Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
File: gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json)
Hash identifier: HcOb4jBPzgfdidUps2+xATxpe+Cs/ZZsJMFVSZhaoYQ=
Subject key identifier: C6:19:17:C9:2D:5C:64:33:0E:7A:7F:E5:30:D6:9E:8F:CB:08:40:F8
Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
Certificate issuer: /CN=80792bdcb621cbf21c0456333b843ca32c131afc
Certificate serial: 0194BC72F5B40E69497094632C5DF4301454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
Manifest number: 0EA0
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: oz6AT6tqA4RdMHqJoYnaSRE7DYTUUaIoaYeXTWQnQDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f5:b4:0e:69:49:70:94:63:2c:5d:f4:30:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=c61917c92d5c64330e7a7fe530d69e8fcb0840f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:4c:88:c9:07:0f:1b:df:3d:c0:42:76:8e:
18:7b:8c:9a:94:25:ae:98:e9:b7:f1:6f:5f:22:9e:
e2:cb:8a:3c:7f:06:4f:64:34:0f:62:22:09:ee:ab:
a7:cc:00:12:f4:29:29:61:3d:42:ed:41:de:16:f5:
66:2a:9a:78:99:db:a2:ad:da:5d:ca:ed:e5:5e:d4:
ec:bb:4b:2a:5d:cc:ac:6d:7b:f6:01:6b:fe:6e:e2:
d7:fe:4f:08:55:98:7b:2f:16:8a:e5:fb:d6:f9:e0:
1f:6d:5c:c4:19:bf:f2:15:47:02:67:f8:20:b9:2f:
89:a7:3a:84:55:e3:85:08:13:81:aa:88:55:b3:93:
5b:04:3f:61:46:a5:c2:04:19:75:63:02:81:46:12:
52:8c:e0:7a:cb:ba:7c:c7:79:ee:0b:fe:22:45:54:
63:03:25:4e:d0:74:c8:3d:3b:a8:51:03:51:b3:1b:
13:7e:41:56:16:87:84:f2:9b:c3:23:cf:d9:aa:47:
3f:5b:ea:de:44:05:0e:eb:03:ec:88:fa:31:4e:fd:
b7:2d:a4:53:21:76:93:7e:02:12:85:27:7c:74:c0:
5b:37:f9:b2:36:4f:95:ff:21:e1:16:a3:1c:bb:17:
00:da:4f:72:4a:26:a9:91:21:fe:33:4c:64:70:b9:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:17:C9:2D:5C:64:33:0E:7A:7F:E5:30:D6:9E:8F:CB:08:40:F8
X509v3 Authority Key Identifier:
keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:12:9f:56:70:9f:c9:d0:9b:fe:70:2e:46:27:a7:52:6d:f4:
2f:0d:22:62:58:e6:21:31:23:33:24:a5:50:6b:66:e2:53:05:
f8:42:03:54:e6:95:e4:e9:f6:fe:66:ff:a2:eb:e5:25:05:e4:
21:e0:5d:1c:a3:80:5f:30:00:4d:9c:4e:45:1f:f5:e8:a2:34:
cb:34:25:2e:eb:88:35:ad:53:17:4f:78:8e:08:45:2a:5f:63:
33:a1:b5:80:a1:1e:55:33:32:68:1d:58:16:18:99:bc:a4:11:
90:73:11:69:57:a3:e1:32:92:ad:ef:b5:95:70:4d:55:5f:70:
b3:f0:69:dc:64:fa:7b:cc:0b:b3:a9:1e:67:7b:9e:27:13:5b:
25:b2:1c:58:6c:15:8c:8c:35:a9:67:16:91:29:4b:96:bc:25:
c7:4e:51:b0:75:59:14:89:38:15:52:3d:5e:98:22:99:0b:ad:
67:e2:79:4a:0d:f4:65:0c:b8:f0:c3:ec:76:8c:cc:cb:f4:79:
ed:af:ec:e9:cb:11:40:80:42:35:e8:e1:7b:35:f0:9a:ed:56:
5f:ba:da:ec:8d:72:05:31:a6:c5:64:ab:9f:4e:13:e4:e2:f0:
b2:fc:5e:89:3a:00:64:f8:35:77:cd:51:26:d8:ea:28:13:c0:
18:a2:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:32 2025 by rpki-client