Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
File: GyN3Poe34e0LVeFQuncWsYJbPiY.mft (raw, json)
Hash identifier: 6Ft+Ah14EhPmltmKpcscEFJMe0Z7DZJYfpz1sUYBhX0=
Subject key identifier: 7B:7E:9A:A0:59:29:2B:81:2A:C6:EC:CB:F9:4C:8B:F4:70:94:AD:D9
Authority key identifier: 1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26
Certificate issuer: /CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
Certificate serial: 0194BBCDCA125C152CB97AEAE1F4F16CE37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
Manifest number: 1168
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: GyN3Poe34e0LVeFQuncWsYJbPiY.crl (hash: nV5FRpLAUPog72Tp7oPe6hSGQ6o36HDqMN48lZKtG7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:12:5c:15:2c:b9:7a:ea:e1:f4:f1:6c:e3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=7b7e9aa059292b812ac6eccbf94c8bf47094add9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:54:43:47:a6:55:93:eb:d2:37:b4:19:0a:
f4:c0:c8:20:62:df:7b:6d:6c:c8:06:ec:fd:a2:34:
5b:fb:c2:bc:3e:3d:e1:ff:15:5a:50:6d:b2:41:66:
2d:c4:b6:02:4d:c7:5a:f8:71:87:33:35:32:76:3d:
0f:e0:e1:77:47:b8:81:56:63:5c:95:62:7c:01:8d:
d4:ff:ef:ed:10:a8:14:7c:e4:71:e6:af:c5:bf:32:
3f:e0:5a:45:48:53:64:40:d3:8e:98:54:d9:ab:9f:
3d:16:1e:43:41:a3:42:68:4a:54:77:cc:4e:c8:9f:
65:1a:b6:70:6e:9e:24:21:22:47:01:76:f8:8d:02:
ea:a2:b5:22:6c:3d:55:e4:54:e1:03:b6:3a:63:b7:
1a:cc:67:d6:5d:eb:fb:e2:9b:a9:0c:56:8e:d7:3c:
50:0d:d6:dd:33:cc:5a:fc:e5:cc:13:66:2a:ea:33:
9b:44:fd:0e:f4:20:dd:cf:57:42:60:1f:23:b3:61:
4d:90:48:64:5f:e3:17:f3:c3:74:0f:50:68:79:cf:
9a:f8:a3:6d:d7:80:73:ec:60:b5:eb:16:ef:8b:f9:
5d:2b:fb:0e:7a:e3:09:a0:52:c1:d8:62:24:22:9c:
2c:f6:65:54:08:a5:b0:38:5f:7a:8c:a6:fe:2f:ae:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7E:9A:A0:59:29:2B:81:2A:C6:EC:CB:F9:4C:8B:F4:70:94:AD:D9
X509v3 Authority Key Identifier:
keyid:1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:1d:37:d3:ae:00:c5:3e:44:63:70:a5:ec:d1:6c:49:8f:
16:4d:a7:7b:64:58:bc:9f:e9:1e:d3:24:6a:8b:35:cd:9b:8f:
91:36:5d:38:e9:55:f7:d2:db:75:78:a3:2d:69:b7:f7:08:83:
4a:ab:4c:3d:08:68:3d:5e:9c:e1:1c:f7:e2:ac:bd:e1:f6:c3:
cb:74:86:f1:00:92:cc:2d:a9:3e:fb:20:10:bf:89:2c:c2:af:
52:33:6c:d9:b2:0c:e7:1e:f1:26:8c:0d:af:79:c4:8d:27:bc:
2c:29:33:ad:4b:8c:47:42:40:37:b4:be:cd:d9:6a:4b:2f:bd:
7f:96:91:1e:fb:28:0b:dc:98:41:14:f5:0a:f5:ed:14:c4:6d:
e0:e2:f9:16:b8:bd:d5:71:91:0e:6a:e3:e4:e9:31:66:70:85:
de:1f:a8:d8:0b:e1:5f:60:2c:2f:31:a6:79:f7:ad:08:9f:a2:
6b:98:f3:53:fb:3b:0b:65:d8:74:a0:3c:87:69:98:c9:bb:36:
4c:5b:a3:b4:e5:78:0f:f8:4c:e5:5a:7c:ae:9e:1c:d7:ff:bf:
e7:cc:87:3d:a3:c2:8a:31:39:4a:5f:56:ce:18:89:53:57:2a:
d8:fc:3c:93:6a:d7:7a:83:77:cb:1e:3a:eb:f0:11:ab:4a:6f:
62:b9:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:12 2025 by rpki-client