Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: kwDj3PmmcmqrwNMPwTgypYGoqAbd2u49amVwAX+aePc=
Subject key identifier: 2B:DA:1B:ED:EC:F2:72:71:76:04:9F:40:8E:89:3E:76:7C:77:06:60
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 0194BBCE70F89FE86DD15FE616B5BE9D52AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 1162
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: pItcCv2n3LE3K4JUKOfhvRi2ObX70ruvijfyoMoTvrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:f8:9f:e8:6d:d1:5f:e6:16:b5:be:9d:52:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=2bda1bedecf2727176049f408e893e767c770660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:32:84:43:5b:de:b7:e6:24:4f:ac:7f:53:
10:02:b7:11:3d:ac:b9:44:04:f3:52:e3:77:f4:68:
4f:a5:47:54:91:40:32:b4:ce:af:8b:0a:41:10:d0:
3e:52:00:bd:16:5d:e7:a7:ca:13:01:2f:c3:58:94:
34:c5:1e:24:eb:7c:af:e5:17:49:85:f9:46:19:3a:
1c:ea:5b:d2:40:0e:2c:ee:f2:65:f3:8f:9f:40:96:
17:ab:db:06:7c:77:da:d5:c1:60:fa:ad:9d:68:7d:
77:eb:ba:5d:39:6a:e5:9c:04:5c:1a:34:92:01:9d:
87:3a:3f:01:5f:82:93:42:19:fa:87:e0:63:c2:80:
2a:9f:f6:14:94:35:85:1a:aa:40:06:03:9a:eb:e7:
7b:2c:cc:77:e7:b4:df:04:57:72:49:dd:c7:53:e6:
07:35:18:95:d1:bf:3c:96:64:dc:c6:ee:2c:68:65:
2c:df:c6:e6:c3:e1:6e:16:da:5b:0f:1c:ce:2e:e7:
32:08:25:21:86:86:40:a5:d2:a1:ea:c0:7e:4c:ef:
8a:58:6d:7f:a4:44:bd:25:82:69:8b:0e:07:12:18:
2f:69:bc:69:36:c1:1a:00:94:32:1d:6a:19:d7:4a:
35:23:f6:de:42:d4:7b:c7:56:43:91:f5:76:3e:e2:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:1B:ED:EC:F2:72:71:76:04:9F:40:8E:89:3E:76:7C:77:06:60
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b7:81:6e:a7:b3:be:b3:05:a7:5c:90:e4:2f:08:60:59:75:
70:ea:26:e2:b7:fc:d5:ad:8b:75:b1:b0:d2:1f:86:37:08:e0:
1b:42:c3:5c:bb:74:ce:35:8d:e7:66:ee:6a:b2:2d:07:6e:27:
31:af:fb:02:5d:e5:27:ff:a7:1d:97:39:05:a8:e9:36:bb:3d:
d8:e7:91:00:c9:72:9a:d0:e3:7f:e7:c4:2a:2c:8e:7d:3e:d7:
ea:bb:8d:e7:31:12:b6:73:ea:6a:c7:99:00:eb:ae:34:36:ef:
64:f7:d1:36:6a:70:77:38:85:c9:90:0e:31:3b:41:61:dd:90:
24:e7:4c:16:e3:c7:3f:be:cb:7a:af:e0:f9:5d:e2:d9:91:89:
ad:7b:96:2e:0d:62:44:48:b5:7d:34:58:8f:b6:c7:ec:b4:6e:
13:e7:f4:7b:ad:c2:a4:03:bd:c6:41:65:c4:7c:46:2f:6f:e4:
1d:62:3f:ba:bc:7b:19:d0:2d:43:8f:67:79:3c:2a:39:a5:b7:
6c:80:96:f2:d1:51:a3:56:1b:43:dd:6a:a0:c2:f3:e1:af:77:
10:35:0d:7e:b2:df:88:e0:98:4c:02:f2:40:10:a4:1e:58:ca:
53:34:7d:ce:ef:cc:1a:37:d8:69:56:50:0e:34:ed:d4:8b:1b:
0a:4a:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:17 2025 by rpki-client