Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: ylTmYfI8yxm1h4268jXXqlTyiezMMXEsK0ens04vnJk=
Subject key identifier: F3:4A:12:3E:5B:48:21:09:43:67:BD:68:72:FA:EC:AD:9B:31:07:7D
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 0194BC72940843F4B01FDE4D8526546575F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 04D8
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: YDDD03qH06+cHrQxYKyDVWgDe2V6bSj7xQAEyDIGGYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:94:08:43:f4:b0:1f:de:4d:85:26:54:65:75:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=f34a123e5b4821094367bd6872faecad9b31077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:9f:75:90:5b:ba:13:73:e0:e6:6f:3f:86:
59:3c:0a:c5:2d:2e:12:4c:1a:da:74:9f:74:e5:65:
93:b0:30:44:65:31:0b:01:94:2e:0c:6b:f2:69:34:
83:6e:38:a1:08:27:7f:d9:40:6f:69:5e:09:ed:9d:
46:b1:52:f0:3c:13:f7:56:c9:ee:41:ab:24:3b:88:
8f:c3:ee:f5:cb:0c:66:b5:8e:c8:22:c9:0c:2b:e0:
de:b9:2d:ab:1d:c6:00:ac:3c:42:68:cd:f2:01:6c:
e5:47:5a:69:17:61:b3:99:aa:bf:63:5a:7d:2a:99:
cf:80:e2:2f:1f:91:29:20:8f:7f:de:a6:59:8a:cc:
7c:66:19:de:ad:bc:0c:7d:14:fe:48:d4:60:10:e7:
b3:6e:df:da:1e:21:de:6b:53:fa:86:e7:ad:22:5a:
3a:67:c1:d5:c7:cb:f9:fd:92:4b:02:77:91:9b:05:
36:9e:81:c5:f0:e7:a1:8f:39:99:1e:a5:f5:4e:82:
8d:46:a2:42:aa:9c:74:e5:71:49:cc:ac:f1:b4:3a:
73:c3:e9:e3:a4:51:84:81:f5:4f:ad:9b:59:8d:cd:
a3:76:33:7d:ac:dc:44:a9:74:d7:32:0a:75:5c:c2:
d0:51:af:ee:a9:84:ec:7f:0b:2a:d9:bf:04:30:31:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4A:12:3E:5B:48:21:09:43:67:BD:68:72:FA:EC:AD:9B:31:07:7D
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f1:71:c7:62:1f:eb:ee:18:81:d1:ec:8f:70:26:13:07:e8:
c5:a8:59:df:bc:77:a1:c8:3d:67:c7:76:1c:85:33:cd:41:1f:
1b:82:5f:78:77:b0:b7:de:24:17:a3:70:20:d3:76:cc:8a:9c:
fe:38:9a:20:28:3e:7c:31:df:f7:24:23:73:2c:73:9c:b6:1a:
78:79:7e:af:e4:6c:18:20:97:2d:84:fb:aa:89:e6:73:9a:c4:
35:49:38:33:83:db:94:52:51:67:b7:8d:05:47:8e:a9:74:41:
27:45:ac:2e:39:8c:79:a6:7b:d9:21:0e:cf:ac:a8:88:f5:ff:
db:48:eb:ae:98:bb:3a:25:75:97:88:36:93:8d:ff:e8:0e:53:
0e:10:d2:a8:88:4a:04:df:e8:35:9f:bd:98:b4:51:ac:c5:59:
80:8c:e7:a4:ce:0e:11:15:93:57:cf:f9:46:84:32:e3:51:e4:
a8:3f:af:e9:dc:d5:0d:ab:19:cd:1f:de:f1:b4:e1:94:4e:86:
49:06:96:d2:90:72:3d:87:dc:ff:23:09:a1:0d:8b:7f:56:1b:
17:f5:34:6b:44:5d:5a:f4:e8:30:3a:58:25:f2:14:38:3f:fd:
fa:7b:88:29:3b:3f:ef:f5:09:27:80:44:17:51:fa:1f:65:9c:
cf:d5:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:24 2025 by rpki-client