Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier: APceiw2XBJcZZwEszcT+SscH0royBHPC6HE8O6t7Mm0=
Subject key identifier: 70:CE:F3:FB:9A:27:44:C5:77:AB:B7:33:BC:09:05:A2:AB:43:FD:A7
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial: 0194BC3C3112D6E37DE0F43B98840E9175FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: caiOEw0urmPODB9Ex9pFsNkx9q+1m+MaD/ZNS113qGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:12:d6:e3:7d:e0:f4:3b:98:84:0e:91:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=70cef3fb9a2744c577abb733bc0905a2ab43fda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:64:5b:76:b8:6b:52:1d:75:e4:6d:c1:f0:
44:0a:4e:ec:f0:0a:9a:0f:70:1f:24:de:e5:93:dc:
4f:e5:ae:41:ff:97:2e:dc:da:f9:fb:24:e4:89:1f:
1b:ef:51:96:ac:96:d6:45:78:bd:4f:52:2d:c0:64:
e5:bb:46:83:7c:05:d6:84:39:84:48:e9:85:3c:1e:
21:0f:13:09:8c:55:3e:24:e5:1a:e6:5e:f9:18:0e:
cb:47:21:2c:df:41:ff:db:91:ae:95:7c:14:42:e2:
74:9a:05:0f:9a:a1:49:ec:9b:92:3a:ae:f0:92:b9:
b2:4d:b8:ab:65:44:39:2f:0c:d0:99:43:b5:6a:05:
90:35:e2:4d:5b:e7:a7:02:cb:8a:38:8a:7c:1d:08:
db:c6:5d:df:7f:d0:0a:83:43:a6:4e:31:03:b7:c9:
0f:21:5f:21:ff:63:5f:97:84:30:12:39:4f:60:01:
aa:0a:6a:70:05:7a:b5:ca:3f:73:49:52:88:c1:d5:
dc:8e:3f:b6:d8:fc:8a:dd:8c:2a:1e:ee:d8:92:7f:
85:8c:e5:1d:ab:60:80:a4:80:2b:b6:f7:45:9f:c4:
9d:ee:ad:ac:0c:9e:c0:fb:a3:a4:65:f9:e9:3e:39:
3e:51:27:99:19:9f:10:c2:00:47:e7:bb:52:8c:70:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CE:F3:FB:9A:27:44:C5:77:AB:B7:33:BC:09:05:A2:AB:43:FD:A7
X509v3 Authority Key Identifier:
keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:39:a5:09:18:3f:f4:ae:1e:bd:54:90:15:88:fd:68:a3:d1:
fe:a2:e4:22:6c:cf:4a:fb:97:89:66:56:c4:25:c7:ff:da:c5:
69:d3:14:13:7d:8c:1b:a8:2a:11:4e:e7:f3:a2:67:08:c2:0f:
26:c9:52:a4:56:73:77:3d:52:66:d4:04:59:56:0f:3b:66:a1:
ae:fe:6e:45:a8:f1:df:92:af:5f:95:49:66:fb:ed:e8:b8:34:
21:3b:0a:25:35:b7:b4:e2:60:a8:fe:67:18:25:12:9f:cb:c2:
34:36:4c:a1:47:49:b1:88:8d:9e:0e:45:94:e3:a0:4b:b2:88:
fb:90:48:ee:55:96:70:fc:a8:77:a8:01:4d:be:df:ae:c8:ac:
77:84:c5:91:7b:c6:32:fc:e5:2d:b9:45:47:49:dd:1f:82:aa:
bf:5c:62:b8:cc:1f:0e:d2:47:a4:4a:4c:e7:2a:9f:22:7d:0e:
c2:dd:5c:42:18:e9:c3:e9:14:dd:f2:f8:2c:76:d7:09:bc:a4:
23:e1:dc:df:87:16:46:d5:cc:82:a3:6f:5b:77:1f:e4:99:33:
59:90:41:c3:50:cb:c0:fd:71:88:6d:41:8b:62:ba:33:0f:2c:
8e:37:7c:cc:bf:2a:37:fd:b4:6e:b3:51:f9:f9:c8:54:c4:7c:
e6:55:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:50 2025 by rpki-client