Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json)
Hash identifier: 2zhOTa0YZ+v8EQYfsRESUnOXIFGRmQ2YYE9Nu2p2rg8=
Subject key identifier: 68:C3:5B:14:71:2C:1B:B1:82:12:9C:D0:18:F2:3C:AB:12:9D:C8:3E
Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Certificate serial: 0194BBCEE14A01FA9F35B41FDD4EC2D0D0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: CuAAQEtrdTYxIbJCjOyLjjT5rFu/9Z9gQXua/hWRag4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:4a:01:fa:9f:35:b4:1f:dd:4e:c2:d0:d0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=68c35b14712c1bb182129cd018f23cab129dc83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:84:48:d4:e0:df:9c:ff:55:44:23:8e:ce:
22:22:7e:76:0c:e4:eb:51:a9:77:0f:00:6f:d9:ac:
28:6f:30:81:00:c7:7d:7e:3d:09:3f:b1:43:dd:c3:
d1:98:e1:6b:1a:5f:97:d3:96:48:ea:2a:50:8c:09:
8b:a5:0a:7a:9c:0f:d6:07:d1:e4:d6:7c:b4:f0:a7:
c5:17:60:69:a6:2b:b4:97:34:9f:76:be:19:75:30:
5e:1e:5d:ec:31:09:ab:95:2e:6a:37:7c:bb:35:66:
ae:f1:73:2f:88:af:d4:5c:ab:42:1c:5b:2f:7e:bf:
b3:ac:01:cb:1a:42:5c:c1:73:89:45:06:79:60:90:
d9:5c:ac:79:c1:b7:de:aa:c6:3c:d5:78:9b:93:02:
41:0d:20:65:9f:0f:b8:7e:5e:d7:ea:6d:82:3c:31:
47:69:98:00:3e:e2:74:ae:73:8a:d5:5a:35:5a:02:
c5:8a:6f:6c:a3:80:79:49:8f:98:f5:b4:5c:80:22:
1d:32:3f:0a:e4:d7:93:30:a0:b6:f5:2b:f0:1d:81:
ca:0d:70:84:ee:0f:a5:82:3b:0b:cd:3c:c4:f4:c5:
bd:fb:85:cd:9b:69:92:da:b1:07:11:9a:9b:92:4a:
00:aa:d9:19:bf:09:41:08:e3:e3:51:61:d0:61:02:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:5B:14:71:2C:1B:B1:82:12:9C:D0:18:F2:3C:AB:12:9D:C8:3E
X509v3 Authority Key Identifier:
keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:60:f2:92:ae:fe:a7:e6:55:8e:6f:82:1a:f8:8c:7d:3f:79:
5f:14:cb:7d:84:51:c2:c6:01:cf:82:fe:de:64:c4:2c:6a:b9:
7f:a6:78:37:dd:09:92:04:63:f3:cf:6a:f0:99:1c:9d:dc:1c:
e8:45:43:1e:a6:66:3f:16:19:7c:a6:90:db:7c:76:5f:63:69:
2d:8e:49:17:31:e8:4e:6a:93:03:4b:ff:c0:47:f7:1b:e6:b8:
2b:e6:57:d3:ff:ff:ad:c4:02:97:29:23:b3:31:9d:6e:79:71:
1b:c7:5a:95:76:43:6e:b1:4f:fe:92:aa:3f:15:ad:94:fc:01:
08:ad:b5:a0:9e:05:65:1f:42:b6:20:f5:87:df:f2:c3:23:7d:
d3:77:2f:46:d9:b4:6c:75:ef:64:21:32:41:cc:af:0e:3d:7f:
a1:5a:8e:34:2a:5c:79:ba:eb:41:f8:57:a7:5c:37:ea:de:87:
e4:1f:7e:9c:36:ad:a4:b7:40:77:88:83:71:db:31:0f:4b:a5:
75:ca:79:cc:03:ae:89:97:f2:61:dc:2e:d6:55:bb:88:bc:40:
76:07:ba:ea:c0:28:b2:27:3d:85:a8:36:37:bd:b0:79:ea:85:
de:88:d0:e2:50:bc:68:08:74:bd:de:36:7e:74:e2:75:1b:3d:
3b:a0:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:08 2025 by rpki-client