Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File: GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier: 1czSbmf4tdrV5P1sUElA1fp50jbZ0pqLDfFN4qKMDK8=
Subject key identifier: 00:45:5D:6E:66:E3:D0:6C:6F:6E:3F:5F:3C:AE:DD:C3:0D:E6:4A:E2
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial: 0194BBCE445EB383F40D927B06706A312C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number: 0C92
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: 288F+fgeSW8xzhg4WmGsz03w3biyKsYWglNgGudS+/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:44:5e:b3:83:f4:0d:92:7b:06:70:6a:31:2c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=00455d6e66e3d06c6f6e3f5f3caeddc30de64ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:48:bb:45:e9:65:00:8b:d2:bc:8b:17:93:
0d:35:4b:03:7e:69:1e:d5:ef:98:77:b4:3d:0d:69:
7f:a4:fe:5b:ed:95:65:86:de:d7:7a:aa:e2:fd:91:
08:76:ee:90:ff:67:da:29:37:55:f5:11:d9:40:68:
53:38:50:e1:63:00:da:03:c1:6b:b4:04:6e:c1:87:
80:06:6b:37:1d:73:8a:d4:b0:2a:b2:c7:fe:f8:b7:
92:ee:df:30:f3:5c:60:0e:bf:a2:0f:7a:07:5b:e5:
6f:6a:48:8d:97:86:86:94:28:33:df:2e:a7:bc:75:
1a:59:73:77:64:cd:47:42:2a:18:8a:7f:a3:7a:32:
a4:88:83:bf:98:68:f0:ed:d1:cf:2d:2d:85:4e:c9:
ba:fd:f8:0f:60:9d:e2:56:f5:37:be:85:48:4c:d9:
f6:bb:7d:77:41:7f:63:04:ac:28:18:0f:44:d2:39:
a3:15:9a:07:b4:da:94:3e:ae:65:b1:0c:e7:58:c5:
95:1e:cc:08:f8:ae:40:eb:d8:5b:33:f7:f2:08:8b:
26:df:64:42:96:a8:18:76:68:10:29:38:5a:e5:d1:
55:25:66:47:ae:81:0a:b5:41:47:99:d2:43:91:7b:
67:0e:ae:c9:a3:3f:31:ce:93:5f:97:75:73:bb:8d:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:5D:6E:66:E3:D0:6C:6F:6E:3F:5F:3C:AE:DD:C3:0D:E6:4A:E2
X509v3 Authority Key Identifier:
keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a9:3c:f4:c8:b3:ef:75:c3:a7:d0:1f:28:16:2e:b8:31:9e:
e6:10:b1:a3:f0:0a:18:aa:74:a1:5b:f9:91:09:bf:e5:46:6e:
ae:25:cd:5a:79:89:94:04:7a:20:a8:7f:eb:f7:aa:94:62:a0:
61:83:94:00:13:9f:44:2b:9d:7b:90:90:1d:e3:5a:23:0b:8c:
b6:9a:25:8a:41:21:45:f9:28:1c:1b:6c:d0:f5:2b:50:39:b4:
b0:db:0e:d8:9c:ea:c1:0f:7d:04:79:4f:e0:85:0b:23:f0:36:
fd:98:48:40:33:c5:97:65:33:15:8d:53:fe:ab:34:d0:81:b9:
d6:3d:4d:fe:c2:14:eb:a4:dd:2e:d6:b8:d4:eb:cd:1b:b3:36:
be:4c:46:2c:3b:76:ea:9d:04:a4:20:96:80:87:44:63:f4:6b:
42:32:43:4a:60:af:a6:ca:07:90:3a:bf:8f:16:8f:5a:57:99:
4a:9e:63:d3:c3:71:6d:11:15:b5:a0:6a:3d:ae:f6:93:61:c4:
19:fe:01:e8:c5:06:7b:bd:18:d2:05:12:4e:7a:0a:be:85:36:
09:cd:15:e3:1f:8c:7d:ed:73:4d:7b:27:ac:1a:68:0b:cf:4f:
76:09:c2:c0:b3:03:01:eb:a9:f2:a7:3a:72:49:1b:f5:4f:b5:
59:1b:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:26 2025 by rpki-client