Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier: jKLH6bOPDgMRWgAkjQ29TTg6oTQQdOXspSZdlyhFFCg=
Subject key identifier: 0F:DB:2A:76:39:9A:B4:05:F2:98:27:B8:86:32:1A:60:43:98:9B:5C
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer: /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial: 0194BBCE244203A0B093BDFB919A12D72135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number: 10FA
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: E4hdeFiUMFWNW+vEgcfDYZ24Wn5ciLU7A11pjf2Ju1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:42:03:a0:b0:93:bd:fb:91:9a:12:d7:21:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=0fdb2a76399ab405f29827b886321a6043989b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:32:c1:62:e5:40:6e:c2:76:75:41:13:76:
e4:a4:84:94:9a:48:b9:cd:01:59:f6:b9:b3:30:90:
de:0b:59:77:88:23:0c:e9:22:d2:78:6c:6f:8c:f4:
2b:91:56:4c:85:85:8f:76:57:be:a1:da:96:8b:e6:
c5:2e:26:8c:1d:9f:86:82:c8:4f:88:09:c8:ca:b0:
f6:c5:71:de:2d:af:dd:9b:bb:64:1b:1a:ef:3d:47:
02:c4:8e:d2:73:d4:16:93:00:0b:33:f7:3d:fb:98:
95:f8:78:52:35:67:f6:5f:52:02:b4:96:0d:68:22:
62:1b:92:da:e4:0e:49:8a:6b:7b:1b:03:00:1e:98:
f9:e4:67:7c:b5:10:6b:fb:36:66:a1:f9:ee:29:b2:
db:da:c7:57:75:76:fc:b2:23:a8:da:91:43:61:51:
16:0d:cc:8d:fe:09:81:13:91:33:7b:d5:eb:b2:31:
cf:7e:94:9c:8a:43:7d:4b:af:cb:c8:1a:ea:2a:65:
c6:81:07:d7:16:96:9f:02:b5:3f:9b:bc:0a:73:f9:
a1:df:d6:e7:8d:5f:32:98:f9:15:a9:b4:a2:d2:6b:
84:3f:b1:22:b9:60:2b:07:51:04:05:54:ac:c9:00:
34:de:0d:3c:46:87:cb:54:85:d0:99:34:70:dd:f1:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DB:2A:76:39:9A:B4:05:F2:98:27:B8:86:32:1A:60:43:98:9B:5C
X509v3 Authority Key Identifier:
keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:de:7e:a2:e2:28:76:8e:3c:f7:1f:27:63:49:2f:17:6f:b7:
7d:b7:0e:07:26:92:df:31:1a:6f:06:59:eb:4a:1f:1a:09:e7:
8f:d4:6b:91:73:7a:76:c1:4b:3e:d3:01:23:bb:42:ac:20:0b:
e7:87:9d:78:5c:e9:d4:0e:30:cd:c2:c6:aa:91:66:78:f6:fa:
a6:1e:ff:08:43:f8:bc:bc:1b:6f:60:64:61:1d:36:15:4c:53:
5b:0d:06:7d:6d:2e:0c:f1:9c:14:6b:a7:b0:f0:ca:75:a2:7a:
e0:8f:7c:07:3f:a4:fc:46:ea:98:e7:ac:da:f0:db:78:52:44:
4c:21:02:41:63:c4:eb:9f:4c:1b:bb:66:d2:0d:91:de:e3:11:
11:d2:6f:e8:28:57:5f:65:fa:4e:0b:6b:22:56:98:85:b0:4b:
0a:ff:c9:93:1e:1b:bf:a4:03:88:db:cc:28:70:85:9e:01:d8:
6b:76:4f:db:cc:da:98:59:b5:fb:bd:c8:00:39:5b:b8:f4:ed:
72:70:24:d7:76:26:48:81:6a:c7:81:fa:0b:4e:db:99:42:33:
5d:d2:ac:9f:11:3f:35:ef:e3:b6:41:9a:0a:3e:f3:08:9c:eb:
18:4b:a3:d3:6e:c0:d0:11:49:b3:84:6d:2b:cf:d9:75:ec:df:
ab:22:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:32 2025 by rpki-client