Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
File: _gG0rfO5SE6VdhmUdLIbtCXgWvI.mft (raw, json)
Hash identifier: xWy/47XSI+9Rpx/CK9LxEegrxFBe4KZ8lHkonW9XTnw=
Subject key identifier: 46:4D:35:03:64:41:CD:A1:50:0C:B9:02:78:F0:46:BD:4E:B4:24:DE
Authority key identifier: FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
Certificate issuer: /CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Certificate serial: 0194BBCDE75E6E32521C72644781473770E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: _gG0rfO5SE6VdhmUdLIbtCXgWvI.crl (hash: FsaeOLoq1A8gCoHItWI0ew9t74fqxtUVoo6uXmB8Im0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e7:5e:6e:32:52:1c:72:64:47:81:47:37:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=464d35036441cda1500cb90278f046bd4eb424de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:29:26:a9:3e:5c:01:ee:bb:cd:3b:b4:aa:
4c:c2:87:61:12:a0:44:32:6e:ed:98:bd:1c:5d:ca:
96:57:28:22:b7:a7:63:26:ba:05:de:cc:61:de:38:
4b:3f:6e:e3:5d:ba:bc:a4:b0:07:6d:a3:9d:4a:7e:
b5:c7:59:50:bf:50:fb:6d:92:d6:03:62:60:26:cd:
72:e9:60:7f:20:aa:e7:b7:18:27:09:8d:6f:52:37:
3e:25:4e:ca:ab:75:5f:d5:0b:e0:0e:c5:75:46:3c:
e6:60:f6:2c:9f:5b:94:fc:d8:14:4c:f8:80:12:13:
7a:45:5b:3a:0b:63:a1:41:66:bc:79:77:48:39:a7:
25:5f:21:28:2b:a3:4c:76:33:e4:54:89:76:1c:d9:
a9:f4:f0:eb:cc:13:e4:3f:50:7c:20:e3:00:14:18:
aa:0d:aa:f2:0f:73:c2:98:1c:7f:96:b1:6a:9a:2d:
37:49:56:98:90:78:d2:49:03:bf:d5:fa:ef:03:08:
a8:d5:5b:d8:ae:48:46:c5:78:a0:f1:3f:14:25:04:
2e:82:cd:82:65:b8:fe:6c:4e:3d:24:41:e8:ab:6c:
62:6c:bd:f7:a7:31:be:d6:8b:d5:1d:26:19:25:ab:
6e:f4:0a:5f:d0:ac:51:5e:3d:80:4f:28:3d:85:d8:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4D:35:03:64:41:CD:A1:50:0C:B9:02:78:F0:46:BD:4E:B4:24:DE
X509v3 Authority Key Identifier:
keyid:FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:09:09:78:e3:38:9c:bb:a7:56:87:40:06:dd:1c:fb:9a:34:
e6:21:7e:d3:8b:9e:5f:e3:8f:b2:4c:af:bc:e5:72:37:b7:0c:
32:6e:2d:6a:e2:a8:c9:bc:c1:46:c5:f7:22:d8:30:b3:ee:35:
2b:ef:5b:9e:96:d0:d9:2e:bb:3e:75:2f:2d:05:52:01:ae:e6:
cc:2f:62:71:99:2c:06:3b:0f:25:a9:ed:eb:7d:fd:be:43:91:
0c:f0:6a:8a:a3:6d:32:17:b5:ac:20:1f:94:5e:b6:85:b1:b2:
5b:8d:f7:ad:91:5c:d7:8d:0a:45:fb:cc:bd:fc:15:a7:52:61:
92:b8:21:8e:e2:0e:f3:ab:e0:19:0e:5c:bc:a4:86:aa:d7:0f:
1f:24:fb:51:55:2a:f5:b5:27:3b:fd:a8:31:bd:77:ca:15:b9:
e1:80:33:49:75:ee:90:cb:5e:63:61:e9:ca:24:73:cf:38:b4:
11:40:bf:ba:15:48:99:d6:17:47:58:94:6b:c3:cf:b1:83:b9:
a4:57:1c:a1:e0:68:80:63:77:52:d7:31:51:68:02:fa:50:bb:
68:07:05:82:de:a6:05:9b:2d:c3:1d:6a:11:72:98:e7:6f:2f:
4c:37:2a:87:0f:0c:18:ad:18:fe:18:21:e7:e6:d6:6a:3e:48:
9d:d3:42:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:50 2025 by rpki-client