:c5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=378e272412501360524d6bc2ef877b3bccc95502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:fc:81:92:bd:49:b7:5a:0f:48:a5:ec:4c:
41:bb:94:5b:1e:1f:6f:ce:24:1c:4d:48:20:54:70:
60:98:ed:ff:de:bb:88:91:2b:d8:45:10:7c:39:91:
16:b4:3d:41:08:4d:a0:83:13:96:ba:58:9f:2c:71:
97:0a:a7:6c:06:1b:83:11:a7:d8:99:97:94:9e:03:
4f:a5:78:e9:48:7f:d3:b2:c7:86:29:88:62:d5:d8:
5b:4e:10:98:b7:0c:b0:12:e4:e5:5b:57:72:62:52:
23:46:8c:4d:32:62:19:b7:f6:53:a0:7d:db:e0:a7:
55:33:9a:47:27:1e:94:1e:7e:ca:09:81:9c:f7:29:
a7:88:f0:06:45:cc:60:67:1e:53:c9:2c:98:e6:3c:
24:2c:43:06:e5:e2:c4:f2:8e:b7:c8:44:d1:2c:fb:
bd:09:63:3e:19:a5:da:a1:11:aa:7d:0d:29:59:0e:
23:49:3c:ae:00:71:31:35:18:94:6e:0d:d3:4d:39:
0f:67:d6:ee:b0:17:e7:23:fc:29:0b:09:4b:5a:44:
64:76:f9:07:4c:e4:e2:d2:8a:59:aa:53:2d:a2:4d:
ca:f5:30:53:81:b9:cd:5a:fb:48:d9:d4:cb:82:05:
c3:14:42:3a:9a:0a:1e:2b:79:7f:f0:34:bb:d2:64:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:27:24:12:50:13:60:52:4D:6B:C2:EF:87:7B:3B:CC:C9:55:02
X509v3 Authority Key Identifier:
keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9b:2d:ee:1b:a6:20:ea:6b:e3:a3:7f:9d:10:0c:50:cb:bb:
d9:fc:65:e0:dd:39:65:6f:63:63:f3:7d:4d:95:80:4f:96:e4:
f4:9e:1d:9a:6a:87:c2:9d:9b:f7:ff:d4:40:a9:e9:55:f1:b4:
19:52:0f:69:34:50:ba:c3:b0:22:9c:a6:ba:38:e3:50:52:fc:
dd:5c:62:f9:7d:2c:d8:d0:a8:30:46:49:10:6e:29:32:f9:e7:
a9:d9:72:be:b2:96:b5:42:cb:26:15:4a:00:19:95:9a:e2:fe:
19:ac:b4:47:2d:23:45:12:07:60:3a:8d:b3:b1:10:5f:fe:d2:
6c:d0:03:72:c0:cd:73:14:04:7e:29:f1:d2:0c:70:78:76:fa:
4d:e9:78:7d:9b:ca:9d:52:a7:02:fa:f9:96:87:31:2a:5c:42:
38:59:6f:9f:7a:ba:b1:19:44:84:7a:7e:45:c3:a6:ff:02:10:
54:32:5f:9d:84:9e:2c:09:8e:ca:92:75:cf:a5:bd:d0:72:32:
fe:47:06:f2:44:a2:96:54:2a:5b:86:0f:8b:79:17:cc:49:68:
81:91:f1:de:bf:ed:de:1b:38:38:52:58:b2:9c:97:30:72:2f:
8f:79:a1:6d:57:b8:94:05:4d:87:e3:95:11:bb:0a:89:11:ce:
97:fa:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:34 2025 by rpki-client