Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: XCoBABTqwDLeqB5scxDHFZ+4yVxsOblHrxQxemf9/Yk=
Subject key identifier: F1:67:2C:9D:3E:50:1D:5D:62:AC:B5:3F:EE:21:ED:A3:D2:51:53:96
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 0194BCE0CBB827ED57411F3F1E2261FA2935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 027B
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: tXpoCxDS+sLhgFASRA2+xAhc8eZ/FrgVfVKPZHStXec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cb:b8:27:ed:57:41:1f:3f:1e:22:61:fa:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=f1672c9d3e501d5d62acb53fee21eda3d2515396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:62:32:f3:11:35:60:bc:b0:ee:f5:14:3f:
f0:af:20:99:67:2e:04:1e:9d:9e:eb:fd:0f:77:df:
34:02:60:24:ef:21:af:fa:5a:02:dd:40:12:71:ae:
04:55:21:a4:3a:fb:3f:c7:9d:fa:b9:5a:dd:05:b4:
c4:80:4d:e3:d2:b2:7a:28:08:68:57:c0:1b:db:79:
78:12:7e:18:52:6e:4e:d4:81:8b:0f:89:87:b5:d7:
03:ec:bd:3b:8d:83:af:69:19:cc:2a:56:03:79:01:
ed:b8:3a:fe:c0:d1:15:b4:b9:55:31:3c:ef:3f:bf:
8f:3a:93:95:0b:7f:b7:bc:09:9a:21:27:f3:9c:30:
38:78:e6:5c:ad:4f:f4:21:47:6f:81:43:ba:39:ef:
84:b9:d8:6a:9b:d8:4b:1f:f6:70:d5:74:de:b6:a4:
ca:8e:5d:70:90:08:07:de:96:ab:d4:56:e3:dc:b1:
d6:ef:93:f4:3a:bf:e4:99:d0:12:92:82:40:be:56:
0d:5f:a0:9f:cd:71:49:a1:12:88:bd:76:4f:62:7f:
bc:f7:73:19:ae:f1:5f:77:db:03:7e:2d:56:83:48:
0b:fb:73:4a:cc:c1:79:9e:4f:ef:95:42:9e:80:2a:
e0:b8:12:3a:84:dc:c6:88:4f:7c:07:64:bb:f1:83:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:67:2C:9D:3E:50:1D:5D:62:AC:B5:3F:EE:21:ED:A3:D2:51:53:96
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:df:cc:25:da:6d:01:96:61:b0:78:8c:21:9f:74:b6:00:74:
03:d4:9b:f9:1a:a6:e6:17:5e:d0:6a:12:8f:4d:86:2c:8c:57:
bd:bb:db:e4:45:1c:88:2d:eb:a5:52:85:14:43:68:4c:b0:83:
ae:4f:12:44:5b:50:d1:49:27:fd:7e:8f:e4:1d:01:ea:a2:79:
22:ad:0e:d0:8b:f3:29:6a:71:1c:43:e1:9e:1f:ff:76:0c:19:
e3:9b:a4:05:85:5f:38:e4:ec:dc:64:9f:ba:11:5e:23:c6:e6:
82:67:e2:f0:ef:e9:75:c5:17:50:3b:f5:98:9a:1c:d4:b3:bf:
39:f4:12:61:73:38:be:26:a8:44:bc:f3:fc:de:91:48:94:7f:
64:a3:43:ff:70:a7:38:4f:44:40:e7:08:67:95:16:0d:75:bc:
13:04:03:7c:65:83:60:ce:2f:aa:7d:1c:b2:ef:23:cf:a4:1c:
9c:1b:8c:5e:88:fc:20:18:c5:70:60:ad:b8:ff:ac:db:6c:63:
39:b8:4f:29:cc:26:91:6a:9a:30:0c:e5:d6:6a:8e:e1:56:db:
d7:c2:4b:e0:b1:a1:71:ef:84:e9:74:13:45:71:fb:ee:ca:64:
16:7e:11:81:03:d3:f3:73:38:1e:16:f0:ea:64:3f:10:58:10:
86:ac:87:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Mu4J+1XQR8/HiJh+ik1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjBjYWQ3ZmM1OGJjODQyNThkZGMxNTMzZjRhMGRmMjQ4
OWVjNjIwHhcNMjUwMTMxMTUwMDM2WhcNMjUwMjAxMTUwMDM2WjAzMTEwLwYDVQQD
EyhmMTY3MmM5ZDNlNTAxZDVkNjJhY2I1M2ZlZTIxZWRhM2QyNTE1Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LxiMvMRNWC8sO71FD/wryCZZy4E
Hp2e6/0Pd980AmAk7yGv+loC3UASca4EVSGkOvs/x536uVrdBbTEgE3j0rJ6KAho
V8Ab23l4En4YUm5O1IGLD4mHtdcD7L07jYOvaRnMKlYDeQHtuDr+wNEVtLlVMTzv
P7+POpOVC3+3vAmaISfznDA4eOZcrU/0IUdvgUO6Oe+Eudhqm9hLH/Zw1XTetqTK
jl1wkAgH3par1Fbj3LHW75P0Or/kmdASkoJAvlYNX6CfzXFJoRKIvXZPYn+893MZ
rvFfd9sDfi1Wg0gL+3NKzMF5nk/vlUKegCrguBI6hNzGiE98B2S78YOqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFnLJ0+UB1dYqy1P+4h7aPSUVOWMB8GA1UdIwQY
MBaAFBnwytf8WLyEJY3cFTP0oN8kiexiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODct
NTdhNDJkZjBjODY3LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODctNTdhNDJkZjBjODY3
LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUt/MJdpt
AZZhsHiMIZ90tgB0A9Sb+Rqm5hde0GoSj02GLIxXvbvb5EUciC3rpVKFFENoTLCD
rk8SRFtQ0Ukn/X6P5B0B6qJ5Iq0O0IvzKWpxHEPhnh//dgwZ45ukBYVfOOTs3GSf
uhFeI8bmgmfi8O/pdcUXUDv1mJoc1LO/OfQSYXM4viaoRLzz/N6RSJR/ZKND/3Cn
OE9EQOcIZ5UWDXW8EwQDfGWDYM4vqn0csu8jz6QcnBuMXoj8IBjFcGCtuP+s22xj
ObhPKcwmkWqaMAzl1mqO4Vbb18JL4LGhce+E6XQTRXH77spkFn4RgQPT83M4Hhbw
6mQ/EFgQhqyHcA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:24 2025 by rpki-client