Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59aa1d-a7ba-4d33-86c0-a982b767aa75/1/gnJlhg80BWaFvOdEYSyQqFwMrrM.mft
File: gnJlhg80BWaFvOdEYSyQqFwMrrM.mft (raw, json)
Hash identifier: 3OH9tJZZZwtaQ11Zb498T8kUtdzIW/B9n3qrlvjj2Vg=
Subject key identifier: 60:72:D0:95:37:3F:BF:A9:20:25:C7:59:7B:8F:44:85:ED:15:E6:8B
Authority key identifier: 82:72:65:86:0F:34:05:66:85:BC:E7:44:61:2C:90:A8:5C:0C:AE:B3
Certificate issuer: /CN=827265860f34056685bce744612c90a85c0caeb3
Certificate serial: 0194BC3C40270C75A4CDD23E3D586FEE915E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnJlhg80BWaFvOdEYSyQqFwMrrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/59aa1d-a7ba-4d33-86c0-a982b767aa75/1/gnJlhg80BWaFvOdEYSyQqFwMrrM.mft
Manifest number: 0498
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: gnJlhg80BWaFvOdEYSyQqFwMrrM.crl (hash: 08rvvx8FzJRI1AMDjtqp0IuKY6T29C7GEQvedd11aLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:27:0c:75:a4:cd:d2:3e:3d:58:6f:ee:91:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827265860f34056685bce744612c90a85c0caeb3
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=6072d095373fbfa92025c7597b8f4485ed15e68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:12:02:7e:94:2a:35:b2:17:69:e7:cb:f5:
cb:1b:78:83:cd:8e:69:b4:3c:d9:f6:9f:f2:87:4c:
55:75:aa:56:e7:29:9a:cb:ba:78:bb:0a:20:e9:39:
56:6d:8e:9e:fb:8d:ff:82:9f:2c:ab:69:d4:7e:3f:
c5:e7:33:d4:40:6a:fb:f7:be:fa:14:0b:0b:47:35:
84:21:94:3a:86:ed:f7:cd:f3:39:ef:18:42:4b:33:
41:1b:9f:e9:36:6f:b5:f9:c1:01:8a:68:67:1e:aa:
ea:a3:62:93:b4:e0:f6:b7:4a:96:0e:75:0b:22:0f:
3b:03:08:e2:57:f4:b1:39:2a:c2:ef:73:29:85:c8:
98:42:5a:20:d1:6d:11:7e:d2:bd:df:d5:92:ff:fa:
97:93:37:e7:5f:2e:78:cc:54:5c:28:5d:47:7f:8d:
2e:94:b8:8c:36:69:f5:fc:eb:91:35:03:69:3c:9b:
62:0f:61:68:06:d0:69:71:d3:6a:ef:f0:18:09:16:
e6:c5:19:bf:17:b7:7b:a8:21:1f:3d:62:56:51:7b:
8e:ac:f5:2b:b3:16:08:0f:ae:1d:bf:29:20:51:6a:
41:72:71:8b:2c:89:6e:2a:6c:03:09:6e:54:f7:f4:
e2:c0:40:37:62:b8:e6:d4:1e:5d:26:19:c4:32:30:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:72:D0:95:37:3F:BF:A9:20:25:C7:59:7B:8F:44:85:ED:15:E6:8B
X509v3 Authority Key Identifier:
keyid:82:72:65:86:0F:34:05:66:85:BC:E7:44:61:2C:90:A8:5C:0C:AE:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnJlhg80BWaFvOdEYSyQqFwMrrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59aa1d-a7ba-4d33-86c0-a982b767aa75/1/gnJlhg80BWaFvOdEYSyQqFwMrrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59aa1d-a7ba-4d33-86c0-a982b767aa75/1/gnJlhg80BWaFvOdEYSyQqFwMrrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:24:28:bd:08:91:5d:fa:fc:55:de:b2:a2:ec:b3:e7:05:18:
93:c4:0d:0d:59:a1:b6:5a:c0:c8:ff:15:95:92:86:38:0a:3f:
dc:e8:5f:98:f5:08:b2:5b:bf:1f:4c:c9:2a:ae:5b:e0:59:03:
34:a3:3e:34:47:7a:92:78:de:d7:80:5b:2f:3f:32:95:21:7a:
92:fe:f5:9b:d9:0b:7f:c0:ce:db:57:03:16:be:e0:2b:b5:4a:
e2:95:a7:aa:1d:49:9c:fe:98:a5:68:5e:89:8c:36:30:60:26:
61:60:32:49:e5:fe:b2:09:44:42:cc:27:c4:da:15:ad:ce:3e:
09:97:0f:a5:68:67:cc:a1:0b:ef:09:e4:16:0c:9a:f5:74:7e:
1a:4b:7f:51:4d:13:db:46:d0:37:f8:33:2f:99:9f:5f:72:83:
b9:d4:ac:33:8c:a3:4c:c5:61:eb:f0:ef:84:99:51:c4:d3:9f:
22:36:0b:4b:1a:ec:02:40:77:f4:7f:29:36:6e:a0:bc:7b:9b:
30:e2:93:13:45:38:28:e2:bf:87:62:3a:28:bc:28:aa:fd:9e:
f8:c8:1d:cc:9e:85:c8:ad:dc:cb:c2:48:3b:35:3a:7f:21:f5:
23:bf:37:78:71:17:69:2c:4c:e3:54:35:08:ea:c0:ef:34:f8:
3c:5a:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:24 2025 by rpki-client