Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: zIUyMfEcOTYXJY1y9BIGwPfZTDVRwAnK9c0lWySz72s=
Subject key identifier: 3A:D1:0C:DE:F9:DA:64:19:A9:91:A1:C8:5C:80:DB:76:42:B2:02:F2
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 0194BD17B309B04EEF795CAD4C1FFA209AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 0D61
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: dHVFn4lkD0CK5Bwph3TcO2k0aug9GC3HQhBVBXq9Op4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b3:09:b0:4e:ef:79:5c:ad:4c:1f:fa:20:9a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=3ad10cdef9da6419a991a1c85c80db7642b202f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:16:a2:85:b3:b1:a2:c7:6e:54:33:96:71:
d7:41:97:1f:23:c6:56:9c:0d:6f:41:26:5c:28:15:
6a:e8:82:44:12:98:f6:e7:a8:0e:35:17:4f:0e:b4:
9e:47:b7:17:25:01:84:67:93:f3:d2:d3:58:87:d7:
4a:0c:29:25:03:43:38:cc:70:c6:43:52:94:c9:fa:
59:54:7d:ee:a8:af:19:49:b4:b5:4d:04:da:27:e2:
06:97:7a:72:3e:d6:59:fd:9c:eb:1c:ee:07:75:a1:
67:88:79:8d:97:49:e0:fd:ac:2a:8a:05:bd:bf:49:
e3:cf:23:71:0b:e0:de:17:ee:42:cd:78:0b:2c:95:
96:33:be:fd:5f:11:3e:16:52:40:48:ec:51:a6:b2:
a6:b1:29:90:3c:5c:ea:a9:85:29:10:35:d4:fe:2e:
54:15:d6:1e:6d:67:2f:5f:bd:16:41:1c:8d:90:80:
09:d5:d0:6f:21:43:fe:40:af:dc:2a:71:d0:c9:c2:
be:b4:d2:55:f4:ae:e0:fa:9f:30:02:94:a9:21:7b:
be:f3:79:4b:b3:87:f0:65:cc:ca:7c:c3:51:d7:ef:
9b:38:63:d1:30:e7:0d:24:0e:3c:77:ed:6a:82:8c:
b7:01:be:28:df:32:49:ed:7d:71:98:c0:48:bf:7e:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D1:0C:DE:F9:DA:64:19:A9:91:A1:C8:5C:80:DB:76:42:B2:02:F2
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7f:1f:f9:ff:50:3c:48:db:8a:72:50:24:38:20:94:fc:85:
a3:cc:d3:6a:3d:e9:6a:27:b5:85:e6:b4:2f:5e:e0:7f:c9:32:
c7:fb:7c:de:79:68:3d:b8:36:bb:b0:34:de:d2:4b:1d:bd:ae:
17:03:4f:33:66:56:15:86:9d:b9:c2:9b:b0:a2:20:0b:70:8e:
d6:71:9b:83:55:79:f4:51:53:90:bd:a7:66:30:25:9b:6c:97:
59:a1:cc:fe:84:bf:ff:ac:69:40:23:2c:74:4c:9d:60:cd:6d:
2b:42:7b:f6:ca:38:09:34:e0:de:f1:0f:33:a6:c4:53:0a:07:
6a:dc:d5:7e:6d:4c:aa:9a:f3:b1:47:5f:a0:e3:d0:97:b2:59:
51:22:8d:56:af:44:d8:fd:16:cc:7d:1e:8a:ec:c0:e0:00:80:
f0:42:28:c6:8e:01:d4:af:03:4d:9c:14:6c:5d:81:0e:f5:31:
1a:f2:95:23:2d:f6:3f:f6:dd:87:e0:d6:73:8b:8e:bd:1a:0e:
1c:77:34:ad:73:56:0b:95:53:d6:8b:4c:cb:57:56:4c:0b:11:
e3:aa:b2:36:9c:ae:b2:b6:3f:99:b5:53:63:fe:f8:9e:cc:04:
e1:ad:4e:28:68:97:ac:06:0b:52:bd:e7:93:0a:98:76:dd:30:
25:79:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:14 2025 by rpki-client