Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: t+V3JvkaFcgeedCYNw8MjtnwGAdsJjBmjkm/7ihd+fc=
Subject key identifier: 3A:1C:92:70:DE:A1:36:D6:5D:E9:14:BD:4C:95:1A:20:0D:16:10:83
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 0194BCA974EC4BF6CDD9EA2A4561E5007453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 1163
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: Ni5jjDD53COx7aGCeLLsNKmYG4hM9fNZfL4owU214kI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:74:ec:4b:f6:cd:d9:ea:2a:45:61:e5:00:74:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=3a1c9270dea136d65de914bd4c951a200d161083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:cd:48:86:1c:f6:8e:b6:a3:05:30:de:e7:
1d:8c:38:ac:a2:93:64:01:6e:65:f9:bb:42:5e:d1:
22:50:a7:0a:e9:0d:e0:19:99:5e:82:54:61:57:2d:
5b:43:25:75:c4:c3:70:00:5f:c5:f8:f9:65:0c:aa:
1d:c6:87:84:03:57:50:93:0a:34:d3:89:aa:83:90:
ea:21:de:cd:af:4d:3b:fe:8d:73:52:2e:ef:07:cd:
47:8c:96:ca:0a:5f:78:69:5e:f4:94:4b:19:40:21:
fe:a2:2f:8a:b1:11:b7:5e:2c:77:a4:3b:35:df:64:
86:09:9f:86:73:62:87:19:a3:4f:5a:52:b7:fa:a2:
ea:18:d8:68:46:69:2a:44:c7:e9:d9:df:7a:5b:9b:
44:86:61:bd:64:11:c7:0f:43:dc:c7:51:ea:b2:4b:
5e:e1:2d:e4:f1:e8:46:ed:41:55:67:5f:c6:0d:de:
f3:01:cd:f6:e0:78:e7:aa:aa:d9:ef:ee:7e:9d:87:
46:c3:e7:70:a7:49:68:2c:71:af:5d:51:c6:a8:8e:
14:8e:11:de:8b:98:ee:98:8b:23:ba:3b:cb:a3:47:
0b:37:bb:1d:6c:6f:89:db:56:c6:c4:d8:1a:b0:bc:
c4:01:d1:ad:9d:15:a5:a6:c5:ea:d9:95:0e:2a:05:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:92:70:DE:A1:36:D6:5D:E9:14:BD:4C:95:1A:20:0D:16:10:83
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:69:a7:b0:9d:ef:7d:74:22:12:0f:7d:01:9d:02:01:a1:a9:
49:87:d2:26:31:bf:8e:c8:40:fa:38:9f:36:c1:88:9f:0d:3a:
84:92:42:83:e3:c3:1b:6e:9c:72:25:98:a9:95:79:1a:4a:b8:
11:f3:93:7c:76:e1:54:9a:e8:f0:c6:f3:c4:1c:d8:6f:81:5a:
9c:ce:2e:3f:10:62:e8:75:47:a1:ed:95:9e:fa:c0:37:b9:8c:
43:7a:6a:cb:e4:aa:22:83:4a:96:0c:d3:be:b3:d5:70:18:71:
b9:2f:30:ae:b0:70:88:95:67:f9:7e:19:d4:8d:8b:a4:15:3f:
fe:40:e4:f3:b3:6e:83:21:10:b4:59:19:67:f0:2d:3e:ea:72:
7c:03:8b:9c:1d:0a:2a:01:80:7d:98:fa:23:41:a4:75:e2:13:
92:e9:a9:8d:a3:6e:40:e2:d5:f0:94:64:33:8f:d4:2d:2b:7a:
53:cf:18:65:5f:1d:bc:36:09:e1:46:a4:84:ab:f5:94:73:11:
db:cf:33:d3:bd:44:53:81:8c:c0:65:16:0e:77:a1:74:36:8b:
d8:25:08:e0:53:03:8a:c0:65:e8:da:db:2a:78:85:27:2c:9c:
77:da:2c:91:cf:dd:9d:73:d5:35:b4:ba:6a:c3:a1:7a:ee:a3:
01:cb:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:44 2025 by rpki-client