Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File: Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier: IpJhLOts/fcWhQ2YxVSFDKldmbtLiSEnUsb1C2erGUk=
Subject key identifier: 32:B2:78:B3:82:04:4B:91:99:21:F2:69:1F:F7:A3:3D:AB:B4:9A:52
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer: /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial: 0194BC7306971714AAA9C180800925F41F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number: 01AE
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: jhYUEB5KXoBnTdxycfJ9vxmTA6GXAZRxgnUDCG6mC0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:06:97:17:14:aa:a9:c1:80:80:09:25:f4:1f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=32b278b382044b919921f2691ff7a33dabb49a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:ac:bb:eb:c4:95:d7:23:55:56:4a:b6:a9:
60:b7:0d:36:fc:70:aa:e9:e9:c9:47:c8:15:7e:a9:
62:08:dc:6d:5f:ba:48:d4:e6:46:9a:24:a0:2a:a6:
3f:36:25:c0:13:35:cc:5c:99:a8:98:3b:d6:e0:94:
23:16:7f:54:1d:11:1a:19:3b:61:87:c8:1e:47:82:
0b:8c:20:a4:f7:f4:38:80:3d:96:71:b3:d5:e8:0e:
1c:44:97:8e:e3:4e:c1:39:e4:9a:a7:98:87:02:61:
88:13:b7:35:8f:40:16:25:5b:71:af:03:c1:20:a2:
1d:ad:1f:88:1f:23:33:cc:b7:a9:97:4f:e0:cf:1e:
e5:e0:9a:dc:5a:aa:2a:c8:3a:b5:d8:df:6e:d3:30:
21:e5:81:9f:b8:02:cf:d9:da:52:86:78:59:ea:dd:
48:4f:51:f8:67:a0:e3:c8:f2:67:c6:cd:f3:b2:0f:
d4:94:de:8f:31:d5:a3:78:3c:f6:05:db:30:ed:4d:
72:18:b6:0e:ea:35:c9:a7:ee:e0:d0:36:30:55:c1:
e8:cb:fe:8a:44:a3:36:98:9a:b4:c7:f6:5f:73:00:
6c:18:d3:d2:9b:73:3c:a5:1a:eb:78:a8:00:9f:22:
70:82:3c:76:08:6c:71:4a:2f:96:c5:27:bf:a9:61:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:78:B3:82:04:4B:91:99:21:F2:69:1F:F7:A3:3D:AB:B4:9A:52
X509v3 Authority Key Identifier:
keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:14:46:c7:1d:41:42:f4:04:53:80:e9:cd:77:d3:42:3c:86:
38:87:66:a6:92:f1:d2:dd:32:79:ad:39:dd:e8:4c:e1:1b:c7:
a9:bb:81:6a:65:a8:d6:a8:80:9d:ae:e2:1e:cb:9c:24:93:83:
de:3d:3c:8b:70:15:2f:ba:35:78:55:a2:e7:fa:c9:e7:7d:70:
3e:18:0a:2e:8b:d4:e6:72:ca:2e:a2:fc:88:e3:db:c6:da:0f:
13:c7:86:10:31:77:49:b0:08:fc:b4:7b:fb:d1:56:09:ca:b9:
99:e7:43:fe:1c:45:a2:21:b2:58:76:02:07:ba:88:1e:14:ba:
1e:1f:49:b9:91:3f:3b:95:97:86:aa:01:3d:a5:6c:f6:51:90:
c7:b3:7e:70:ea:9b:8a:6f:6c:b2:95:78:27:05:4e:a1:38:ab:
ad:66:94:2d:57:79:4b:3a:41:5d:f9:34:56:38:cb:50:9e:f7:
fa:14:03:85:b5:0f:46:58:dd:6e:1d:54:46:2a:36:11:79:bb:
af:49:08:b0:56:20:70:8c:fd:7a:cb:f4:3c:30:5a:ab:db:81:
fc:6e:58:cf:7c:bf:ef:cd:d1:66:80:ff:37:b4:09:b5:ea:bb:
ae:a5:c9:b5:ea:90:67:d4:14:8f:7e:91:0a:fe:76:80:a4:c3:
29:53:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:28:43 2025 by rpki-client