Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
File: gz8MJRPUNTtAzvg5F57r-HOCRcY.mft (raw, json)
Hash identifier: WAuGWoA28mhqHlnU4dbK7Hdzs16dfiMbC3sNFuYhdFY=
Subject key identifier: 38:FF:BA:0B:AF:5E:28:3A:3F:AD:DB:09:39:7E:08:0E:1A:61:60:DA
Authority key identifier: 83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6
Certificate issuer: /CN=833f0c2513d4353b40cef839179eebf8738245c6
Certificate serial: 0194BBCE21F9FD1B3F95F342D94B369D603B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
Manifest number: 0EFE
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: gz8MJRPUNTtAzvg5F57r-HOCRcY.crl (hash: aiFQrTW2HgznIEF7ik16RvpIf39ptaMuOR/zZEqzIjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:21:f9:fd:1b:3f:95:f3:42:d9:4b:36:9d:60:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833f0c2513d4353b40cef839179eebf8738245c6
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=38ffba0baf5e283a3faddb09397e080e1a6160da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:d9:64:21:5d:80:a1:29:ff:36:e8:62:7b:
ba:6f:4d:59:32:58:85:04:a4:7a:e6:05:d9:fa:0a:
6c:3f:3f:89:98:e6:1b:5a:92:b0:89:48:d5:a6:e6:
db:92:cd:4e:34:0b:69:54:46:d4:0c:40:88:0d:6f:
bd:69:a2:40:22:df:c5:cc:e5:6d:d0:6f:49:d3:70:
70:58:58:25:ea:58:a5:7e:29:09:24:c7:bf:ef:6e:
b6:14:f6:4d:f4:56:bb:ea:1b:4d:c3:09:02:5f:ce:
c2:a3:7e:6e:7f:bd:0b:ad:4c:00:d8:9d:28:29:6e:
78:b2:aa:4c:e2:24:ef:26:88:f3:91:89:8f:75:61:
8f:99:7c:18:6e:0d:e4:0f:65:2e:cb:99:67:f2:52:
99:3b:24:ea:47:bc:2f:0e:0e:e9:50:a9:e8:ae:f1:
15:b3:81:7f:6a:be:3e:b7:b2:34:dd:d8:95:ba:3f:
f5:00:9d:f5:67:3f:05:c4:72:80:55:08:22:94:de:
5e:a9:4a:97:ca:e8:55:32:25:04:68:91:96:fa:d9:
6f:ab:a7:55:18:19:eb:27:54:66:64:ba:6b:05:17:
0d:af:04:22:60:a5:13:d2:5e:c5:c8:a8:59:49:2a:
87:2d:ee:27:38:cf:0d:02:73:d8:e6:eb:36:f9:79:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:BA:0B:AF:5E:28:3A:3F:AD:DB:09:39:7E:08:0E:1A:61:60:DA
X509v3 Authority Key Identifier:
keyid:83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:31:70:e3:5e:33:26:36:f6:1a:dd:16:54:e8:f4:3e:7a:
fa:7c:84:ba:fd:53:86:cc:cd:81:3c:5e:ed:57:33:fd:79:6a:
b5:a1:d3:69:fc:65:a6:bb:d9:1c:16:9c:7b:56:68:4e:f7:cd:
a8:7f:50:48:6c:f8:89:0f:05:00:29:64:75:1e:82:92:a4:44:
f6:fc:fd:97:b1:6b:bc:26:aa:0f:d6:87:ad:bf:00:be:e6:d8:
ab:ed:97:1f:fc:59:24:65:96:f0:f0:31:50:31:22:6d:1f:65:
ef:d7:24:9c:ec:63:73:03:d0:cb:2a:be:f4:a5:65:7e:a8:fe:
90:0b:a9:5f:c3:69:6c:ed:c0:1d:20:29:34:76:06:da:c2:c8:
47:9d:ec:3f:8f:bb:11:92:12:85:51:f6:45:3b:80:99:02:71:
ff:9d:cd:96:cf:38:9a:2c:a1:c8:c6:4c:57:2c:ba:77:5b:ed:
3d:c4:cf:76:7a:1c:11:44:f3:fa:84:da:ed:1b:11:51:42:b8:
df:63:17:b3:f4:35:dc:97:6c:b1:e9:53:00:60:ef:55:ff:92:
0a:ac:e6:66:d8:d4:a3:a9:02:66:11:0e:da:b8:56:d4:16:75:
df:10:31:5b:33:25:f5:ac:f2:f0:2f:1f:43:c7:3d:1f:11:f6:
20:14:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:44 2025 by rpki-client