Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
File: ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft (raw, json)
Hash identifier: dpGR198pDmziGfkS6nBqv1BFW75X9UxxthHQ8DUxF0E=
Subject key identifier: 17:BA:E2:5C:38:E8:B3:99:73:17:23:8C:7B:A1:55:B8:8F:D8:48:E0
Authority key identifier: 82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
Certificate issuer: /CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Certificate serial: 0194BBCE92E1E03B58378CAA01BF67DFAE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
Manifest number: 0610
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl (hash: 9JV7Cku/y3pWW8jDbpsZGH3Ph8M7OzRAghJpirUTAX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:92:e1:e0:3b:58:37:8c:aa:01:bf:67:df:ae:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=17bae25c38e8b3997317238c7ba155b88fd848e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e3:a9:ef:e1:5b:73:f0:60:5d:e8:a6:18:6f:
14:44:34:59:07:d2:e8:c3:f9:90:a6:bc:f9:fc:8e:
31:50:66:8a:2a:1f:ee:18:01:c3:cf:35:24:db:72:
f0:08:8f:50:f2:44:82:2b:1b:ad:46:02:ca:0c:8a:
93:1b:19:a9:8b:6b:1e:08:68:62:63:a1:77:ee:ff:
e7:12:de:d5:d8:41:0a:39:a2:0d:f5:05:86:c4:73:
a5:a1:0f:b4:0a:0c:ea:cc:a7:a7:d6:3d:d2:86:79:
1e:c9:2c:c3:ee:d6:c7:9e:a7:f9:b6:16:28:62:df:
12:d9:0c:3c:a1:a2:67:92:14:68:02:ba:7a:b8:d5:
de:08:42:a2:13:12:0a:80:04:fc:18:ee:50:97:68:
f5:cf:80:20:ce:c4:f8:cc:c5:ce:32:1e:62:3d:21:
d5:c8:79:e9:07:29:db:8d:6d:0f:4d:a8:f7:c3:40:
6b:9f:e3:c5:97:14:cd:35:00:12:20:40:ca:1d:68:
b9:93:59:43:fb:76:a1:6b:bf:26:b7:38:ad:64:b1:
45:49:fa:00:60:f3:3b:38:b8:50:e5:e4:d2:e9:89:
93:76:af:91:c2:1f:39:5f:69:c1:3e:04:3b:06:79:
7c:95:73:cc:cc:22:29:6d:b9:1a:fd:c8:46:76:ec:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BA:E2:5C:38:E8:B3:99:73:17:23:8C:7B:A1:55:B8:8F:D8:48:E0
X509v3 Authority Key Identifier:
keyid:82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d4:f3:5c:ef:24:49:5c:76:da:11:e0:4a:7c:dc:3c:06:7d:
35:9f:38:36:ad:0f:d5:91:1e:5e:a9:a5:cd:7c:8f:be:b7:d8:
35:80:20:0d:0b:6a:67:35:84:a4:f4:58:96:8e:aa:7a:58:a9:
03:ae:95:58:2a:25:7d:09:6c:b4:f2:7b:00:b4:fb:0b:78:7c:
d7:e3:95:51:33:44:1b:bb:b6:ca:a8:76:f5:b3:08:2e:41:e8:
e5:15:4a:12:64:9c:3a:f7:ed:20:52:56:b0:30:a2:d9:e7:f6:
1c:a5:0e:30:ed:2d:02:3e:4d:1a:14:77:fd:71:4b:e3:08:29:
7e:31:82:47:a8:11:53:58:d9:57:08:2a:6e:a2:aa:ed:6a:19:
48:87:1b:0c:3d:cb:4d:d5:f9:11:c7:65:77:74:73:54:5a:69:
8a:f3:7c:2d:6f:5e:28:c4:d8:3d:be:66:b8:62:da:c8:c5:45:
91:e5:a7:20:df:88:37:c4:fc:1a:5c:b5:4c:aa:0a:04:fb:87:
52:4f:0a:30:db:d2:fb:77:b4:14:96:49:90:85:10:87:07:cb:
66:dd:73:3f:15:02:d1:9d:be:d8:e2:19:b9:60:ce:9b:89:20:
f7:4b:79:9d:91:71:08:2d:d3:d2:d8:98:3a:43:92:45:68:f8:
04:2b:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:21 2025 by rpki-client