Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
File: GGr6K4fO01gj1aLMCghE56FRa_M.mft (raw, json)
Hash identifier: XpVv6fj8WYAS1IyAM8xJESAAw37qF9h2oCkWvgxtvFY=
Subject key identifier: E1:11:CA:4E:80:4A:BE:DA:96:AD:C6:E5:4F:F2:31:C0:B1:D0:60:EB
Authority key identifier: 18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
Certificate issuer: /CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
Certificate serial: 0194BBCE2AC8EC6B4111E51C8FD9C75A09E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: GGr6K4fO01gj1aLMCghE56FRa_M.crl (hash: 0X4WXBd91PQ9QYjXZreGxIHBtAEfgoMvhaIiSh3tXRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:c8:ec:6b:41:11:e5:1c:8f:d9:c7:5a:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=e111ca4e804abeda96adc6e54ff231c0b1d060eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:6a:20:38:7a:3f:de:f9:63:2b:49:14:f3:
cd:bb:13:9a:ab:38:c4:ef:b6:32:55:76:e6:23:fc:
61:e5:5e:03:ee:2d:c8:64:3e:4f:1c:bf:cc:8a:da:
75:ba:5b:0c:b0:7f:72:db:fa:d3:03:ba:3e:15:5c:
c8:b4:41:1a:eb:55:d8:f9:91:bd:11:3b:60:5b:f6:
53:7f:53:31:f1:a2:5b:37:9f:ec:a0:df:db:ad:64:
6c:44:b0:22:b7:da:b8:4f:cc:30:6f:69:30:d2:3c:
58:11:98:d8:bd:88:18:5b:37:e7:71:ed:ac:ae:25:
a7:be:7b:4d:da:80:77:22:93:53:ae:7a:c7:43:02:
18:df:83:96:b5:80:2b:84:5f:1c:5f:09:d3:2c:01:
c4:3c:77:9f:8b:db:91:8c:18:d7:c5:c0:f6:f8:87:
cd:8a:4a:c7:ff:a8:90:0f:73:93:03:b1:b7:00:48:
21:62:07:9f:88:31:13:54:0c:45:4f:5a:57:92:9d:
f9:f9:62:ed:c5:24:01:a8:7c:69:8c:09:dd:c5:5d:
3e:c7:e9:2d:a5:43:e0:94:d1:ad:1e:7b:68:13:43:
4d:7a:b3:5d:40:ec:e1:6d:f2:20:8a:d5:ea:a4:f4:
ac:82:e0:1d:70:47:33:af:e2:78:e2:41:da:d6:6f:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:CA:4E:80:4A:BE:DA:96:AD:C6:E5:4F:F2:31:C0:B1:D0:60:EB
X509v3 Authority Key Identifier:
keyid:18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:93:c7:99:68:e4:85:bb:ad:30:57:f5:22:a7:fd:6a:30:
5c:2a:ea:da:a5:bb:a8:5a:cc:79:68:4d:a4:17:40:e7:9a:bf:
af:de:56:5d:1c:d4:97:02:72:96:11:06:b4:47:07:97:71:b6:
80:bb:2b:3d:32:1d:4d:c8:be:8f:36:3f:81:f1:77:9e:6c:3a:
33:33:58:20:53:a4:33:40:4a:16:ae:af:14:48:90:3f:1d:60:
70:0c:44:6c:a1:1d:88:a1:76:25:e7:4d:e6:78:7c:5d:ab:36:
07:6c:16:04:b9:27:58:e3:4e:1e:31:e2:c1:15:91:2a:2a:71:
f1:83:8d:80:03:09:c8:8b:b0:5c:ed:c9:b2:63:a2:b9:e8:90:
77:ac:f5:86:85:03:82:e0:c7:cb:60:e2:e3:8f:b2:a5:90:65:
92:54:c9:05:88:82:7a:0f:53:34:23:a0:f2:d5:01:d4:3d:82:
35:99:62:a2:1c:d0:25:94:74:a8:8f:ab:30:f5:66:81:bf:74:
7a:3a:1a:bb:9f:59:a8:c2:bf:4c:6f:f5:c2:e1:18:fa:da:42:
86:3a:7e:5a:c9:38:48:5c:2a:8d:fb:78:aa:ce:13:a8:fe:8d:
9d:40:c1:a0:2c:49:7e:45:e2:b8:e8:4a:8b:ce:2b:cb:6d:e9:
dc:da:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:00 2025 by rpki-client