Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier: v5s4OK0zbkWwJJDm4S46aezz9IxyLFJcENBoQZHdW7g=
Subject key identifier: D5:DE:32:09:89:2E:03:9F:3C:88:1A:42:23:67:48:15:39:19:AA:23
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial: 0194BD4E8AB012A6093648A2D93BD8CFED18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number: 01CF
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: g/jqEaqVoukGkm1+2/lgbPb9uZR6chPOIke12ciwSY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:b0:12:a6:09:36:48:a2:d9:3b:d8:cf:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=d5de3209892e039f3c881a42236748153919aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:fd:23:e7:b0:24:59:45:4a:e8:e5:d9:39:
91:b8:0b:64:e6:90:94:80:87:f7:bc:37:e0:07:e8:
fa:60:7d:7f:c3:1a:40:5e:0e:e5:98:fb:6e:dd:10:
4b:6e:e9:58:3e:df:df:1f:29:84:2f:31:e3:b9:65:
d5:33:a5:c9:9a:87:33:33:fb:bf:2f:2d:ab:21:a6:
67:7f:4b:af:28:32:79:cb:c0:76:4a:21:2f:54:80:
1f:21:88:66:b9:51:5e:c6:83:f0:63:5e:e7:a0:73:
e3:48:58:43:de:e2:87:65:10:46:cc:a2:b6:ce:80:
6a:bb:45:0c:74:58:c1:11:38:8a:a3:48:b6:cd:2b:
71:40:45:51:e4:f1:03:47:e9:1d:77:08:76:a5:98:
6e:43:82:8e:1e:5a:25:a2:26:7f:c0:57:73:d2:85:
e9:69:86:c6:8e:b1:79:5d:d0:ad:92:2b:3b:b3:a6:
8b:87:53:b9:97:34:ff:28:ac:5e:70:35:77:39:27:
ee:75:46:45:06:56:1e:69:43:5a:2d:ca:68:10:86:
40:d1:81:3b:be:79:6c:e9:0d:b7:3e:8b:42:b8:a4:
0c:ca:59:c2:fd:8a:d1:cf:84:bb:3f:57:ad:7f:62:
fc:d7:91:aa:2f:0c:08:e5:b9:f6:30:58:f1:66:89:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:32:09:89:2E:03:9F:3C:88:1A:42:23:67:48:15:39:19:AA:23
X509v3 Authority Key Identifier:
keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a4:55:3a:e2:b4:74:35:b5:c6:11:0e:99:07:d1:7a:a7:1a:
3d:ca:01:bd:c0:e5:4e:15:a0:03:d6:cb:be:24:ed:1a:26:1a:
a2:a6:88:82:41:b1:ea:73:b6:8f:a2:4e:de:f8:40:6d:34:f1:
34:69:4d:e6:95:30:ce:c9:da:fc:3d:10:d7:15:31:f9:bc:3a:
17:a9:9f:27:79:97:fb:54:54:c6:ab:08:0b:4f:a4:7c:08:57:
7e:a8:2c:e2:31:7c:bf:97:51:46:f2:39:d2:c5:28:97:00:ee:
95:eb:2d:93:3c:40:c8:d5:ec:87:01:f6:53:d5:16:f5:63:75:
ab:b7:f6:5e:a7:06:18:84:bc:1b:0a:ea:4b:02:ab:3b:6a:9f:
1f:b2:ca:08:fb:e0:5e:d3:69:7b:e7:4a:de:b0:2c:9a:77:87:
57:1e:a3:51:e7:eb:ce:ad:9f:60:dc:7f:97:a2:ee:a8:3d:2d:
13:16:d7:ea:11:ce:57:cf:11:7e:a2:56:70:84:b5:44:45:3b:
14:37:7c:d9:34:13:83:c1:1b:21:76:f0:eb:05:84:b8:df:0a:
3f:b1:b1:aa:59:54:29:76:0c:83:52:9b:5a:b9:e6:f2:11:59:
c9:d2:fd:80:a4:70:56:4a:c0:21:9e:3a:61:eb:d6:da:30:81:
64:61:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:10 2025 by rpki-client