Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: iGK/waMAixHgBgBR1Kg5GfWuplHZX8LcN/wuiPlMVTw=
Subject key identifier: AC:A2:D0:1E:16:D3:82:83:B2:00:F8:AF:2A:E5:43:C7:CC:5D:6A:DF
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 0194BD17E7D54003D601EC78B9251A0661D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 043C
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: Mpf+H2Ux2Qqgm9xw2sDJYSxaW1KlICIKldOskdwqfHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:d5:40:03:d6:01:ec:78:b9:25:1a:06:61:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=aca2d01e16d38283b200f8af2ae543c7cc5d6adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:e7:20:8b:61:11:a7:14:61:43:a9:94:3d:
08:d5:6d:d1:cc:05:10:34:d6:c3:70:b1:b3:a7:bc:
01:9f:5d:cf:5e:9c:b6:42:04:08:e0:50:a4:fd:7f:
35:91:36:ab:db:b3:ab:7c:0b:40:40:8b:b8:f9:57:
11:5d:47:eb:53:a7:a4:5e:eb:dc:e4:f1:10:77:dc:
cb:e6:a6:80:a1:e7:62:66:94:32:63:30:51:a7:5e:
18:23:b0:8a:c3:b4:da:14:a2:11:bf:dd:70:e5:a4:
7c:41:32:95:1d:6b:a6:bb:c0:bd:35:b3:c1:57:96:
b3:05:2d:6e:83:51:b7:ec:22:b4:17:08:d1:20:c2:
47:d4:7b:90:03:00:f0:23:81:8c:6d:8a:ff:8d:50:
93:df:df:02:77:9b:65:bd:18:d3:ea:37:aa:3a:e0:
87:43:f1:cb:79:ba:b4:38:6a:13:67:f6:d9:c2:3c:
a5:51:36:ea:f5:98:dc:6b:03:3b:40:93:de:1a:88:
88:4f:29:ea:92:00:07:4c:72:be:41:2c:1d:2b:f4:
14:2f:9a:02:da:eb:db:2d:e0:5c:84:0e:71:27:b8:
7f:9b:aa:c7:68:7b:7e:df:69:eb:58:45:8a:5e:38:
5f:9a:03:af:99:1f:35:52:7f:c8:09:af:78:28:df:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:D0:1E:16:D3:82:83:B2:00:F8:AF:2A:E5:43:C7:CC:5D:6A:DF
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:3b:63:fc:e9:d6:65:dd:a9:54:24:e6:d0:c5:af:d8:79:
96:86:06:a3:7a:2d:25:06:aa:ad:96:9a:45:dc:ab:ea:a0:d9:
d1:07:e1:09:59:b9:af:d8:8e:9e:03:e3:e1:2e:db:4b:d6:d0:
f0:8c:f1:7b:0a:4b:7f:a0:12:17:c6:0b:e2:65:16:1b:18:ee:
77:90:8e:55:73:b9:75:f6:ff:8a:7f:ee:7a:75:d5:3e:e4:9e:
47:9c:8b:ff:29:84:4c:6d:44:22:59:01:c9:80:dd:ae:54:08:
bf:d4:f5:c7:fc:be:fe:88:b4:4e:c5:f2:02:2c:4a:26:bc:7e:
18:a9:87:51:9f:25:b2:e6:0d:97:0c:62:2d:d1:e4:f5:18:cb:
7c:bd:5e:8d:43:32:87:83:62:ae:08:6c:37:ee:1b:b2:1f:34:
db:a4:b0:71:08:b0:24:8c:9f:9e:6e:6f:1f:fa:67:9e:d9:24:
5c:98:62:bb:bc:fd:7f:9d:c1:ff:b2:25:5c:32:22:e5:fb:12:
92:0f:dc:99:9a:2c:61:41:bd:e7:86:77:1b:a9:c2:ab:14:67:
42:b1:35:d9:7c:1c:99:0c:c9:e9:20:b1:2a:52:64:a5:f5:fc:
08:97:02:99:2c:0b:e7:96:7b:9c:9d:0b:ce:3e:00:bd:33:2a:
29:f6:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:08 2025 by rpki-client