Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81e5bd-f7ab-4287-bbb5-6d856f84a813/1/gEFPcG9s0sh68PYGstE3a4a1-mY.mft
File: gEFPcG9s0sh68PYGstE3a4a1-mY.mft (raw, json)
Hash identifier: Axm0Pu79fYfBIvR6SBPbwHMPTLRqL76YB2gIhk2IEKI=
Subject key identifier: 52:E1:EE:7C:F7:CE:3F:F8:41:C1:D5:F2:75:9C:D5:CE:3C:A6:AE:90
Authority key identifier: 80:41:4F:70:6F:6C:D2:C8:7A:F0:F6:06:B2:D1:37:6B:86:B5:FA:66
Certificate issuer: /CN=80414f706f6cd2c87af0f606b2d1376b86b5fa66
Certificate serial: 0194BBCE266D9DE7EE0847D66D1A15BFD799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEFPcG9s0sh68PYGstE3a4a1-mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81e5bd-f7ab-4287-bbb5-6d856f84a813/1/gEFPcG9s0sh68PYGstE3a4a1-mY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: gEFPcG9s0sh68PYGstE3a4a1-mY.crl (hash: SWV3kTtZZ/JNDuVgzrffng2zzhSbeBghZgG0N0gfCWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:6d:9d:e7:ee:08:47:d6:6d:1a:15:bf:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80414f706f6cd2c87af0f606b2d1376b86b5fa66
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=52e1ee7cf7ce3ff841c1d5f2759cd5ce3ca6ae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:e2:c5:cd:a7:ec:c7:2e:4b:e8:53:3d:25:
0a:93:c8:0f:f6:d9:be:0b:49:0c:b0:3d:b8:c3:90:
7b:b5:a2:58:d4:3c:61:52:3d:52:22:1f:1e:56:36:
2c:8f:69:e6:81:e8:33:54:64:80:cc:06:e6:74:3e:
61:a3:e5:2b:72:ff:1d:f8:ec:b1:9d:a6:2d:64:d2:
b2:dd:50:d1:da:51:9c:6b:4d:66:15:40:c7:e7:03:
bf:e7:47:50:70:03:81:39:bb:aa:06:a3:71:0c:5f:
ae:ad:30:97:40:5a:f1:68:e0:66:58:c1:95:10:b3:
3e:00:4e:70:01:e2:24:72:19:6f:84:ca:56:d7:4e:
de:60:02:41:66:8c:d8:48:8b:e9:8a:94:c2:08:14:
00:d2:d7:a5:f5:18:14:42:7c:1e:99:db:f7:fb:1e:
d4:63:47:60:55:04:29:fb:bc:1a:18:dd:8b:c1:ab:
f7:d4:fb:3f:4a:0e:9a:0a:08:9c:0d:5b:50:43:e6:
10:ad:0e:16:1f:bb:a2:30:f2:79:7c:44:ed:5a:1f:
31:bf:8d:3c:29:8a:75:fd:f5:46:9b:1e:f5:c4:ae:
11:f2:e9:41:e4:ea:80:09:11:8b:cb:7f:87:c7:74:
0c:e0:f5:3e:8e:5f:80:4b:e4:64:6f:4a:7b:b7:ef:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:EE:7C:F7:CE:3F:F8:41:C1:D5:F2:75:9C:D5:CE:3C:A6:AE:90
X509v3 Authority Key Identifier:
keyid:80:41:4F:70:6F:6C:D2:C8:7A:F0:F6:06:B2:D1:37:6B:86:B5:FA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEFPcG9s0sh68PYGstE3a4a1-mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81e5bd-f7ab-4287-bbb5-6d856f84a813/1/gEFPcG9s0sh68PYGstE3a4a1-mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81e5bd-f7ab-4287-bbb5-6d856f84a813/1/gEFPcG9s0sh68PYGstE3a4a1-mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e9:ff:be:f6:eb:89:ef:e0:db:c8:0d:1a:2c:1c:87:9d:8e:
d8:f2:3a:c1:82:0d:61:df:79:33:93:34:b2:34:b8:d9:52:3c:
e1:29:ba:f7:a5:f6:e3:ce:39:7e:94:9b:c6:e9:71:f5:61:14:
5c:c8:2c:09:55:dd:6e:bd:10:5e:ae:d7:13:6e:cf:a7:9a:3a:
aa:b3:23:4f:dd:80:9a:f0:eb:92:ce:e1:1c:51:2a:b5:20:88:
0e:3f:71:4e:a8:2d:35:6d:db:87:de:e8:0a:48:6f:05:b6:ae:
3d:e1:46:76:58:a4:f9:1c:cd:29:7f:04:b1:fa:e5:34:9c:01:
1d:1f:5d:0f:a2:b5:24:27:b2:4a:a3:95:44:cc:54:59:a9:42:
95:ea:88:88:84:23:07:c1:a0:94:1d:29:18:6f:45:21:24:b2:
7d:89:2c:89:87:54:64:e0:17:80:25:c8:28:50:b6:44:21:da:
5f:27:a2:81:de:2f:99:1a:3f:6a:dd:74:f3:32:a9:cc:49:77:
a6:3f:9b:9e:b3:b7:19:25:61:6d:31:03:4c:45:ee:a9:59:7f:
3a:55:ac:b2:f9:48:15:a1:fa:71:a0:79:ee:43:1e:71:e0:b2:
1c:6f:46:c9:b6:1f:60:75:41:3f:6c:67:68:bf:43:df:94:a5:
9e:0f:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:44 2025 by rpki-client