Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier: DScf2/AuXaLtjv8bAtklND9QIPwJl/ziaDLKhm+zt8M=
Subject key identifier: 48:66:CE:57:46:2A:9B:DA:2C:9C:A1:7E:98:EC:FD:4B:98:A4:AC:D7
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 0194BC72BE8FAE89DFF11CD7157628EED8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number: 0E78
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: Brdqo4Xf3yZeUjJx1viRcXRJ0dHzY6JQvZTPVl31+Gg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:be:8f:ae:89:df:f1:1c:d7:15:76:28:ee:d8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=4866ce57462a9bda2c9ca17e98ecfd4b98a4acd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:56:45:27:1f:76:00:4a:42:a8:7c:46:08:
cb:85:4e:47:7c:49:95:6a:da:6b:bf:0a:62:ab:47:
7f:7f:77:5d:f5:eb:38:7b:6f:84:c4:8c:14:e1:4d:
ee:d8:ea:b8:b1:f2:fa:b3:bb:28:3e:28:66:e8:69:
e8:0f:71:c3:6c:d3:3f:e0:a8:23:6f:2e:8a:4a:1b:
b7:50:96:90:c5:b2:6e:43:46:45:7d:ea:f2:01:84:
22:6d:31:33:df:40:5d:a2:cd:b0:3a:0e:4f:a8:fc:
d7:7e:ac:18:74:53:79:e4:13:71:f4:e4:83:13:62:
4a:28:7f:7f:79:70:2f:48:66:5b:f1:66:24:36:05:
11:58:71:e3:e2:f9:17:eb:82:58:9c:98:19:dc:01:
9f:13:4e:77:c5:ee:da:ff:61:2d:20:d3:1b:16:eb:
38:2f:77:4f:a4:c2:1d:0d:2d:b5:95:b4:6f:35:65:
db:55:7e:18:27:f8:37:d9:12:09:75:bb:7c:54:20:
f5:22:22:57:54:25:87:06:dd:38:fd:0a:5f:71:65:
65:0f:68:27:71:61:5f:10:d1:d2:b4:a5:73:ec:24:
f8:df:4f:aa:b8:9d:64:f1:59:ca:46:30:65:55:e1:
81:e7:a6:51:bd:b8:7d:e6:18:0b:c9:e8:c3:4a:f0:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:CE:57:46:2A:9B:DA:2C:9C:A1:7E:98:EC:FD:4B:98:A4:AC:D7
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:af:8e:89:f8:34:ed:57:30:91:16:f3:ac:a3:b7:b9:cd:c4:
ab:68:5a:46:39:68:a2:a3:63:73:4e:b8:77:f7:f0:d1:65:c3:
6d:80:a6:85:08:05:2e:8b:91:39:d4:77:da:85:25:90:90:ca:
be:28:b9:f1:d3:4f:00:94:92:af:f3:a0:c9:0c:d0:6f:25:2f:
6d:9e:27:8c:b1:c3:75:9e:47:2c:03:07:da:95:dc:3d:e6:6b:
6e:55:60:bf:13:d4:8c:32:40:84:f2:50:d7:e3:ab:a2:b8:d9:
1a:eb:fb:27:9d:ae:83:78:31:5d:91:1b:33:54:48:5e:26:b0:
22:b4:cc:41:bf:1a:e5:f1:6a:95:bc:8e:3e:ae:a9:e1:88:f6:
64:7c:c1:87:7a:de:dd:54:3a:ca:87:6a:82:ed:29:d8:c0:0f:
48:1e:e5:8e:1e:79:f8:18:97:86:bd:88:91:bc:2c:3e:6d:21:
90:a7:f5:52:2a:f7:fc:3d:af:b7:14:3f:7a:3e:2e:31:cb:03:
18:17:bf:0c:28:91:13:71:5c:b7:f5:66:89:a9:02:62:df:2f:
51:f3:93:99:df:95:82:4b:29:9e:e9:da:9a:01:4e:19:df:8c:
48:83:b4:14:95:c4:4a:43:8c:36:d6:2d:a9:99:87:e0:58:51:
da:b5:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:23 2025 by rpki-client