Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: RmS/KriFbCNSAbPPv/ftk9jaTdOFjLty64monn8TxrU=
Subject key identifier: 70:FF:D0:8C:DC:27:07:24:B4:8D:67:A5:DD:12:42:97:43:D9:A8:06
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 0194BCA9FA2C33DBF41454A7B33732B32414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: m5oYn/qiOjaZ1jDto3PQp8wTxAgKJBpD5ZOTW175VN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fa:2c:33:db:f4:14:54:a7:b3:37:32:b3:24:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=70ffd08cdc270724b48d67a5dd12429743d9a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:f6:7a:f2:97:ee:5d:9d:47:4d:c4:3f:ab:
b0:31:40:c5:22:98:1c:98:82:fc:73:d8:db:23:5e:
04:69:2d:a7:63:0a:6e:32:a3:ff:8f:70:93:b7:06:
f5:e6:70:bb:08:d1:dd:0b:c9:a5:ae:a0:88:4d:7a:
a7:b8:98:be:e5:6c:a0:58:4f:18:96:c2:1e:df:68:
d5:0b:08:97:ce:bb:1f:84:db:f4:9f:7d:6a:ff:ad:
f7:6f:60:08:88:cf:e0:cb:44:b4:1d:6f:8b:49:e3:
f5:0e:29:4e:b6:8e:15:b3:18:5b:f1:40:d4:28:a9:
5f:96:ea:0c:a4:43:be:b0:74:fa:89:75:cf:af:98:
d8:6a:54:61:3a:5b:a1:c3:4b:8a:5d:66:3d:45:b5:
ad:79:35:d9:18:c2:94:4f:9d:50:85:3c:f2:2d:01:
e2:3d:f1:db:a8:21:69:f0:2e:d4:e2:89:d6:97:56:
12:74:f4:28:69:62:62:f7:9d:7c:89:fc:c1:2f:c0:
55:89:82:73:e9:ca:0d:08:92:5f:7a:5a:c5:7c:b4:
4a:fc:b6:82:81:25:2d:89:be:24:2a:08:27:b3:c4:
23:80:94:62:36:d6:43:c4:d8:f4:59:a1:86:30:25:
a7:fe:5f:49:c6:8c:a4:0b:04:cd:1b:ea:f5:60:2b:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:D0:8C:DC:27:07:24:B4:8D:67:A5:DD:12:42:97:43:D9:A8:06
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:f5:bc:fd:fd:7a:f6:17:12:f1:af:64:a1:e8:0e:1a:34:
75:54:25:92:a8:a6:fb:f7:23:61:21:cf:95:7b:25:53:a7:cf:
df:71:c1:b9:e8:60:48:b5:2b:d1:9e:a3:ad:16:b4:3f:e7:5e:
5c:01:7b:85:d4:6c:a8:f6:92:cf:39:8e:19:43:62:1c:fc:5e:
83:7e:51:7f:ed:f6:38:2f:43:91:33:f2:df:46:61:f8:f0:a9:
3e:5f:e6:06:98:7d:f2:81:5a:ef:66:62:41:06:d9:e9:17:c7:
96:4a:16:e4:1f:59:49:a9:56:93:4f:af:b6:80:a9:0b:1b:9f:
2c:0d:2b:01:34:6d:66:e0:96:79:db:dc:e1:61:b7:d7:8e:4f:
57:32:17:8a:b7:eb:86:8f:c9:e6:cd:bc:d4:28:e5:65:93:44:
4e:39:50:5a:b4:7e:75:4d:25:11:c6:6b:14:12:1e:20:2b:82:
bd:92:49:88:c2:fb:a5:31:5a:80:52:c3:8f:68:88:77:be:e9:
c8:38:56:98:7e:e0:26:ba:99:9c:fc:df:94:2c:89:30:c6:f2:
9e:86:50:09:0c:10:73:94:39:fc:d1:be:96:b5:65:2a:34:07:
20:9a:9e:71:fb:d7:43:ef:20:50:72:6c:b1:c5:6c:21:88:2d:
ad:6c:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:48 2025 by rpki-client