Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
File: g27BEvKGCMthun5cs62BDusT8Wk.mft (raw, json)
Hash identifier: d9oXg/G1meP5YUQDcNzGmuhfcYuRdOqt/rFA4Emp1bw=
Subject key identifier: 51:B7:23:39:AC:B3:84:80:E8:AD:22:C3:1E:88:9C:9F:42:AD:D3:BD
Authority key identifier: 83:6E:C1:12:F2:86:08:CB:61:BA:7E:5C:B3:AD:81:0E:EB:13:F1:69
Certificate issuer: /CN=836ec112f28608cb61ba7e5cb3ad810eeb13f169
Certificate serial: 0194BC3C1E1A61AE6E2B57C9C905D55D49D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
Manifest number: 0224
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: g27BEvKGCMthun5cs62BDusT8Wk.crl (hash: 81Xl+2ArZvFEFCVSkJlcrMvvM4PnIvIX3QrOp8fQovg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1e:1a:61:ae:6e:2b:57:c9:c9:05:d5:5d:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836ec112f28608cb61ba7e5cb3ad810eeb13f169
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=51b72339acb38480e8ad22c31e889c9f42add3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:1d:43:06:a2:27:d9:f9:43:3d:cc:d2:5d:
ab:5a:dc:91:4f:89:ab:ab:56:18:dc:bc:b6:b0:6d:
22:44:f1:d5:52:39:f6:ea:6b:90:be:03:22:53:bb:
9f:9c:ab:39:08:d9:a9:f8:d5:d9:ad:a1:68:c3:aa:
9a:1c:67:e2:29:80:92:fc:26:80:fe:4b:45:77:62:
3b:17:a2:37:3f:b2:05:d8:b0:68:84:ec:53:2f:83:
c8:bf:1d:69:05:48:43:3e:0e:ed:36:90:55:85:23:
d5:5a:44:c6:20:82:74:f9:3f:e9:52:ca:71:7b:c6:
7f:39:dd:38:cd:4f:3f:c4:47:26:df:57:b9:34:c4:
70:01:a8:f6:74:3c:67:66:cc:b9:43:15:cb:82:62:
70:d4:bc:ed:df:70:94:71:19:29:73:04:fb:2a:89:
78:ad:16:f9:fd:91:fe:80:c7:b4:c0:a3:e3:c3:d0:
ce:f8:ed:ec:fa:5d:27:d6:db:7b:75:dc:c9:46:f3:
16:9c:2b:cf:0e:bd:d0:20:d3:0e:69:23:e8:5d:88:
b6:77:f7:99:fe:60:49:c3:26:00:93:e5:04:23:50:
b1:75:93:d2:de:8f:5a:90:16:ab:90:03:4e:35:e3:
e6:f2:a2:90:b6:19:08:5e:93:78:d9:a7:67:40:4b:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:23:39:AC:B3:84:80:E8:AD:22:C3:1E:88:9C:9F:42:AD:D3:BD
X509v3 Authority Key Identifier:
keyid:83:6E:C1:12:F2:86:08:CB:61:BA:7E:5C:B3:AD:81:0E:EB:13:F1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a2:c4:98:5b:a2:d2:68:74:77:f9:f4:49:6c:1c:85:de:3c:
76:e9:0e:65:1d:0b:b8:00:fb:a2:a9:8f:21:dd:8d:fe:2c:a1:
f6:85:bf:84:0f:6f:11:2d:81:2c:47:d3:51:84:a0:da:ce:f1:
0b:d7:59:52:a2:45:4d:61:46:0a:28:6e:4a:f2:50:88:cc:91:
36:be:e5:9a:51:be:73:f1:76:a5:29:76:f5:d1:d2:88:2f:02:
95:3d:af:c7:e4:24:a3:9f:d1:22:90:65:17:5b:69:83:23:db:
1e:67:8f:95:90:92:a3:22:99:26:b1:45:16:8c:ba:e5:7e:17:
0d:df:c1:a5:9c:e3:80:43:0a:4b:97:95:56:bf:3e:79:33:da:
79:0b:03:c2:a3:55:37:b8:63:48:d8:c4:77:a8:b3:7b:93:f5:
97:dc:86:64:0d:fd:c1:55:54:cb:8c:2e:40:37:f8:8e:ae:a9:
0f:7f:22:0c:3a:06:96:d0:14:07:bc:66:f6:e6:fc:b5:ed:36:
b2:c4:a2:32:f9:d2:c5:ad:40:67:bf:3b:af:23:f1:5c:4a:44:
25:a7:2a:6b:d2:10:c0:b5:3d:23:a0:b1:66:1d:07:95:81:d8:
50:0e:91:e4:a3:9d:62:55:ad:d7:eb:e4:9e:f1:ca:b5:f5:42:
e7:de:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:32 2025 by rpki-client