Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File: GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier: zYTV0h97jBRdDLyiB0Z6W8kYUH9t4Vqn5dQb/rW+fSs=
Subject key identifier: 0C:CD:5F:1B:43:66:F8:01:A2:06:E9:B0:29:2D:08:23:A6:F1:0A:2D
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer: /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial: 0194BBCE8B1FC67AD057A462AF94408C5748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number: 0D4C
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: qlxVVtsVEfHfiEi4JZFtnqOvjrBuD40n6V/nEbYI528=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8b:1f:c6:7a:d0:57:a4:62:af:94:40:8c:57:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=0ccd5f1b4366f801a206e9b0292d0823a6f10a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:8a:57:6c:ef:cf:31:93:99:73:88:5c:a3:
3c:40:53:6c:96:8c:18:da:dc:c1:49:f0:28:10:26:
41:c2:52:fe:3c:84:fb:94:52:5d:89:b9:99:4f:3c:
9d:53:56:21:84:48:49:2e:6d:d9:ed:9a:9e:a0:34:
3c:5f:1e:80:c5:d5:7a:f5:41:b2:9e:36:81:6e:c6:
f5:ca:09:f4:65:52:fb:d9:8d:7d:a6:b3:cd:b6:63:
e8:38:48:b9:7c:b1:8d:98:24:be:72:8d:4c:90:2a:
94:d6:89:b5:77:80:69:0b:b0:4a:4d:ad:a4:be:78:
7e:08:05:d1:5b:01:b7:9c:ea:92:66:61:0a:2e:a8:
cf:57:9a:d6:37:4c:97:d6:a8:fb:54:01:dc:21:a9:
17:3c:1e:df:55:f1:f4:b5:41:47:9e:ed:1d:aa:9c:
60:40:5d:f5:3a:07:52:15:6b:02:67:c3:aa:5d:63:
83:0c:bd:39:43:6e:da:ba:b3:29:cb:e7:fe:dc:98:
c7:0a:2e:ff:8f:99:81:a8:67:e9:a1:a7:f5:45:92:
e1:5a:72:e4:96:30:1d:1a:80:cb:9c:1d:84:50:30:
95:6a:51:4f:9b:18:ef:b9:49:06:a5:4d:c8:1f:3c:
8d:45:3f:d2:ed:e6:60:ad:9a:18:31:ec:28:6d:6d:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CD:5F:1B:43:66:F8:01:A2:06:E9:B0:29:2D:08:23:A6:F1:0A:2D
X509v3 Authority Key Identifier:
keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f6:fa:66:52:7b:56:67:70:cf:32:2c:4d:bb:e8:f4:40:6e:
56:d8:e5:d6:e9:30:92:b6:9c:6b:2e:61:d0:76:f1:ae:66:86:
d4:fe:70:be:23:1a:c2:59:c9:d0:39:01:c0:67:44:11:20:36:
7c:71:db:ac:95:d3:7f:bf:28:2f:b3:a8:99:b1:19:85:3a:e6:
32:c8:51:fc:89:a5:6d:11:58:cb:fb:ab:c8:be:97:98:ce:01:
b8:d3:7c:27:1f:7d:df:f6:8b:bc:3f:b2:6a:bb:55:f4:78:04:
5b:cc:4c:aa:b2:2e:36:72:a6:57:3c:e6:e0:9b:53:b9:db:f2:
52:6e:1d:ee:bc:88:56:39:ff:38:bb:74:c1:5b:e4:84:c8:da:
34:4e:ba:12:50:08:5e:f0:45:61:92:de:70:18:99:c4:9b:96:
a3:87:ea:7f:35:19:cf:e8:3d:33:de:fc:45:44:bc:14:7c:16:
61:3f:08:5c:c9:41:5f:3e:38:f9:d1:c7:00:e6:c2:aa:8d:9d:
13:e7:30:c5:52:82:1d:2d:f3:20:3d:14:c9:c1:15:c0:fc:ef:
7b:fe:14:fa:b3:99:99:67:1c:58:97:7a:c0:20:f3:d0:0b:9e:
eb:48:aa:c8:8f:c7:d0:09:08:bd:61:c9:08:9a:48:c5:dd:94:
0f:46:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:11 2025 by rpki-client