Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
File: gSdW6ySj41K9bonR9aoISIlhpnQ.mft (raw, json)
Hash identifier: In4ACx7C2sQg0xLzd8iBI1LKbrrz53u9dsVb6NHPx/s=
Subject key identifier: EC:AD:81:68:B5:CB:74:80:F9:93:34:6E:75:9D:69:DE:E0:1F:D4:2A
Authority key identifier: 81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
Certificate issuer: /CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Certificate serial: 0194BBCF098FC460A8D9A662557FCCCEBFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
Manifest number: 0741
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: gSdW6ySj41K9bonR9aoISIlhpnQ.crl (hash: M3uskpANDXh4vixhmgAjeDO6fdeRyIGE5mxxQr0NHvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:09:8f:c4:60:a8:d9:a6:62:55:7f:cc:ce:bf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=ecad8168b5cb7480f993346e759d69dee01fd42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:64:cc:8d:46:0b:cd:d4:0e:3e:33:b3:b0:
6d:9b:0f:a7:f1:d8:aa:25:cf:12:48:4c:0d:31:fa:
da:a8:7a:a6:b2:50:16:d9:60:bf:19:94:e9:26:b3:
65:2d:20:4c:95:a6:7c:58:c8:4a:51:1d:b1:85:97:
66:a8:78:f1:55:08:8a:31:b2:60:61:7b:60:23:4f:
50:6e:49:3a:59:e3:32:27:46:76:6c:8c:6b:2a:e2:
e6:97:3c:79:11:69:74:f4:91:eb:0c:5b:86:69:2c:
f3:e9:2a:58:5b:6e:24:10:69:be:e0:be:d1:ed:74:
48:ef:bf:1a:d5:15:81:0a:7d:89:f9:6d:ea:a4:fb:
b2:51:4d:52:e9:56:37:6d:d1:ce:5e:87:e4:5e:89:
e9:b9:e9:2e:7f:50:d9:6a:64:7f:73:5f:a3:26:cd:
51:af:f3:b0:a1:7a:6a:aa:5d:2b:b6:ce:10:c6:88:
e3:69:40:3e:67:5a:bf:88:2b:a3:3c:6c:ef:22:a1:
98:33:9a:97:5e:00:04:f2:61:16:39:bc:6d:54:4e:
ff:4e:57:95:bf:93:10:97:f1:1b:c5:f4:60:fb:f0:
0e:64:8f:0a:32:df:b3:cd:5e:46:53:12:b2:d4:6d:
c1:4d:5f:24:0f:5c:30:3e:38:57:7c:4b:31:91:55:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AD:81:68:B5:CB:74:80:F9:93:34:6E:75:9D:69:DE:E0:1F:D4:2A
X509v3 Authority Key Identifier:
keyid:81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f5:0d:74:47:0e:b2:d0:f7:08:c3:4b:b2:6d:7c:0c:7c:c6:
6b:d9:00:1a:05:8c:21:b2:de:4d:39:d0:58:48:74:38:37:e8:
6f:d3:83:bb:45:f4:b9:a2:10:e9:74:04:34:82:ff:76:9f:75:
c0:5a:33:f5:15:15:71:78:64:ed:ab:69:57:f2:ec:ac:00:01:
2a:43:bb:d2:39:ed:85:ba:46:fc:59:ed:0d:44:3e:42:68:c6:
a1:40:17:1c:42:e4:24:bb:d0:46:af:ef:3c:df:2a:16:ff:ce:
58:d9:63:7d:e6:6e:75:27:f6:43:cb:64:5c:cb:75:de:ef:0f:
e4:59:77:6d:e7:17:f2:56:bb:d1:d9:d7:67:d2:53:ec:97:12:
c2:f0:e3:23:b0:7c:bb:e1:2f:41:8c:76:97:74:a4:86:39:84:
40:0e:fd:e0:15:2c:fe:1f:f2:b7:ac:88:f0:48:32:7b:fa:50:
c9:6b:43:9a:ff:f8:16:2f:97:aa:21:87:f7:d7:e3:a3:d5:48:
be:d5:f9:5a:c9:61:c5:5b:c2:25:00:9f:43:3b:b0:bf:f7:d8:
1f:67:d1:de:7b:d3:77:11:ce:06:2c:be:e3:62:88:32:04:37:
04:53:72:43:cb:d6:e1:ec:c1:7c:51:02:f9:52:23:ab:5f:21:
e7:5b:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:25:20 2025 by rpki-client