Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: eJxwADy8n3mTC4sf2rzs/wnizm+Ma4MJE8759SoT100=
Subject key identifier: 89:DB:5E:D5:15:B9:42:EA:AB:BC:25:7E:4D:B6:6B:F2:4A:30:E7:C9
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 0194BBCE4986D8B5BF5F02CE35FEE8A6261D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: HnOJL4Pjd2FATMmyI8RMK1MuaxH1nfmrFDUIVnEDa0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:86:d8:b5:bf:5f:02:ce:35:fe:e8:a6:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=89db5ed515b942eaabbc257e4db66bf24a30e7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:f5:bb:19:9a:03:b0:b7:41:66:f2:1f:02:
ae:76:72:01:0f:03:1e:26:cd:1e:24:a4:a1:f4:58:
51:2a:f6:8e:1b:17:f9:d7:af:22:ff:42:a8:8c:6a:
d4:5f:7a:12:fd:ba:57:a1:12:60:ff:8b:88:9e:4d:
a1:36:53:15:36:16:f9:c4:b7:93:a0:9e:1f:bb:83:
e8:1e:e1:50:54:08:0b:da:b7:f4:a0:a1:84:bb:ff:
1f:80:10:31:ad:25:9b:e8:dd:96:ac:f5:c5:68:0e:
76:50:6f:fe:ca:59:d1:35:57:7e:5e:fe:8c:10:04:
70:3a:95:0b:20:21:d4:2e:3c:60:02:83:5e:c7:ea:
c7:f2:36:b2:c8:78:67:67:4b:7c:c9:a4:be:c3:9e:
bf:d8:43:20:b8:2d:cb:ba:84:50:e3:23:08:47:ff:
9e:3b:42:02:7d:45:c4:94:45:78:02:de:38:a3:bc:
1e:ef:eb:3a:1f:1c:77:ed:f1:45:c9:2c:03:b7:ef:
ad:28:1d:a6:c5:ac:b9:77:e5:54:86:ea:91:0d:22:
39:86:74:c1:d6:09:7f:f2:76:a1:de:36:5f:90:d7:
63:f0:5f:be:f6:18:d0:62:2d:b3:6e:4a:97:48:8c:
82:41:1a:38:3c:1b:be:19:bc:b5:20:0d:b6:c4:2d:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:5E:D5:15:B9:42:EA:AB:BC:25:7E:4D:B6:6B:F2:4A:30:E7:C9
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:93:9d:6a:0b:93:46:e4:96:e4:06:a1:da:ee:f5:68:6f:cc:
81:68:d3:5a:d5:6a:d9:b5:48:6e:23:e8:e6:73:ec:f9:67:ea:
6d:d8:39:59:70:5c:42:3b:de:33:f7:07:29:c6:b8:4a:f5:81:
d5:fb:34:d8:c9:b2:24:3d:e6:b4:d5:fe:cb:f0:e1:c2:5f:42:
66:79:ce:97:f1:e7:eb:d5:2b:b9:fa:d6:13:5d:cf:4f:20:4a:
50:7b:85:70:e6:6c:30:f4:17:4e:36:00:6e:4c:f6:94:34:62:
27:52:37:75:f3:93:0a:ff:d6:41:66:e5:54:7d:f6:12:5b:ab:
70:ca:4e:86:ff:9b:7b:4f:22:31:14:e1:f0:ba:cc:37:a3:48:
9b:89:96:c2:26:f9:2a:90:9a:cb:d4:45:3e:70:ac:ab:8b:92:
69:ab:a5:02:41:cc:97:72:59:af:7d:de:c0:49:8c:f8:a0:2f:
b2:2c:81:0f:d9:c7:f1:18:e0:80:28:5a:47:12:3b:e0:1d:76:
b7:e7:20:59:c5:3c:67:63:0c:68:31:cb:55:81:f5:68:96:aa:
23:c7:34:10:1f:8f:1c:07:53:18:46:1b:c2:c2:5f:d6:40:79:
d8:60:37:d0:2a:47:c5:b4:73:aa:06:ad:e0:74:4e:7c:f5:a3:
d2:b1:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:58 2025 by rpki-client