Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier: YCGAZP0AzR9X+asJstbMDB5yqXUbqOfbUtIcxRfhWfI=
Subject key identifier: 67:32:CB:F3:42:96:58:6A:87:FB:30:4B:39:45:AC:ED:06:31:3D:53
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial: 0194BCE094CFA954882F215CB14FF7E4B74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number: 0442
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: AufKIjPmH+cl0R22VGL/NolyW/qeokwyW11zOEyVxpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:94:cf:a9:54:88:2f:21:5c:b1:4f:f7:e4:b7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=6732cbf34296586a87fb304b3945aced06313d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:54:15:c8:45:0d:e9:42:a8:fd:7f:ee:e1:
12:ea:18:5e:cb:a0:6c:5d:04:36:34:04:c1:9f:1b:
cd:27:4c:db:03:4c:62:02:16:c2:4d:2c:ed:ee:f9:
e7:a2:a4:ac:05:15:6a:72:bf:29:cb:b3:df:8b:d8:
d0:da:01:52:23:d2:97:ae:f7:74:17:bc:27:af:fb:
43:1d:95:61:36:19:20:e4:56:f8:88:09:ab:a9:61:
ad:53:dd:aa:c2:4b:40:61:6c:bc:d1:a2:e3:7b:6c:
d8:29:a1:6c:0a:4e:57:d5:2e:fc:7e:d6:84:6a:05:
b6:de:be:89:5a:3d:d2:90:03:0b:da:e9:53:fa:ab:
a3:96:d7:ba:27:fb:28:35:22:d5:1f:e7:54:52:bf:
3a:7b:bd:95:2d:7c:d9:a1:1c:57:12:63:3f:27:f9:
36:dd:ac:97:21:9d:46:9d:d9:b6:f6:a9:26:46:73:
12:df:a7:a1:bb:a5:36:56:bf:c0:74:87:f8:ba:15:
a9:f6:a1:2b:c1:80:a4:10:f7:ab:66:3e:29:e0:5a:
ce:a7:12:b4:c7:6a:fc:54:de:56:e8:d1:4e:33:2e:
49:8c:b6:50:ff:fa:d3:cf:cd:7a:3e:e8:b4:94:97:
5f:1a:45:73:61:a6:2c:14:e5:e5:61:a1:85:44:fd:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:32:CB:F3:42:96:58:6A:87:FB:30:4B:39:45:AC:ED:06:31:3D:53
X509v3 Authority Key Identifier:
keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1b:03:e1:d0:7b:4f:4e:8a:65:fa:3c:fe:ed:80:52:03:15:
09:3c:02:0a:58:31:4f:44:e7:b2:a8:33:42:36:ec:6f:70:f8:
ea:6c:f8:80:d2:f2:3e:6d:52:f2:16:ce:10:c9:f4:1e:22:2c:
88:1a:07:2d:ca:00:f4:3b:07:5c:bf:c3:55:30:fd:29:2d:ff:
0c:53:88:34:d3:48:49:68:08:eb:1e:09:ba:6d:af:a3:85:62:
b8:0d:4f:35:42:06:34:7e:ba:68:b2:2e:6d:04:d6:a7:91:5f:
32:13:20:45:fa:65:bf:14:93:95:62:e0:60:5a:34:76:f9:49:
2a:96:69:b8:9f:09:b1:f7:04:f0:61:8f:ea:85:73:06:e2:d3:
fc:15:84:ad:91:00:20:e5:41:da:99:69:63:13:41:36:9c:ca:
09:50:bd:0d:7b:f8:92:3a:63:e8:ef:37:3a:a1:d8:83:a0:79:
2a:da:05:bc:39:04:99:b1:99:a7:52:55:6e:f9:4e:7c:8c:8a:
a3:e1:ea:b1:97:78:0b:b1:cb:83:6b:03:6a:e9:f2:1a:fe:5f:
af:62:1c:8a:5e:55:34:5f:8e:42:c3:7f:5d:60:ee:11:1a:e9:
f3:ef:aa:71:01:61:5f:35:75:be:93:c2:76:7a:f9:9b:74:da:
3e:9d:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:21 2025 by rpki-client