Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: FLmTe7/7TWNFeqWanX3tRQYrcpMBEOhlGJlv4q2zKHo=
Subject key identifier: 0A:D0:9B:85:5F:EA:A1:64:54:B1:6B:AE:74:A6:CD:A7:C1:C1:8E:F2
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 0194BBCF03F214C4160AD7AFCE3FC736A0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 1243
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: +4XLP/uqFLl8QPk597EdKQj5FnkTzwwT0UeSURrLodY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:f2:14:c4:16:0a:d7:af:ce:3f:c7:36:a0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=0ad09b855feaa16454b16bae74a6cda7c1c18ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:3b:e7:36:98:8e:07:fc:9e:c7:d4:0d:57:
43:e1:93:9b:a0:71:a3:5e:a5:a9:52:82:dd:f3:3c:
fe:af:a6:6b:fb:42:bf:3c:ed:9b:b6:97:a1:b3:79:
5f:7c:06:1a:26:f5:ec:c9:ea:0d:ae:26:eb:41:1f:
a3:c3:d9:a7:a1:02:72:07:ee:af:b1:be:c5:98:54:
75:8a:f7:9b:d8:c8:b7:9f:2c:41:75:85:53:fe:aa:
9b:dc:e1:30:ed:f1:47:93:ae:a4:54:8c:a2:b1:73:
28:1c:1e:2b:bb:34:e3:b8:00:ae:7c:5f:d9:20:cd:
5c:2f:9c:e9:c6:d3:2d:e2:e6:93:21:42:09:3f:d0:
67:cd:58:39:7a:05:20:d1:7d:c2:83:41:be:19:95:
b3:c0:91:e5:74:3a:8a:63:af:91:86:6d:5b:32:17:
e3:a6:c8:0f:59:01:71:19:47:a7:ee:e0:12:ba:30:
22:dc:93:21:fe:97:da:e3:4e:91:e1:30:29:82:b5:
5f:d3:e9:71:1f:7b:eb:ae:a1:e7:61:f2:d7:8b:b3:
cf:8e:a9:89:2f:9b:16:3f:c2:f4:f1:3c:03:c2:ab:
69:2e:4a:c8:06:a2:08:e1:11:dd:c8:5a:29:f0:16:
6c:1c:12:87:88:18:17:47:eb:61:4a:80:01:fb:4b:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:9B:85:5F:EA:A1:64:54:B1:6B:AE:74:A6:CD:A7:C1:C1:8E:F2
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a8:a9:3b:85:4e:2f:45:db:52:da:a7:6c:29:86:06:e7:57:
eb:e7:b2:3a:37:f6:b0:01:dd:cc:58:7d:a2:c0:da:0f:4c:86:
94:22:02:9a:12:74:7d:66:5e:b6:6d:0d:10:ac:e5:f9:25:4e:
7c:2c:cd:a5:db:1c:dc:00:b6:12:26:12:3c:04:c7:61:3f:4d:
98:3e:5b:b3:10:89:54:3c:21:b0:d9:c1:ea:0f:5c:c1:ea:dc:
55:d1:db:01:2a:47:4d:09:f3:f2:b1:d7:64:94:de:0b:7a:75:
94:ce:c1:3a:f8:84:f0:b9:ff:97:d3:81:9f:95:f1:21:11:e3:
25:ce:89:3a:2f:fc:87:82:ac:74:93:44:30:a0:08:1c:81:2c:
3d:41:40:0c:7a:7a:a0:d7:3f:db:6f:59:6d:2b:6c:46:76:40:
82:2b:75:8f:d7:e7:67:36:93:8a:89:01:15:a8:92:49:3b:51:
c5:c6:7a:c9:82:93:d3:26:57:25:fe:a4:25:19:14:2e:de:ea:
0d:0c:98:9c:73:1b:dd:4a:75:dc:9b:db:0f:c6:03:cf:08:63:
f3:81:5e:ef:d1:1a:de:46:42:06:54:88:ba:f2:cb:d7:05:a0:
f1:dc:10:d3:c5:7e:f9:53:d5:b3:cf:d6:95:51:bd:91:d5:ac:
a4:c0:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:08:57 2025 by rpki-client