Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
File: GWa02kiR-4CQGCvDO0m1liT8nZs.mft (raw, json)
Hash identifier: H4Cpda/ku82kCSTTAUb29RbtPTxlGOlMepMRwiLmHKs=
Subject key identifier: BA:94:48:67:E5:26:E1:55:CE:DA:2A:A6:55:41:32:34:84:E9:3C:72
Authority key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
Certificate issuer: /CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Certificate serial: 0194BBCE35437E8D843CDF407FA51AA7C091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
Manifest number: 1316
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: GWa02kiR-4CQGCvDO0m1liT8nZs.crl (hash: wsr3DM4pLz6VFDvEiBtGoIyKN5pizMC7kwrzyANvVsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:43:7e:8d:84:3c:df:40:7f:a5:1a:a7:c0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=ba944867e526e155ceda2aa65541323484e93c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:cd:e8:7a:74:ad:d9:bf:92:6e:52:ad:51:
9a:b1:0b:b7:56:bf:31:a2:7c:f5:37:62:84:94:e5:
44:b9:f5:13:5a:f3:12:21:6e:65:34:d8:a1:c9:04:
80:cc:61:fb:3b:24:e9:39:65:f0:05:4d:0d:e7:84:
ff:1e:ed:b6:dd:b3:bc:7f:11:56:c0:7c:f8:9e:d1:
47:45:d5:1b:10:59:7a:29:c5:f7:92:93:f1:90:2b:
0a:51:e2:c0:6f:67:f0:68:7a:d7:d4:64:e1:83:0d:
f1:65:3b:68:3d:51:2a:3a:8e:b8:2d:e0:e1:59:ba:
d6:b3:a3:d3:8b:09:8d:be:46:d1:f3:29:05:37:b4:
75:69:73:fa:cb:8d:ac:b1:f9:f9:e8:99:a5:bd:78:
29:b6:08:46:3c:14:c5:08:a3:82:e4:c1:42:29:7b:
11:3e:86:11:8f:31:9e:c0:30:6c:ae:fd:2d:e6:44:
e1:0a:99:f8:46:73:ea:5f:ac:9f:8c:88:49:f6:e7:
8f:9e:80:6e:6c:bd:d1:0a:4e:24:00:5c:2d:09:50:
4d:91:07:3b:32:5a:08:02:7e:9f:3b:39:03:82:27:
42:53:ed:a2:b8:7c:15:a6:02:1c:5e:bb:96:a5:18:
58:47:fb:a7:b6:b2:f5:ee:b4:ca:ee:5f:ce:f8:25:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:48:67:E5:26:E1:55:CE:DA:2A:A6:55:41:32:34:84:E9:3C:72
X509v3 Authority Key Identifier:
keyid:19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:37:bc:b6:a1:6d:89:2a:88:5d:1b:19:e2:04:97:af:0a:8f:
ec:aa:9f:e9:2e:a3:7f:f7:8b:e4:1f:31:8f:57:35:e0:82:60:
66:2b:a6:bb:5c:14:ed:5d:ca:00:39:bd:a5:4b:4e:3c:e6:a6:
14:f4:ea:37:93:0a:29:1a:90:5e:e7:ed:38:a5:ce:a1:da:b6:
1f:6c:ac:eb:36:75:94:ca:a8:bb:4f:17:5e:64:49:41:82:6d:
f1:6c:6e:c3:8e:d2:bc:e9:4d:76:b7:12:55:02:34:8e:4c:6d:
e6:4e:f5:05:b7:88:53:3c:96:7a:eb:2c:c1:ea:75:78:bb:e4:
29:05:9b:52:44:e4:82:f2:b7:95:c4:09:05:2e:ca:37:59:bf:
bb:ed:07:18:af:47:62:4f:b4:ef:ed:8e:21:cd:5a:64:9e:c1:
62:a4:48:ba:4f:65:7a:02:49:71:a7:0a:8b:f9:8b:ae:44:88:
76:af:f9:7d:dc:af:5b:6c:66:b1:63:59:d1:fd:c6:e4:70:7d:
93:62:eb:df:94:45:98:46:6e:f2:1d:75:91:db:da:5d:ca:57:
2c:a5:a3:aa:19:07:2c:db:76:f2:4b:1c:34:4a:12:fa:09:8e:
e8:a6:30:3c:0a:e9:89:a0:63:d0:5d:18:28:5e:6e:a2:a6:02:
4a:70:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:32 2025 by rpki-client