Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
File: G2t-l-0j1mqR-4qRv9nGdxEpsas.mft (raw, json)
Hash identifier: bMjbeQMuEtONDbyNbJAwmGKq+GzCMH2bcVSvL1uJMkI=
Subject key identifier: E9:E7:79:18:B3:CB:E9:CF:23:30:35:EC:D0:DA:08:50:E0:44:C6:41
Authority key identifier: 1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
Certificate issuer: /CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Certificate serial: 0194BC3C8C92408EDCE1B2936EC9F367F431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
Manifest number: 0D23
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: G2t-l-0j1mqR-4qRv9nGdxEpsas.crl (hash: /bt+c4Fgw07zDzLC8DzxycKgPHFaUIbNvqqxvFvt22s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8c:92:40:8e:dc:e1:b2:93:6e:c9:f3:67:f4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=e9e77918b3cbe9cf233035ecd0da0850e044c641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:6e:dd:d1:d0:76:7d:dd:95:14:16:ac:d9:
a3:f0:5d:b4:70:41:5d:7d:73:80:f8:d3:fe:e3:6c:
46:db:e0:89:66:87:1c:99:c6:c8:f7:4d:d9:e9:95:
7f:83:f6:52:c1:dd:60:9f:d3:25:e5:f5:01:68:e3:
8d:84:47:98:5b:08:2a:8a:b9:68:3f:fa:9f:54:33:
d9:1a:1b:25:f8:ca:77:57:c1:47:d3:99:76:83:21:
e5:9f:58:08:91:98:cb:3e:b5:24:07:ab:c2:ef:6a:
fa:3b:ea:e8:7d:f8:9f:b8:ab:b3:35:45:59:8d:5d:
32:3a:09:2e:10:96:b8:7a:92:73:3c:af:c6:4d:8b:
cb:9b:d6:56:44:95:90:f0:87:8f:bf:31:64:b8:60:
71:87:e4:46:a2:2f:84:22:2d:00:be:24:3d:d8:fd:
cf:af:49:7c:78:f0:26:ef:40:4c:75:fe:11:03:e8:
86:a4:2d:d3:89:01:c8:61:bd:cf:6e:df:92:a0:17:
50:96:7a:12:60:f2:7c:f0:9f:1e:00:1a:3d:0a:78:
ad:64:27:33:d0:99:b8:25:e7:f1:9d:49:d8:20:09:
3f:5c:fc:2c:ef:0f:5b:a8:b2:84:83:d6:55:c5:28:
20:47:80:25:01:3d:1d:8b:86:26:ea:57:40:89:47:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E7:79:18:B3:CB:E9:CF:23:30:35:EC:D0:DA:08:50:E0:44:C6:41
X509v3 Authority Key Identifier:
keyid:1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:6b:c5:f1:b1:9e:4b:34:02:1f:e9:29:25:5f:b6:ca:bc:
8d:6f:d8:a2:91:8e:eb:58:e4:4f:78:84:a5:74:6c:af:68:db:
e1:4a:14:f4:98:ff:59:b2:01:71:81:b4:0f:a9:dc:f2:fb:e7:
f7:a1:96:77:c7:4c:ea:17:48:8a:fa:71:c0:b4:72:77:f5:d0:
e3:95:8f:a9:52:16:84:89:9f:be:ac:ec:61:91:62:bd:ac:44:
cc:b7:62:a0:c6:9e:5e:bd:f1:ad:4d:12:89:b5:33:03:d5:1f:
76:f0:98:35:78:f4:db:5c:16:c4:de:cf:ba:bb:13:98:aa:0c:
2f:ec:8d:e7:36:a3:16:56:7a:a7:ee:67:dd:a0:c5:35:3b:0f:
47:41:a5:0c:0e:a5:59:9b:af:6a:bc:2c:73:ae:3a:ff:49:55:
d1:38:8b:18:b2:d8:5c:8e:fe:61:50:21:bb:d3:4d:14:f6:ec:
b9:84:ce:ab:66:61:be:cc:11:cf:26:8b:c4:f4:56:27:e9:f7:
74:93:75:63:39:ac:f1:7b:02:1f:b2:92:ef:ef:ff:84:a5:4b:
d9:70:58:e0:f2:70:ed:51:56:f4:2c:05:46:85:8d:8c:50:6a:
8b:fc:17:31:ac:dc:16:dd:93:da:d3:98:0e:58:be:95:7a:46:
5e:4c:20:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:51 2025 by rpki-client