Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: iazNugYUDGQ5iwY7gxXsjczxAu54sCAce4ZoJFoCFwQ=
Subject key identifier: 8D:41:13:FE:B4:5A:58:F9:47:DB:9A:62:17:DE:B8:6C:76:C7:B3:78
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 0194BCAA021FAA85479D923549B35864EA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 0261
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: O/qddjE0WO/8FuWlymJdhUIL3WGJLOTJGTM7b5RZd9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:1f:aa:85:47:9d:92:35:49:b3:58:64:ea:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=8d4113feb45a58f947db9a6217deb86c76c7b378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:c8:fb:d5:58:88:f2:d5:62:19:ab:23:11:
4a:06:88:5e:ae:01:4c:13:14:10:3f:2b:19:32:64:
78:2e:e1:c5:46:14:4e:bb:be:51:1e:da:e9:20:c2:
bb:e4:d5:1d:f2:82:49:67:ce:05:b2:b1:5b:e6:1f:
98:58:09:0b:36:55:55:fd:a2:cd:b3:6f:fe:ce:6d:
1f:81:3e:2f:a4:0e:c9:3c:4e:18:43:7d:4e:04:d2:
ef:69:81:a2:ac:7d:c5:dd:90:4f:d3:b6:32:36:97:
aa:d8:4f:ce:a7:e5:7e:99:d3:6e:0c:dd:3d:d2:2d:
80:3d:d7:cb:6c:c5:63:8a:57:96:96:d5:4e:94:97:
2e:ab:7a:70:f1:70:29:83:48:09:43:03:22:95:90:
5d:d9:b2:6c:9b:cc:02:78:49:74:ba:e7:69:c1:42:
c2:9c:54:f6:7e:5b:0c:53:e1:79:eb:db:06:71:13:
51:62:14:06:c0:18:42:0c:13:b6:a5:ac:d5:43:d6:
e6:36:94:cc:54:19:1c:4a:8a:ad:56:b4:ba:5a:d0:
43:da:82:d4:92:d7:34:da:52:7c:2a:64:e7:c7:74:
5b:d7:46:c8:6e:5b:63:5d:c7:4d:07:86:0e:59:66:
66:4f:8f:59:48:9b:89:a9:a4:b7:d0:c0:eb:81:06:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:13:FE:B4:5A:58:F9:47:DB:9A:62:17:DE:B8:6C:76:C7:B3:78
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:52:b8:65:b1:cc:2b:a6:77:c4:f3:1c:be:92:6b:aa:02:26:
f8:1d:37:91:f3:c9:7b:2b:9a:d7:70:89:6b:9a:ff:64:69:1a:
f6:df:60:9f:04:26:89:72:52:28:d8:12:68:32:d1:4c:c5:34:
bb:54:bc:9e:9f:14:92:51:e6:07:e0:7f:f9:3b:0a:cb:5e:39:
1f:f3:bc:2f:9d:8b:e1:e6:a3:40:98:51:ab:c7:b9:a3:2c:26:
10:5a:f7:bb:ab:91:c9:1d:2e:6d:e2:31:64:4a:e6:60:12:b4:
ed:20:ba:87:ed:a7:e5:62:c7:04:89:b7:4d:f6:1c:7f:4a:49:
c4:c8:eb:76:cd:7c:1f:2b:96:e8:16:e4:70:cf:8a:bb:55:1f:
6b:98:6a:e7:38:ae:46:c6:b2:75:94:4f:a0:d2:5b:b0:a0:3e:
75:5c:82:b5:3f:f7:ba:4e:6f:25:b4:6d:01:07:a3:da:1e:dd:
20:cc:d4:1d:49:cc:62:46:b2:75:ee:f4:7e:1c:1a:5d:d0:4e:
1e:c2:c9:e3:da:c5:1d:25:c2:1c:bf:ef:a5:30:38:28:bb:fa:
82:8b:ce:db:a2:85:0a:91:f6:3e:8d:71:14:5a:b8:2e:55:2f:
24:b3:2f:ea:85:46:51:2f:04:36:cc:27:a5:10:75:55:b8:dc:
68:f9:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:50 2025 by rpki-client