Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File: gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier: KZrNbx57/rbBbdJVdrYe5RN3aAl2i9m4CzZ24crm9IY=
Subject key identifier: 1E:8F:DC:B9:08:A9:AE:42:6B:C0:59:1F:BD:E9:29:22:35:AF:91:4D
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer: /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial: 0194BBCE37A78A02FDDE5CAA7818ADEFACF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number: 0D98
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: fDUwEfwb1UQFxLVfJg9mNbaN/f8w7DKAfgpAVMxVeiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:37:a7:8a:02:fd:de:5c:aa:78:18:ad:ef:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=1e8fdcb908a9ae426bc0591fbde9292235af914d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:df:f2:71:36:4a:00:37:79:a9:77:b6:69:
44:a0:cc:8c:ad:8b:c3:0d:c6:c7:a4:8f:08:c6:7a:
b6:82:de:ee:a9:ec:5a:42:ca:9f:04:8f:0f:90:5f:
56:83:d1:dc:46:f4:a8:c3:4b:c7:5e:8b:20:ff:43:
4e:b7:d0:5c:8a:b6:5c:6b:9e:5d:09:15:01:78:04:
b9:0a:a1:61:d0:3b:a0:f0:8d:01:18:3c:a0:0a:48:
50:83:89:3a:a2:c0:30:43:49:4b:32:2b:a6:79:09:
6f:a9:f3:0f:b1:ad:b8:f7:f7:67:f8:99:84:d2:d5:
c6:ef:09:ee:ef:86:34:64:81:99:72:7b:94:e1:7a:
57:8e:c7:e3:d5:8b:08:24:2e:87:44:7d:48:92:3d:
01:f5:ce:9f:26:42:74:39:80:66:d3:6d:29:95:cf:
56:4d:d2:08:85:72:20:d2:3c:8a:3e:b9:94:7f:0c:
28:69:96:76:ce:4d:94:5a:72:54:26:fc:30:52:45:
b2:71:bb:b2:3f:a8:49:9a:a4:c3:3a:a9:74:8e:e2:
86:e1:0e:42:e5:c5:fd:8d:21:a0:ec:4a:2f:26:23:
f9:82:2d:7d:7c:97:4f:af:33:f1:fe:8b:64:db:64:
f5:bc:87:41:e7:eb:e7:c8:2f:42:bb:ca:b2:97:1d:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:DC:B9:08:A9:AE:42:6B:C0:59:1F:BD:E9:29:22:35:AF:91:4D
X509v3 Authority Key Identifier:
keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:be:8c:89:eb:f0:4c:ee:06:69:d1:42:4f:6b:75:4c:4a:
eb:e7:d5:f0:ae:d4:99:b6:9e:6a:84:b0:d5:a3:bd:d0:6b:11:
47:51:22:02:a1:56:9b:94:06:52:fd:ff:8e:2d:26:55:4a:3e:
3a:22:e9:05:72:61:2c:31:75:13:87:b4:7e:cc:aa:57:b9:9d:
e7:6e:a9:99:08:5e:ce:3d:90:e1:c3:8c:b4:40:c3:da:de:6f:
4a:d9:96:df:57:81:d1:53:b7:67:7a:f3:dc:84:82:34:6f:20:
79:ca:f0:15:43:5c:6a:34:4a:40:46:3f:1e:d8:c4:37:42:9a:
72:2d:4c:a8:e9:ca:36:b7:ed:7b:56:72:82:18:87:b2:ef:54:
4f:01:c6:2c:f4:fe:7f:0b:76:3d:a3:1e:f1:ca:a5:f7:1c:02:
3f:cc:94:fe:69:67:03:7c:01:8c:7f:62:1c:84:13:de:23:0d:
f3:38:12:ab:87:79:8e:7f:c0:df:ba:8f:27:3a:3d:59:64:15:
86:dc:c1:2a:f6:d2:ee:6b:b4:bb:16:da:b5:06:17:c0:f5:0c:
ba:25:4f:1b:2d:f7:18:50:f3:f5:de:19:3f:21:35:9e:d4:7e:
d7:45:fa:bd:6c:48:2b:92:56:c9:da:9d:a7:07:ed:cb:75:3e:
b9:af:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:56 2025 by rpki-client