Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier: 4o+amChJ5sKVNbXdsHdv1EWaAu3kWjp9tUpqKvdjTlU=
Subject key identifier: D3:92:3A:5D:98:A7:57:AA:A2:C0:FA:D2:C3:28:F2:5C:9E:2A:BA:C2
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer: /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial: 0194BBCE45A117B88D2D199C6FE1B7EA731A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number: 096F
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: bHbtHOBii1/q69RRgJTtPXbsU+tSe4fDVR/usClwzHQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:a1:17:b8:8d:2d:19:9c:6f:e1:b7:ea:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=d3923a5d98a757aaa2c0fad2c328f25c9e2abac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:c5:bd:70:2f:67:46:9c:1c:45:46:dd:65:
dc:5e:14:33:ec:03:db:63:29:d3:7a:70:28:38:6b:
8f:01:fe:08:60:b3:83:2d:ff:2c:7a:c8:27:25:e1:
13:28:47:9d:d0:f7:8a:fe:0e:2c:50:8d:28:a3:c1:
0b:bf:70:41:48:8f:ef:18:8d:7a:2c:08:58:60:78:
fb:f9:43:bf:25:10:92:f4:20:89:d1:34:8f:c7:6a:
20:92:46:c6:1b:1c:71:70:47:5d:86:c0:7b:3a:e1:
c0:2d:f2:e7:fd:99:d5:d1:61:42:e4:64:6f:59:fb:
8b:08:1f:f4:6b:35:7b:88:26:84:49:75:2c:38:9c:
2f:3a:ca:52:1d:9b:af:07:81:ea:59:71:71:91:b7:
3a:4b:c2:6d:19:d3:59:a0:d9:4e:94:cf:6d:48:42:
0d:c5:39:83:2b:d0:b6:27:57:db:c9:ee:64:99:c6:
0e:d4:6c:7a:f9:a4:3f:a1:d0:19:9d:06:c7:18:65:
77:cd:b9:04:4e:4d:02:00:f8:3e:bc:e7:ee:50:de:
68:f0:0f:bd:2d:2d:f3:29:8d:4f:b6:84:bd:aa:a5:
5e:7a:03:a0:4b:f9:c0:6d:b6:14:45:43:33:53:17:
27:f5:25:25:a9:24:da:f8:d6:1f:78:9a:dd:70:42:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:92:3A:5D:98:A7:57:AA:A2:C0:FA:D2:C3:28:F2:5C:9E:2A:BA:C2
X509v3 Authority Key Identifier:
keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:39:35:06:27:19:ac:13:a3:ac:73:96:3b:e0:4c:37:dd:a2:
bb:e7:8f:d3:ce:46:d0:85:d3:90:0c:b2:66:e9:bb:78:bc:80:
44:07:a4:84:89:62:1e:85:9e:cc:cc:74:a7:4b:76:36:4d:cd:
b9:77:3e:78:47:a1:3e:a4:f0:5b:42:72:1a:e1:97:61:54:0a:
d2:f7:7c:6b:fc:9a:29:da:b0:08:19:03:09:61:8c:6d:12:d2:
77:11:82:50:b6:ce:7e:9d:17:43:d6:87:d8:e4:28:8d:20:1c:
3c:21:c4:3e:e1:a6:aa:b2:52:55:11:3f:70:09:0b:29:0c:2b:
b4:ca:2b:d2:7d:71:dc:cd:43:f5:31:80:79:08:5e:72:e4:13:
c9:3c:c9:de:92:72:44:19:84:d4:da:ca:95:b6:3c:61:37:70:
48:00:7f:44:d0:eb:69:1c:a4:37:99:aa:d4:2a:ef:47:3f:e9:
17:b5:f6:2d:85:67:fb:3c:07:fa:4d:72:68:ea:c7:cc:5c:fd:
32:48:9a:2f:f7:f9:37:a5:56:71:65:ec:79:54:c3:18:c9:0e:
4b:09:37:49:3a:6a:a5:80:26:d2:06:f3:f2:09:d1:e1:46:44:
42:49:88:cf:f8:c0:ee:30:23:2f:69:b8:99:df:19:8b:e3:a0:
4f:4d:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:49 2025 by rpki-client