Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
File: GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft (raw, json)
Hash identifier: YS9tldlhDNSnzVmVhwPespSMWvzA8IjWt9mNSoYuNaw=
Subject key identifier: 42:BD:E1:42:D4:6F:4D:DE:6A:B4:6F:0F:F5:E3:80:1B:F0:29:93:AA
Authority key identifier: 18:3C:DF:52:2C:02:E1:E7:14:27:F8:51:61:99:82:E2:DD:28:39:77
Certificate issuer: /CN=183cdf522c02e1e71427f851619982e2dd283977
Certificate serial: 0194BC04CE97634F044A239499E91B6FBF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
Manifest number: 0376
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: GDzfUiwC4ecUJ_hRYZmC4t0oOXc.crl (hash: axfc2R4tEq7virs/kYRJV6hc56468cYL97HOzbxfO9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ce:97:63:4f:04:4a:23:94:99:e9:1b:6f:bf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183cdf522c02e1e71427f851619982e2dd283977
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=42bde142d46f4dde6ab46f0ff5e3801bf02993aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:9b:f9:44:99:5d:98:fa:4f:e1:92:92:49:
07:36:61:7c:c5:a0:0e:bb:92:1b:70:aa:5c:30:38:
ac:ef:59:2f:a7:75:ac:b1:7c:1c:3f:5d:24:7b:12:
ff:5f:3d:3f:ee:f8:b5:fa:93:ba:87:2a:12:dd:a2:
b8:dc:13:61:0f:0a:bb:18:ed:f6:7e:61:40:ab:13:
3b:ba:89:11:be:ac:29:64:f1:96:6c:a7:af:31:d8:
19:93:77:85:a2:2b:03:33:0b:06:71:5c:86:72:b1:
06:ad:e9:56:10:f9:9b:99:83:4b:86:68:eb:c5:ca:
ae:8f:8a:75:db:ef:7d:d9:b6:28:83:e0:ac:0c:65:
b3:7a:0a:76:d3:5a:1d:7c:5e:03:2f:f0:f4:fa:16:
9e:d5:b5:3c:6b:56:57:2e:b9:9b:74:12:bf:dd:e1:
80:a4:09:ef:55:00:d2:95:d1:4c:6a:e4:85:ab:63:
fe:24:60:34:c7:31:cb:6c:64:2e:28:42:49:d2:f1:
2d:76:43:8d:49:c9:65:3f:ec:11:6b:b9:41:0a:da:
43:10:09:b2:ea:58:ee:28:38:b6:d8:88:70:3e:39:
d0:f6:47:cb:ee:1e:f5:46:88:97:c3:a7:17:e1:49:
ba:9f:80:fc:84:26:3b:df:44:07:1c:75:c2:49:22:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BD:E1:42:D4:6F:4D:DE:6A:B4:6F:0F:F5:E3:80:1B:F0:29:93:AA
X509v3 Authority Key Identifier:
keyid:18:3C:DF:52:2C:02:E1:E7:14:27:F8:51:61:99:82:E2:DD:28:39:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f1:19:00:50:c5:e0:fb:0e:12:b9:89:1d:89:86:bb:37:d8:
f5:fa:54:28:54:ff:27:80:b1:89:c7:94:99:6b:26:0f:a7:84:
fb:9e:5f:54:4d:5e:f1:ec:58:15:6c:ef:e9:ff:df:16:50:67:
c7:c8:91:3e:32:b3:0c:8c:20:01:86:9a:fd:c9:df:63:34:b8:
a7:8c:bf:34:78:a7:da:92:63:a3:10:40:50:9f:13:98:18:2c:
70:8f:71:0b:d6:f1:01:85:64:04:89:12:0a:ab:4b:07:41:69:
ff:63:ab:91:7c:dc:64:fb:ec:97:db:81:1b:2f:9e:ba:fa:b0:
56:76:0b:39:b1:65:43:d1:78:c0:4a:f6:31:13:71:43:24:98:
2b:d3:9b:ec:4e:8f:6a:b8:48:67:82:63:a8:10:41:d8:c3:c5:
0d:4f:32:e6:7b:18:7e:f3:b2:61:63:1e:0d:63:d0:1e:0a:85:
de:47:eb:cb:53:ea:ca:a3:95:08:38:f5:77:46:f5:e3:91:6b:
23:ad:46:40:a8:47:0d:05:21:9a:0e:41:45:34:31:09:6d:be:
35:bc:b0:65:19:9e:80:40:29:85:94:df:f9:71:2c:68:ef:97:
0e:95:7f:91:ea:6c:0a:23:48:6f:3f:73:cc:6c:63:89:f8:17:
2d:d2:2d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:48 2025 by rpki-client