Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File: gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier: h30xgn3OITE2R5LfE/dxly9O5JLgHiHvZPYgEH4S46w=
Subject key identifier: CA:6A:AF:4A:5D:39:4F:4B:8C:B7:EF:05:9E:DB:D8:17:BE:4C:02:77
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer: /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial: 0194BBCF03314FCB945429355C06CDDE7A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number: 0CEF
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: oKevU+FKJH81rNSbPWkie6jZrQ3l6UeYRFmiC1pgQU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:31:4f:cb:94:54:29:35:5c:06:cd:de:7a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=ca6aaf4a5d394f4b8cb7ef059edbd817be4c0277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:22:5d:b7:5b:c9:8b:5b:38:e5:a2:dc:25:
d9:5d:20:48:4c:46:be:5c:9d:f6:fa:dd:be:65:50:
a3:86:df:dc:82:8e:6f:da:8a:0e:0c:27:b7:62:dc:
87:17:e9:ba:83:42:74:b1:0e:9e:b9:3b:ea:b9:f6:
9a:d1:8e:24:c6:9b:f9:b4:89:d3:c1:cc:0b:cf:2d:
c1:4e:27:b2:fe:24:c4:be:77:1c:e4:a2:56:4b:24:
63:61:64:cf:e7:af:f4:d3:49:db:f0:0d:82:1d:84:
bc:e6:56:45:1e:25:a0:d3:fe:e5:f2:25:fb:96:cb:
38:a6:22:b6:fe:0a:ef:dc:78:88:a6:be:da:f7:c5:
97:33:ce:2d:a6:a2:b7:8e:61:6f:1d:81:29:6e:8a:
1b:8d:dd:93:50:0e:54:98:d9:ec:26:38:3e:4b:2b:
ff:7c:15:52:84:11:80:1d:d7:35:b4:9f:81:3b:e6:
0e:80:bc:5d:94:1e:99:8e:23:1e:34:27:06:b1:84:
4c:88:8e:5b:83:5e:94:1a:46:21:91:f4:38:79:c7:
4d:dd:e0:55:64:cf:d6:0f:9f:07:e2:d1:91:3e:1e:
d3:ed:4c:82:12:3e:4c:c2:70:79:58:a6:14:bd:0e:
a9:b4:a9:e2:4b:b4:86:56:49:d8:a8:d0:95:d6:5a:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:AF:4A:5D:39:4F:4B:8C:B7:EF:05:9E:DB:D8:17:BE:4C:02:77
X509v3 Authority Key Identifier:
keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9b:ba:b5:1a:b2:84:a9:04:4b:09:7e:4e:00:3b:02:e8:90:
09:50:e2:bc:89:7f:b0:cf:de:2a:a2:c0:93:7a:e0:79:ed:cb:
76:e2:c9:1b:ad:25:e2:d0:08:7e:48:14:89:f9:7e:97:8f:0d:
c9:4c:10:ae:29:e0:cd:57:cb:78:df:98:f4:4c:b8:71:d4:c3:
65:1b:a8:f8:fb:82:df:91:69:62:c2:65:04:e1:19:2f:d6:6c:
15:cf:c4:53:e2:c6:a8:f3:30:42:c1:8d:8c:6b:73:07:fd:d4:
37:86:75:0a:dc:97:6d:ef:74:52:ff:e6:90:37:c2:82:88:e3:
9b:12:0c:05:80:d1:96:68:6d:b9:3f:17:90:5d:ab:61:76:09:
f5:74:e8:5c:f1:f8:ae:69:a5:7b:7a:77:13:52:cd:21:27:d1:
40:9a:69:eb:c4:2d:1b:5e:45:b0:cb:ef:46:17:08:6e:b3:4c:
95:82:d4:14:58:10:69:51:b9:1d:7e:8d:3b:c6:2f:3d:e0:10:
00:d3:72:09:76:59:ad:d6:bd:c6:d8:4c:65:b9:fb:d4:fc:8e:
b3:01:8e:bf:83:6d:3b:d7:2d:43:c8:fa:93:88:15:0a:c4:b3:
96:2c:10:bc:4d:51:18:28:93:80:b0:0d:c7:0f:dc:8a:e0:67:
48:95:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:41 2025 by rpki-client