Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File: GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier: YpQmvUD+8d+T6ljy4E3oiKxA9hdGLGQAV4l2V4n9y7A=
Subject key identifier: 98:53:3F:54:D9:6A:44:29:CA:B7:F6:B3:2F:26:49:41:BE:1A:D8:53
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer: /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial: 0194BC72CF172BAB226BD365CB5D9AAAA3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: KTu6dap89DHl5vth6N8VU/8dPkGM6X6gMxEvgNncDeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:17:2b:ab:22:6b:d3:65:cb:5d:9a:aa:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=98533f54d96a4429cab7f6b32f264941be1ad853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:2b:49:5e:1c:a6:f1:83:e4:bb:6a:ed:81:
36:ed:b1:68:94:13:63:7f:05:b5:ea:90:38:ef:bd:
e5:c0:d2:59:b0:ab:f2:c5:21:12:7a:ca:95:af:c7:
f5:ef:a7:80:8d:16:45:ab:a6:6f:07:75:90:95:6a:
3b:d7:82:ad:1c:5d:54:35:6a:dd:42:e5:88:18:53:
a3:9c:87:d1:2b:cc:8e:12:9e:63:0b:7c:f8:f7:bd:
b4:2f:6f:32:48:b7:06:2c:8c:db:44:57:04:05:9c:
42:34:1b:af:f2:58:7a:fd:06:9a:2a:2d:c7:37:d9:
4a:80:86:18:4e:b9:dc:dd:68:58:b6:fd:ab:a6:f9:
9e:b2:04:34:2b:e3:d3:73:1b:81:cb:82:3d:33:a0:
e8:22:61:c8:dc:ae:58:5b:35:25:b9:14:af:9b:69:
8d:6e:6d:da:e4:13:2e:ab:7f:ec:c8:6b:44:06:dc:
83:4c:bb:4e:02:a6:36:2f:d1:09:ed:14:ee:65:85:
ce:28:28:b0:a7:df:fb:cf:02:96:c6:5d:5a:ae:c3:
d5:0d:1d:fb:e6:9c:55:0a:04:a7:e0:ea:ab:2a:78:
b5:20:c8:1e:76:4d:3f:d6:92:96:f7:cd:13:f2:45:
4e:84:73:d3:b4:af:ca:ca:56:cc:d4:c4:c8:23:4d:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:3F:54:D9:6A:44:29:CA:B7:F6:B3:2F:26:49:41:BE:1A:D8:53
X509v3 Authority Key Identifier:
keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:e6:ed:64:84:e3:5c:32:ba:38:28:c6:48:55:1e:40:fd:
b0:71:75:7c:21:e4:f6:77:b8:e5:39:b9:33:61:e0:55:2a:a8:
92:ad:1a:66:03:23:bf:bd:4e:5b:21:7a:b5:e2:44:21:ab:2d:
90:11:55:6d:b3:64:18:d0:19:b9:22:04:5f:54:54:da:70:1b:
ce:0e:78:6e:b6:89:4c:53:aa:5e:2d:c8:94:49:ae:6e:d2:21:
0e:08:08:9d:ff:ce:94:ef:2b:1e:7a:4a:43:7c:55:f3:74:76:
6c:02:71:19:f9:0b:2a:68:af:2d:93:29:6a:2e:06:53:41:0a:
22:11:eb:7b:9b:13:49:80:dc:92:50:e3:d2:bf:6a:29:14:df:
25:3f:04:53:ff:5d:c5:9a:e5:3b:42:62:ef:bc:44:bd:47:7a:
46:56:d0:18:c3:58:aa:d4:f1:ba:30:e0:6a:2d:e3:5c:d8:4b:
7e:20:04:94:91:f4:10:67:97:52:ae:40:b8:c0:5a:55:4a:54:
61:ea:09:c7:7a:16:56:2c:13:e5:85:3a:d0:9b:d9:2c:ed:b8:
7a:a7:52:4d:4a:64:cd:4b:3d:1c:00:e6:c1:a9:dd:b6:0d:93:
75:32:25:86:2d:fd:b4:5c:b1:8a:98:bd:11:08:76:7e:9b:5c:
a5:7d:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:08 2025 by rpki-client