Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
File: gXNntPK_jrMfbhYk7Vbtq6nwITs.mft (raw, json)
Hash identifier: D2zLSH0QP7b2HjRnnzRHCytA8TZOTTo6WC2bUdx0ctM=
Subject key identifier: 35:36:5D:FE:67:FE:7F:39:06:C8:EC:40:17:4E:FD:32:18:52:4A:68
Authority key identifier: 81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B
Certificate issuer: /CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
Certificate serial: 0194BC3C41F6A14E4735B5414ECC496869D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
Manifest number: 0B45
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: gXNntPK_jrMfbhYk7Vbtq6nwITs.crl (hash: OO7IFmdd6o4nh0Cl6oGj0QRCRk8PnT7Msm34sBGl6ZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:f6:a1:4e:47:35:b5:41:4e:cc:49:68:69:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=35365dfe67fe7f3906c8ec40174efd3218524a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:e2:30:96:14:d4:39:88:44:eb:c5:c2:2a:
15:93:2d:94:17:52:e4:1d:69:d2:ce:a2:f9:94:79:
5a:ef:6a:21:2e:19:7d:73:1f:ec:45:5a:6c:8d:41:
8d:3c:3b:8c:0f:84:2c:00:3b:ea:0e:3d:06:f5:3e:
4f:14:99:c4:9c:34:9e:22:64:f8:04:89:c3:ce:ea:
6c:8b:11:55:26:0a:0a:5c:fd:e5:fd:75:9c:2e:92:
1c:69:d3:56:5e:77:18:4f:e6:aa:c7:a3:46:35:78:
47:b5:4d:0f:02:48:73:0f:21:d7:2d:ba:e3:84:9c:
3c:cb:60:7a:98:e3:05:af:91:56:33:85:98:79:1e:
d7:99:49:03:a2:95:50:16:73:f4:2b:40:4a:01:e6:
c6:b0:9c:6a:d8:73:29:1a:de:1b:36:b9:8a:12:16:
c3:39:93:0f:7f:a2:a9:0b:cf:bc:1f:69:3c:5e:5a:
53:2a:ae:d4:f7:82:91:76:ea:10:db:5e:2a:88:c2:
5a:92:f6:ac:d0:c4:b5:08:63:28:9d:90:47:c9:f5:
ec:c7:02:f6:9f:d1:e3:45:0d:2f:9f:5f:70:18:ea:
c8:17:67:9f:ef:af:ba:0a:61:90:8b:0a:37:8c:fc:
89:a1:38:b2:44:8e:61:a0:b5:e5:ba:0e:11:9e:1f:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:36:5D:FE:67:FE:7F:39:06:C8:EC:40:17:4E:FD:32:18:52:4A:68
X509v3 Authority Key Identifier:
keyid:81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1d:68:fe:bb:ec:d0:b7:fc:8d:65:8e:09:9c:d0:2c:31:9e:
67:11:0f:00:2b:7e:72:38:89:99:75:93:0c:6b:05:d2:1a:25:
0a:34:8f:8b:4a:4f:03:c5:8d:c9:a6:64:56:83:89:82:49:13:
b0:99:31:4c:48:bc:87:eb:2e:6f:57:68:21:4c:59:26:16:43:
35:4e:40:ae:d6:91:83:bc:b9:79:e3:96:4d:cd:14:9f:5f:9b:
35:a3:2d:17:0e:a3:a8:1b:f3:eb:4a:32:8f:7d:dc:90:0c:b9:
3f:ca:19:97:a6:7c:ae:8a:98:c9:f4:97:ec:62:1a:2c:38:da:
8b:76:38:56:f4:17:84:f4:bb:35:14:9e:54:13:06:ea:70:64:
77:0b:94:5c:d4:06:90:1a:37:b4:50:14:f4:c9:f0:69:7d:65:
bd:cf:2e:94:25:14:b1:90:0d:6b:81:93:f9:e4:04:0e:5d:9f:
a5:ff:81:3a:70:c8:c2:27:39:c1:1b:f6:08:2a:be:13:81:49:
90:3b:03:ac:9d:fa:98:1e:21:bd:ab:a3:cb:e2:4d:de:1c:0a:
65:e2:ee:8a:06:22:37:82:18:b7:e8:c3:e8:a3:70:2e:5e:4c:
21:da:0d:e7:b3:c0:4b:79:cf:c0:e0:e8:c1:65:2d:b2:6c:7a:
5b:19:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:33 2025 by rpki-client