Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier: 435kGKzSj4Z7IrtC5uiDwRvyRgGIHVzvfvbFzucdDIs=
Subject key identifier: F0:BB:21:4A:07:40:63:7E:F1:24:CC:81:32:E7:19:17:44:A7:15:6D
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial: 0194BBCEB0332F55DD8B30D39236560A1644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: F8U+qGrHbZvQYdo/tvXQxZDyqticm25WiHP78HFWJK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b0:33:2f:55:dd:8b:30:d3:92:36:56:0a:16:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=f0bb214a0740637ef124cc8132e7191744a7156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:02:8e:da:39:fa:3c:38:bb:de:a6:6a:16:
12:96:9c:99:d2:1a:49:d0:e0:0a:c5:cd:0c:af:da:
d6:e3:0e:04:0d:ec:b2:a4:6b:41:4b:ae:42:83:bc:
2e:fb:ca:f3:71:19:f6:13:07:c0:c0:4c:39:e6:c2:
5f:df:56:77:1c:06:1e:c7:11:6f:79:28:77:83:ed:
fc:56:e0:17:81:0f:43:16:15:91:ed:de:65:b0:c5:
91:60:6e:54:fd:e3:c4:5b:ab:43:20:fe:4e:3e:cf:
a6:dd:7b:49:12:45:c5:9f:3f:2a:53:d4:dd:12:89:
88:04:cd:16:8d:93:fd:f0:79:8f:ac:0b:d6:45:68:
18:4e:ef:38:6f:e4:0a:c1:6a:a3:60:48:4c:ff:cd:
f4:a5:98:85:2b:6c:ea:e2:2c:e3:d8:53:c5:05:d7:
ee:70:b8:c1:6d:fa:1e:57:4d:cc:76:60:bc:0a:18:
5b:64:9a:5d:e0:f7:c8:24:62:f0:4b:69:08:43:d7:
84:2e:16:5c:6e:2c:af:a8:45:4a:73:2e:f8:cb:1e:
04:15:61:68:c0:3f:0e:b2:1e:ee:af:39:eb:f2:e2:
62:87:65:77:33:80:b6:6f:f5:4d:84:52:2e:25:24:
64:9e:ba:32:71:7d:dd:a7:3a:cc:d1:7e:f7:8a:85:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BB:21:4A:07:40:63:7E:F1:24:CC:81:32:E7:19:17:44:A7:15:6D
X509v3 Authority Key Identifier:
keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4c:17:34:36:e9:a9:df:48:41:3f:8f:c1:73:44:3c:e6:7d:
cc:be:76:60:03:54:1f:dd:8e:01:6d:7f:bd:df:c4:ae:c7:4d:
0b:8d:d7:38:16:18:ff:ba:0b:e6:4a:a4:7f:1b:c5:0c:7b:8d:
64:2c:84:d1:08:10:47:40:84:77:f0:84:32:ba:4c:75:b2:63:
c7:6e:6c:c6:4e:36:a6:e5:43:f8:e1:0d:62:57:6e:d7:75:14:
12:b5:2a:a3:a0:19:b7:2f:86:89:bc:8f:e9:2f:e8:a2:f0:25:
c3:6a:7e:d4:0d:d6:4f:b6:b3:7e:e2:87:9f:a6:29:0c:0d:b5:
3b:08:31:69:d8:38:04:ad:0b:44:75:64:99:25:0f:1f:d0:f9:
a0:24:f3:11:07:8b:ee:2e:f8:51:2d:f3:20:5d:e5:06:19:e4:
ab:be:e2:4f:2f:8b:18:4a:a9:f2:a3:d3:8a:4a:eb:7f:17:23:
5e:3a:62:98:4c:e1:74:d9:f0:9b:c5:41:01:1c:1a:b4:bd:74:
14:a7:a6:b0:af:ff:ef:fc:07:d7:e4:f2:7c:e5:77:95:1c:5e:
92:8d:fa:3f:44:ce:d1:30:9f:fb:ec:b9:12:d8:e1:e1:02:7f:
0d:3e:3e:69:68:b2:45:89:f0:00:ed:63:0c:e0:b7:e5:40:ec:
9e:21:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:45 2025 by rpki-client