Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
File: gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft (raw, json)
Hash identifier: 9fZU0/leGDIcZg55PtXhvFoxb2CO4tRsSlqVhR44Oiw=
Subject key identifier: DF:95:F3:49:DA:7D:17:F0:5A:79:E1:00:22:E5:13:32:B7:07:0D:2E
Authority key identifier: 81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
Certificate issuer: /CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Certificate serial: 0194BC72A5EC7BCE41DB0C6C53864C56A92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
Manifest number: 0271
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl (hash: PZtrKq6uDM9uP2wRysODoIatIhAP0D4wz9iT5lXthao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a5:ec:7b:ce:41:db:0c:6c:53:86:4c:56:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=df95f349da7d17f05a79e10022e51332b7070d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:f6:90:3c:c9:e1:c3:dc:f5:52:60:24:07:
5c:80:b7:01:0f:e6:9b:f9:f1:5e:f0:6a:c3:69:ee:
7a:18:b4:db:5f:01:68:59:da:6a:d3:e6:e6:4d:37:
63:5d:6f:78:0d:21:34:f3:66:b6:12:55:16:ce:cf:
bf:c0:09:a9:49:64:f2:47:bd:89:fc:86:07:66:18:
2a:a9:43:93:bf:d0:8b:3b:58:89:97:6b:89:bf:ff:
00:b3:a0:1c:65:3c:9a:4b:3f:94:fb:57:dc:34:31:
35:39:ec:58:98:94:f7:e2:c1:8f:7f:55:94:ab:8f:
03:3b:ba:2d:7c:6b:38:d5:62:a9:b0:22:b7:bf:94:
31:76:86:04:01:d1:e9:ed:25:2c:86:c3:d6:5c:10:
e8:cd:f5:36:14:48:73:0f:8e:4a:4a:7d:d3:37:50:
b4:50:d4:73:c1:ac:a4:d9:6d:b2:19:ea:5d:2a:bc:
36:1b:98:1d:2c:64:c2:61:36:71:b0:09:52:83:af:
2c:c5:77:ee:86:0f:5c:dc:35:19:2c:61:ef:4e:2e:
d2:db:21:55:54:e5:06:66:70:01:60:b2:79:47:51:
70:96:b4:5f:ee:8f:0e:cf:b6:89:8c:bd:d0:9b:8f:
8a:38:9f:e9:12:d4:dc:c5:c8:c1:37:a7:aa:7b:ac:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:F3:49:DA:7D:17:F0:5A:79:E1:00:22:E5:13:32:B7:07:0D:2E
X509v3 Authority Key Identifier:
keyid:81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:79:17:14:82:52:52:3e:06:41:c5:1c:47:04:58:dd:57:3f:
cb:ac:90:9a:f6:2a:7b:b2:f7:7d:a2:20:d9:a6:85:fb:dd:df:
89:54:95:2d:90:cc:00:f2:49:f3:fa:a0:47:12:fc:67:be:50:
01:63:4f:14:7f:68:7b:fb:95:c1:ea:af:85:d1:cf:84:37:34:
85:58:7d:d8:22:a7:ac:37:d9:29:a9:a4:80:33:ef:65:2e:d0:
37:86:83:7f:15:56:e2:d9:e0:c5:3e:2d:f9:bd:da:d2:b0:20:
6f:bc:24:de:43:ec:7f:2a:72:14:53:bd:60:42:5f:12:30:51:
43:b2:e7:4d:ec:74:44:16:9a:0b:64:cc:b5:0e:3e:77:8f:94:
50:8a:bd:77:fb:7f:06:69:7e:f2:53:f6:5a:89:3a:57:77:8f:
dc:e7:94:4e:32:36:51:7e:a4:0a:28:d9:d3:24:ed:d6:a5:54:
8f:21:da:37:1e:a6:92:74:ab:7f:90:0e:6f:f7:04:99:29:b1:
a0:b3:1a:e0:e2:9c:1e:1e:88:78:0a:ef:fc:39:db:68:a8:db:
6d:fa:9e:72:56:5e:94:74:e7:ca:42:00:93:2f:5f:64:aa:7a:
48:54:16:0a:5a:40:a5:1b:6b:8e:9a:ab:91:63:9a:e4:bd:8e:
f3:e8:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:41 2025 by rpki-client