Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File: G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier: lLEmxPjoV+g8WzWnWWdD0Z7ubS8dgMAzpbj7LdpURlI=
Subject key identifier: C4:39:10:7A:CD:B6:59:7E:E1:4F:74:79:99:6E:02:CA:25:5B:43:9B
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer: /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial: 0194BBCEFAF2D6DD4EE5E3134A11D72865EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: wu0R0TiyP72UOWytjEM1QvCEEIRmhGC26vppdi+Fpg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fa:f2:d6:dd:4e:e5:e3:13:4a:11:d7:28:65:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=c439107acdb6597ee14f7479996e02ca255b439b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:13:21:e3:7f:66:a2:68:f3:09:c3:e6:31:
0a:50:a8:ca:b3:5d:4d:51:61:5b:cd:a0:85:78:b8:
c9:1d:e9:55:ed:3a:93:33:cd:ac:a2:a8:de:7b:c3:
a7:ec:cc:61:84:76:9d:f6:98:43:10:1a:a7:cc:25:
a7:f9:eb:2b:1e:ce:1a:8f:55:db:c6:ee:1d:08:7c:
08:7d:38:68:62:86:03:98:d3:81:ce:20:24:8a:b7:
e5:aa:5b:eb:53:b0:3b:60:4a:03:15:56:2e:4c:65:
92:7a:31:51:0e:33:3c:21:cd:be:a7:d3:bd:86:01:
d4:c7:d7:84:26:e1:75:31:a0:95:d1:1e:72:e4:a3:
1e:a6:a0:98:c5:5f:7a:7c:06:1b:38:3f:97:c0:94:
f2:47:52:b3:96:84:b4:4e:94:83:d3:ac:ff:f0:a2:
e3:c0:d8:00:06:3f:76:fb:e0:be:ab:b7:62:63:0e:
d4:1f:d0:f8:10:8b:2e:1a:74:e2:04:27:7d:bb:57:
29:b8:ce:8a:f0:12:85:5c:98:71:c2:d0:5f:6e:3b:
ef:84:dc:63:ca:96:e3:4f:55:78:dc:c4:0f:28:be:
76:f2:ec:1f:ab:1d:02:7b:8d:02:6d:df:73:8a:22:
93:c0:62:38:8f:c6:60:b9:b1:5f:cb:ba:d6:fb:c6:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:39:10:7A:CD:B6:59:7E:E1:4F:74:79:99:6E:02:CA:25:5B:43:9B
X509v3 Authority Key Identifier:
keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0f:96:2d:f4:60:92:cd:db:cb:28:24:6a:9a:d8:56:85:de:
bc:6d:6e:35:a8:b3:01:d8:65:96:88:58:af:53:ae:26:89:ab:
b5:5d:81:55:f0:55:cb:5f:6a:f0:db:3a:0a:a3:7e:f1:36:2c:
1e:69:4d:b1:37:6a:3d:2b:ed:28:7b:3e:d7:ed:0e:44:11:b4:
71:17:ba:d9:a9:16:47:ec:1f:a6:a9:24:23:3f:88:80:9f:2c:
46:d2:c0:d9:57:89:e6:27:cb:23:5d:31:e8:aa:01:08:11:c2:
3d:53:84:aa:bd:4f:b9:fc:d2:c1:01:78:3e:c4:6f:58:11:f3:
6b:01:ee:f7:4b:bd:f1:71:09:dd:80:84:ab:63:95:3f:24:23:
3b:01:85:57:b1:1c:68:79:7d:17:35:e3:28:e1:ce:22:0b:25:
f0:25:41:dd:e3:d1:69:56:d4:10:22:75:32:1c:45:fe:f0:98:
70:61:69:93:4f:d6:67:3b:9e:0c:a6:91:7c:7d:0b:90:1f:ab:
0f:5d:fb:a1:c5:e4:bd:c0:59:9e:f8:8d:42:d1:9e:3b:2b:e2:
75:46:c7:0f:fb:36:4e:7a:2b:d3:1d:ad:91:47:ef:bd:8a:7c:
f3:a8:73:1c:23:78:11:5d:08:54:91:fa:db:c3:64:d8:16:2e:
5c:42:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:18 2025 by rpki-client