Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File: k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier: pTT1kdTghCzL7EvJr2MB39IVadm93QcK59pYyAQrVU0=
Subject key identifier: 92:B9:B4:F9:F2:0C:B2:E9:32:FC:83:99:C4:00:14:9A:2A:89:A9:F8
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer: /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial: 0194BC3C51459F854099B38613913FCD9EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number: 0BF4
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: EvF9jk92LoyLq+9v+mtxG5NCj3eqpg8Wd20ToXLHiVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:45:9f:85:40:99:b3:86:13:91:3f:cd:9e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=92b9b4f9f20cb2e932fc8399c400149a2a89a9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:5e:cb:2f:41:42:41:60:61:c6:61:54:65:
ad:16:34:14:85:72:d3:c9:ce:b7:9a:a9:ac:e8:bf:
19:19:1a:28:fa:1e:f6:fc:88:49:f2:30:f3:61:65:
07:91:10:fe:9d:47:d1:f6:e4:83:10:43:45:53:fa:
14:cd:76:7f:bf:cb:21:0e:e9:01:9f:68:ad:9c:2c:
c1:5b:82:74:5f:2f:83:18:a3:e1:b7:9f:51:53:f9:
23:91:c2:e5:eb:13:83:1d:ff:02:79:d9:73:02:9c:
49:cd:7f:34:34:27:b7:d3:cc:9d:dc:c0:74:09:d8:
71:60:9b:18:8a:37:28:b9:9a:f2:bf:bb:ee:78:df:
66:18:c8:09:04:b0:f6:63:20:23:e7:8d:b1:b6:4a:
04:fa:17:a8:c0:7c:b4:fb:56:c0:8b:ed:ca:70:5e:
87:3d:38:da:20:aa:b1:7d:f7:27:59:4a:4b:67:fe:
c2:51:fc:77:ac:c0:b4:a6:51:b4:89:59:b3:60:ab:
f9:55:cb:d4:6e:f2:c2:cb:e9:75:98:fa:9a:ca:0c:
26:7c:74:8b:54:86:dc:ab:21:0e:6b:3e:d9:26:6a:
0b:98:fb:f9:16:35:03:16:91:ec:e0:83:82:55:72:
17:94:ba:6e:01:83:c1:c2:23:a8:50:8f:3f:76:74:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:B4:F9:F2:0C:B2:E9:32:FC:83:99:C4:00:14:9A:2A:89:A9:F8
X509v3 Authority Key Identifier:
keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:54:0f:73:1b:a6:ed:dd:dd:5b:4b:db:e2:af:07:9c:45:20:
e7:70:41:d5:c3:e9:2e:2d:43:42:0f:de:57:15:ac:f7:3e:93:
6f:ac:15:a0:b0:f7:ae:a3:e0:e7:ba:00:eb:64:2b:b6:69:c5:
70:8f:32:0a:d0:eb:4b:9c:75:f0:2e:2c:f6:1b:64:39:e7:90:
13:75:72:6a:a6:0a:a4:03:d8:f6:df:21:66:3a:07:66:62:18:
cf:a0:b2:9d:0e:c3:95:40:6d:3d:86:68:6a:a3:d8:71:32:6e:
94:57:71:2a:cd:ad:fe:e8:e1:9c:22:66:5c:a6:a4:32:7d:94:
19:a7:33:9a:9a:60:0c:8b:36:19:1b:3f:e8:26:77:b3:aa:ab:
ce:15:a7:e2:10:0c:2d:31:c9:7c:ef:01:ac:32:8d:ab:2f:64:
75:c4:53:9d:2f:90:22:ea:03:b2:f9:eb:7f:cd:cb:8b:6f:da:
8a:c1:4b:a3:a6:ec:1a:59:d5:aa:c5:fd:88:b2:20:8d:e9:29:
12:91:77:89:2a:41:96:d3:4c:6a:f4:75:4d:38:06:75:f8:c0:
60:32:fd:f2:b9:f6:10:49:05:02:47:42:15:f0:5b:d5:c0:de:
9a:6d:2f:55:8e:50:30:1d:ec:86:11:d7:07:57:45:8f:21:f8:
27:85:73:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:46 2025 by rpki-client