Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File: gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier: M8kCsDkKmLctMHrhAy1NSR9hMxCl9Tp6w+RurHsuOLI=
Subject key identifier: 24:75:14:5F:02:6C:48:CE:2B:3B:BB:F5:AB:73:81:1B:9E:EB:B1:7F
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer: /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial: 0194BD176955382E7DC3B92F1532493C02CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number: 0474
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: 6SukC9LKOns8g/T+cGYOFsmohacf4qZEFcWNQiZwYA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:69:55:38:2e:7d:c3:b9:2f:15:32:49:3c:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=2475145f026c48ce2b3bbbf5ab73811b9eebb17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:0f:a8:28:e4:f0:3c:14:75:5b:54:5c:f1:
ca:ba:22:0e:49:b9:35:c2:00:d3:09:45:da:b1:68:
90:73:a7:1a:5a:a7:79:1d:fd:44:22:41:c4:f7:83:
8c:2c:24:dd:aa:9d:f1:73:16:19:ee:4b:9b:55:15:
e6:8f:98:e6:14:be:e8:7c:24:a5:1c:69:8e:7c:d2:
88:87:6c:1c:84:ef:b5:7c:ee:b8:17:63:e2:2b:fa:
bb:1c:c9:06:12:b5:c4:59:90:85:20:db:96:07:5e:
93:71:0a:73:2e:37:70:73:96:46:a3:36:1a:87:e6:
08:2f:bb:c9:c2:8f:6b:14:b8:56:92:46:a1:0c:36:
52:a7:83:da:9c:1a:46:0c:d9:4e:e4:dd:38:9d:0e:
bb:2d:e7:ff:9c:11:39:ca:84:b6:5d:50:2e:41:d1:
e9:05:7b:2b:4c:03:be:86:66:04:bc:ff:49:f4:8e:
0b:bc:6b:e3:fd:19:fa:24:38:11:6b:7f:c6:19:2e:
66:2c:46:40:27:c7:4f:b1:c6:0f:c2:45:00:c9:69:
b0:a4:23:e9:53:25:b5:2a:e6:8a:d8:fa:cc:85:f9:
3d:69:96:25:4a:f7:42:c4:32:35:a4:48:b1:78:f7:
d6:0e:76:5e:3d:71:a4:a6:69:71:10:c3:81:09:ba:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:14:5F:02:6C:48:CE:2B:3B:BB:F5:AB:73:81:1B:9E:EB:B1:7F
X509v3 Authority Key Identifier:
keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d0:8c:f4:27:f1:c0:76:55:b3:18:67:8e:38:aa:00:74:1b:
42:d2:09:81:b2:aa:13:ce:72:84:9c:6e:c8:c7:e0:55:b0:91:
88:8c:15:f8:4b:fa:14:e0:d7:da:68:ce:9a:40:9a:65:ec:86:
06:ad:1a:6b:11:cf:f7:8e:e1:d1:70:72:7b:f2:ce:1c:48:ef:
67:02:61:f8:28:b5:4e:70:11:78:a0:6b:36:13:0d:36:a5:71:
96:e5:d0:ec:0b:9c:27:bc:aa:10:e0:13:9b:e9:3d:38:25:32:
ea:ac:8a:81:b8:5e:7e:c5:21:d8:80:02:bb:97:fe:81:dc:f5:
19:68:88:a0:af:b1:51:c0:3a:f8:2a:93:7f:88:b2:d7:03:90:
1e:e7:b9:2d:8c:32:90:fa:a2:4a:71:e4:58:4f:22:00:d2:89:
61:ab:3c:5c:8e:a5:e9:95:16:bf:30:c6:70:95:29:ba:5f:53:
64:08:85:cc:81:04:7b:81:af:4d:61:f1:da:23:ec:e8:83:74:
9e:9e:67:46:70:da:90:76:2b:0d:ef:e6:bd:f8:d4:c2:84:ad:
94:35:a9:c9:77:35:9b:27:90:5e:31:16:e5:2b:9e:10:19:55:
df:d2:d1:a4:73:52:71:0f:f7:4e:ff:29:c6:ae:e2:1b:bc:a1:
9d:b8:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:08 2025 by rpki-client