Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier: 4V4T/rcPh0rOwyjS+8GPmu5qhVcjD4HNBn7OYjigKio=
Subject key identifier: BC:94:E5:D0:79:E2:AB:4C:83:07:E2:21:7C:64:3E:56:6B:71:F7:E8
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial: 0194BCA9F232B306E82EDEB293BABF3288FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number: 0611
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: 94+d6wULAipjZW+wue3/6fjRa/7DPMJPitoA93hTsV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:32:b3:06:e8:2e:de:b2:93:ba:bf:32:88:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=bc94e5d079e2ab4c8307e2217c643e566b71f7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:94:4a:0d:f6:a5:31:63:90:3b:2b:03:c8:
c0:bf:65:d5:da:2d:45:6e:1b:43:72:46:e3:ce:03:
4e:94:5c:05:b6:ec:8c:44:e6:fd:0b:82:69:0d:63:
51:48:c2:4c:95:1b:16:52:1b:3e:da:4a:a5:6e:4b:
cb:02:47:4d:3f:6b:a1:69:6d:7a:a6:b6:e4:01:b7:
5d:91:10:45:29:ed:6f:12:db:73:c0:c7:12:0b:b7:
a3:65:07:34:a7:3a:6b:59:9f:56:e4:6f:6e:dc:25:
74:39:ff:30:42:89:9a:05:74:f6:c0:bf:a3:0a:a4:
f2:5c:a4:52:bf:0e:34:cd:bf:51:e4:ab:4e:9f:d4:
64:5a:b3:d3:bd:38:63:2a:44:bb:47:d4:cb:dc:6d:
b1:99:7d:72:58:3a:a7:22:d4:8d:61:61:ae:59:0a:
ef:d3:55:b2:63:02:89:d9:dd:45:0d:0b:09:49:8f:
6e:68:d2:c5:9b:3f:c5:7c:d4:67:94:24:5d:46:48:
06:5d:4a:a2:08:58:3c:bb:3a:47:9b:1b:4f:13:0f:
d4:a5:9e:82:57:84:9e:2e:c5:fb:cb:fc:5e:f5:fb:
48:ba:03:d3:b0:ab:cc:ad:de:41:c7:b6:f3:8f:49:
eb:0c:f1:6f:c0:b5:9e:09:a5:1b:2f:d8:49:94:b5:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:94:E5:D0:79:E2:AB:4C:83:07:E2:21:7C:64:3E:56:6B:71:F7:E8
X509v3 Authority Key Identifier:
keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:b5:9f:38:31:69:e6:43:ab:06:b3:ec:1c:60:82:8d:16:
b9:b0:21:eb:90:81:fd:57:5b:d9:d3:93:19:94:49:1c:d8:f8:
16:9e:dc:5d:a7:5f:d3:d6:93:13:2e:bc:7d:da:bc:a8:6b:3a:
3a:c7:49:24:f2:fe:a5:cb:a4:6e:2b:e6:49:02:94:c7:ca:0e:
bc:40:8f:24:bf:0d:fa:54:c8:14:4a:af:42:ef:a2:97:34:65:
b0:06:25:1f:17:cc:57:ae:9b:8b:57:1f:53:a9:25:f8:aa:84:
0a:54:38:f0:cb:3a:19:ae:b2:6a:e2:00:1b:90:97:b9:e3:72:
7b:74:6e:ee:5a:1e:bf:e3:21:f1:31:b7:b3:60:43:ec:55:a2:
79:b2:00:0b:b0:23:c5:27:c6:a5:44:cb:ad:a3:72:8e:b1:3a:
74:f0:f1:09:97:cb:64:c3:e8:b8:a9:e3:6e:d4:89:ee:ad:6b:
69:10:fe:b4:c4:17:0a:5e:8e:14:f0:26:66:03:45:9c:15:e5:
81:d4:dd:4f:57:19:9b:a9:03:03:63:02:6a:b6:1e:b9:bf:96:
35:7e:f8:a4:0a:37:e9:b0:3e:f2:9b:7d:81:a1:85:4e:2d:44:
0c:53:9e:76:e0:32:09:51:a1:fa:cd:01:21:9d:de:ec:27:c4:
ac:a6:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:36 2025 by rpki-client