Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: S569TS5e73dvaEA+Kl1WDwu0IsGy+GJRpteDVKXGe4Y=
Subject key identifier: 04:58:3C:2A:19:E9:B8:B0:44:A2:52:F3:1E:40:C1:DB:9E:A4:76:38
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 0194BBCDD804D582DF53B8E606FA94168810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 0791
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: 2/9/8b+te0QxaEw0ftUs0HnO86P6Je0e8CPbo4+oLE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d8:04:d5:82:df:53:b8:e6:06:fa:94:16:88:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=04583c2a19e9b8b044a252f31e40c1db9ea47638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:24:10:17:a1:9b:84:90:bd:e1:61:36:d6:
d6:97:e7:ca:cb:0f:08:3c:52:bd:13:e4:db:14:44:
ef:64:80:0a:b0:8b:c6:28:b1:54:6f:f7:6e:b6:84:
5a:a5:c1:96:63:80:fe:30:12:26:97:1d:c7:6c:44:
c5:ce:3b:63:2f:78:10:aa:2a:5b:0d:4b:6c:2e:69:
8d:1f:d8:8e:f2:b8:c4:2d:69:ef:1b:ae:10:45:22:
f9:d2:8a:b0:85:16:6c:a8:44:0f:7c:05:19:86:ab:
6c:a3:8d:09:f6:49:26:c6:1b:40:3b:03:d5:8a:34:
61:98:8f:b3:7a:6d:10:c5:be:30:2f:f9:1c:4c:cd:
e6:4d:6f:9a:60:f3:43:00:aa:5a:ff:ea:b0:e4:f5:
ae:65:4f:58:dc:51:08:a5:5f:ec:87:d2:c3:ba:b8:
34:59:5e:bf:50:3b:ff:f1:25:98:f7:db:3f:4f:4e:
4e:e1:47:31:d8:39:84:0d:31:13:2f:8d:b0:8f:14:
99:b7:fc:c4:a8:c8:6b:1e:c7:04:3c:63:00:90:bf:
44:83:10:69:59:16:91:51:03:5b:d1:6e:cd:bf:a9:
19:3d:28:17:00:05:b0:eb:af:61:8c:6b:09:21:b0:
a1:e2:1c:e1:56:e5:b0:d6:2a:e0:1f:77:39:3b:30:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:58:3C:2A:19:E9:B8:B0:44:A2:52:F3:1E:40:C1:DB:9E:A4:76:38
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fd:79:74:fc:66:75:14:02:c5:14:27:47:fb:a9:08:f1:f6:
10:d2:1e:8b:84:9f:13:6c:2e:cd:47:9c:1d:13:74:55:1b:0e:
2e:cd:69:dd:4d:73:d2:1a:8c:ef:0b:8e:1b:f3:1e:37:43:33:
0f:7a:e7:5f:a5:ce:d5:da:6a:39:4c:87:34:69:7d:69:d2:c8:
57:79:d8:be:9c:66:b6:26:6c:76:a8:54:ab:d9:e9:19:59:f3:
d0:2c:c9:2b:b8:b4:75:50:c8:d8:11:20:ac:2c:5a:57:d3:7a:
04:b9:48:80:f3:6e:40:47:64:ae:44:9e:20:90:2b:f6:65:00:
04:66:1b:51:ea:60:f4:25:d4:6f:3a:f5:96:8b:d3:34:1c:a1:
bf:5d:b9:b0:f4:62:cd:19:1e:0d:00:0c:c6:bf:44:92:28:34:
4d:5d:e5:f2:9c:d4:be:1d:36:37:60:3e:6d:50:0e:d5:51:91:
38:4c:7d:88:b3:2f:08:96:ea:05:46:c7:12:3a:ec:eb:b3:78:
ea:db:c2:5a:f8:f2:de:e0:6b:24:9b:7e:17:42:69:6d:a4:7c:
5a:ff:b4:c5:26:1c:ab:44:4b:c4:f8:69:d9:ff:c1:1a:72:c5:
b4:c9:4b:d4:7c:c5:07:22:ab:b9:be:af:b7:2d:62:e8:e4:b4:
62:cb:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:05 2025 by rpki-client