Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: /+pzlG/4XuqGTiRyQYU6CLXzHnMdJEC+hskwMGEL9gs=
Subject key identifier: 6F:57:FB:C2:57:A3:49:CE:51:1D:1C:EB:D1:83:D4:60:6F:FF:DC:57
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 0194BCA9AA7FB4DE31EA443EEF632FC9196D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 09C7
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: LMsagM7f4o/XsjxcIt/kjCrLUxU0mavW9g9/MS73d3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:7f:b4:de:31:ea:44:3e:ef:63:2f:c9:19:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=6f57fbc257a349ce511d1cebd183d4606fffdc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:59:96:7a:b7:0a:9d:e5:56:0d:e7:83:da:
c6:62:d7:5e:b4:3f:03:f6:00:a7:ff:a0:a1:81:d8:
75:81:d1:88:a6:c7:30:45:2f:6f:3b:ec:a4:34:28:
ea:c7:34:59:1a:a1:68:9f:39:35:18:7c:f6:d9:31:
05:6d:d5:be:0d:76:50:37:d9:a9:5d:e9:aa:0a:a8:
c2:d1:34:23:33:2d:84:20:24:f9:b9:98:05:40:dd:
2c:45:cc:af:01:34:b1:c8:06:59:5b:d0:5e:dc:59:
eb:11:6b:77:e8:53:02:3b:dc:4c:ea:4f:73:95:84:
80:bd:15:1a:65:a1:ae:c7:3c:21:b4:33:68:56:cd:
b7:94:2e:39:db:02:bf:19:3e:4f:51:b0:80:cd:a5:
93:93:5f:d7:0c:42:34:29:66:b6:05:8b:c6:82:42:
b6:5b:98:12:ea:60:96:37:89:7f:f6:ba:f9:77:58:
3f:0c:91:2b:e4:a7:eb:bb:1f:23:40:7d:3e:a9:0c:
6f:4e:ae:df:61:9f:e8:8b:93:df:f5:e1:e6:d8:66:
81:0c:41:87:b7:cf:d1:37:92:f0:58:b2:61:15:e0:
91:37:fa:04:55:b2:ab:9d:b2:63:35:5c:e8:63:00:
1e:54:26:db:34:90:42:91:d1:fa:de:67:89:89:6c:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:FB:C2:57:A3:49:CE:51:1D:1C:EB:D1:83:D4:60:6F:FF:DC:57
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a5:30:47:63:11:0f:eb:52:92:00:d2:0c:1f:94:f9:b2:5d:
78:f4:70:13:f7:78:e9:81:43:13:1a:3e:10:e2:a5:76:10:cd:
28:da:cb:c9:9e:52:a2:75:af:cf:36:70:c4:31:8c:c9:ba:32:
3c:77:63:a3:25:53:7c:c8:a2:fd:47:33:fb:26:44:74:56:f5:
2f:d0:0a:12:ae:aa:63:0a:c2:9c:79:6e:0c:3d:eb:c4:62:d3:
eb:77:eb:5f:3e:47:10:66:b3:8c:04:88:78:16:f7:e7:7e:e1:
6b:77:6e:bc:70:3c:d6:e8:93:79:22:81:80:c6:15:33:f5:1a:
19:7a:88:a4:2d:85:95:fc:02:98:43:05:ea:06:ea:6e:5b:25:
03:71:9a:04:f2:0a:8f:98:84:c0:0a:92:0a:4d:2b:a5:ae:71:
90:49:87:3c:7b:e6:e7:3f:d9:c0:9e:8e:b6:fd:10:70:66:34:
84:20:0b:e1:c6:34:72:16:7b:4f:2c:d4:78:e7:0a:96:24:89:
ed:c0:e1:33:68:b8:20:67:27:75:1a:2a:2d:2f:3c:85:d8:a1:
af:a9:cd:3c:a3:60:b1:71:35:a1:a0:de:80:5d:1a:16:48:86:
0a:62:11:8f:2b:2c:fc:48:3e:28:8d:14:50:74:92:7c:50:97:
05:7f:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:52:38 2025 by rpki-client