Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier: 850kGRwYoghK389B3CXen9T3zpJXWG7k6TRLMJAoSoM=
Subject key identifier: 77:57:53:7A:53:9B:CE:40:52:E9:66:13:93:77:05:E2:1B:66:D0:A7
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial: 0194BD17688E4ED0A859AE6B37A02F2D6A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: tnatD05yighi5xI0CUoBkGv1nnBF9Udz/IxsflL1TUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:68:8e:4e:d0:a8:59:ae:6b:37:a0:2f:2d:6a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=7757537a539bce4052e96613937705e21b66d0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:1d:ed:1f:3e:66:cc:ed:40:ce:bb:06:16:
59:9a:4f:a2:40:8d:25:19:05:06:98:20:5e:0c:93:
a2:fd:f2:e9:92:91:db:3d:92:14:f7:98:3b:08:f6:
2b:e4:8e:e8:b4:92:87:60:3e:e6:20:bf:c2:45:18:
37:69:aa:02:81:3c:4f:60:93:80:13:78:4a:a0:7c:
76:0f:35:76:c3:ca:3b:5f:5b:87:82:20:2c:4a:e2:
11:f8:2d:f5:2d:4d:01:f6:a3:d9:ff:d9:e7:56:5c:
53:49:c5:d1:45:b7:89:f6:c4:04:a6:05:c2:54:84:
e9:91:56:db:09:f1:77:95:21:72:57:b6:e1:22:77:
4f:64:e1:fb:d9:6c:ef:2f:7f:8c:54:32:31:64:4b:
15:0b:83:29:df:9b:11:28:f0:7d:7b:dd:0c:f4:9a:
76:c1:2d:94:bf:45:6f:d5:9a:82:53:d6:b7:1f:e9:
e2:b2:f7:99:62:23:6e:48:cc:bb:ba:a4:40:f3:42:
e5:9d:17:ea:bf:39:4f:9c:19:73:42:e6:17:4e:ff:
e9:fb:e9:37:dd:13:63:22:84:b7:fd:37:cb:04:ee:
ec:4b:84:fb:08:fe:ac:9b:90:a0:1a:dd:c2:e0:e6:
1b:ba:84:be:dc:29:43:1f:9a:d4:7d:4e:dd:25:1d:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:57:53:7A:53:9B:CE:40:52:E9:66:13:93:77:05:E2:1B:66:D0:A7
X509v3 Authority Key Identifier:
keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:58:b7:02:ac:3d:ce:4c:f4:df:8b:f3:a2:8b:78:31:7d:5c:
ea:68:f5:13:f3:41:d7:b4:87:7b:5a:54:a8:e2:87:8e:5f:1c:
b1:9f:0f:10:12:60:28:a2:fb:ee:a0:1b:4b:d2:37:0f:ee:9b:
e8:e6:97:cb:11:4b:ba:0f:16:f0:03:6a:ea:28:e6:ab:10:a2:
b9:e9:05:ec:94:6b:93:48:35:2d:df:8d:f4:56:f3:07:42:e0:
e1:eb:3e:34:19:78:85:79:60:85:f4:af:66:6b:5c:cf:54:b7:
7c:52:51:ec:7e:2a:81:85:66:74:0a:2b:68:58:0b:3d:22:f3:
8e:cf:0c:46:d1:3e:e7:d5:2b:ae:f4:a6:4b:93:c5:03:e9:7d:
88:a3:2e:45:d9:95:bf:a9:e3:51:7f:39:95:4a:59:cc:a6:96:
db:41:ac:81:c6:2b:09:46:4a:7a:bd:5b:5f:c3:00:14:74:cb:
38:88:04:17:d6:90:07:d7:2b:d3:01:bf:10:fb:96:6a:9f:91:
9e:c5:2e:18:c6:99:c8:00:d0:03:7c:9c:5c:0e:a6:f5:b8:97:
4a:e9:78:cb:e2:f6:fb:7e:33:0f:9a:60:b2:4a:1b:3d:55:e4:
4f:3d:86:8b:a4:d5:9a:86:52:b2:25:48:46:e6:6d:f3:b5:d5:
88:54:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:51 2025 by rpki-client