Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: cJiCYFPayYAA0B+ZWlUSusPnq+odb0PSc1T0d56jcOI=
Subject key identifier: 70:9D:54:7B:C9:EB:C0:A3:36:4D:BA:FC:6F:6D:D8:B0:4D:33:EC:59
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 0194BBCDEC0CD92970B48995539897B0B1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0B6D
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: WrWV766ZGjRHjc4glAj4dQxNXWC+SctgPBCVCm5H4Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:0c:d9:29:70:b4:89:95:53:98:97:b0:b1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=709d547bc9ebc0a3364dbafc6f6dd8b04d33ec59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:0d:4b:dc:19:f4:34:fe:9b:ac:83:a5:e8:
00:c7:ae:83:39:f0:f9:32:5e:c8:f6:aa:cf:69:43:
9c:01:d5:a3:1e:c7:c7:73:3f:a2:f1:f9:09:cf:ff:
0b:84:06:d4:42:be:73:06:0f:b9:50:88:cb:c6:e6:
7f:f8:02:60:82:e0:b0:99:40:b1:65:ca:75:1a:20:
e6:72:a7:14:68:7d:c7:71:39:2a:a1:1f:9c:ed:81:
43:59:56:fe:6f:cf:71:2b:f8:dc:2f:ec:b9:14:30:
51:86:77:0c:98:50:88:46:93:36:d7:59:ac:80:46:
2b:13:a9:48:f8:ee:04:41:0a:3a:46:42:ef:91:61:
59:82:c9:5a:ce:bd:0f:59:e2:61:1d:e1:86:60:47:
b5:4c:20:73:3d:4c:86:0b:d6:e1:1c:b3:04:8d:76:
5e:40:b6:02:53:ff:9c:bb:7a:fc:95:c7:21:29:8c:
33:6d:2a:13:0b:5c:49:24:8c:e2:3f:5c:7a:51:aa:
07:ca:18:59:00:a7:c3:49:68:a8:49:7f:24:74:1d:
47:c3:fa:8e:0d:eb:4c:93:77:d4:9b:94:fc:d6:80:
82:97:a6:ce:67:02:4f:84:56:73:d9:c5:33:87:df:
e4:a7:99:c6:7e:74:4c:d6:17:58:83:fc:e0:ec:e6:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:54:7B:C9:EB:C0:A3:36:4D:BA:FC:6F:6D:D8:B0:4D:33:EC:59
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:ea:c9:bd:17:30:2c:5e:f7:24:60:69:42:72:12:57:54:
4b:14:01:d7:45:7b:f1:dc:b5:9c:a5:75:3c:7c:f3:f2:41:e1:
ae:35:32:aa:70:a6:8c:c7:c4:9b:e1:18:d2:64:67:3d:64:8d:
81:33:ae:93:a3:db:50:6f:d7:a2:78:b3:50:c7:86:66:43:a0:
67:17:ac:4a:4d:f5:58:36:54:94:84:75:3e:01:e8:6b:80:f0:
cb:5f:1d:a3:fc:e4:4f:83:05:34:90:1b:e7:2b:e4:6a:5b:84:
ad:1a:5c:d4:76:d8:5c:da:0b:b5:f7:47:58:14:5d:3b:62:62:
1b:ee:ac:c1:27:2b:ed:4e:46:d2:8d:de:f0:17:35:28:0d:51:
94:3c:23:7f:98:80:d7:9d:d2:4d:75:61:77:0f:ad:9e:80:c2:
58:6c:ec:32:c0:ae:f6:46:0f:c1:0a:d8:76:d5:cc:f7:04:db:
cf:56:fb:17:50:5d:f6:d7:78:48:ff:78:44:19:f7:b5:ce:32:
1c:cc:a4:29:ad:c0:fe:f5:bb:60:46:30:ce:11:59:82:4d:05:
ac:56:a1:0f:d3:d2:4c:f4:3a:f2:16:9d:69:10:47:9c:a6:f8:
82:2b:ec:b7:0c:93:f5:87:fb:81:76:e5:0b:75:f7:d9:12:bb:
c0:f0:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:34 2025 by rpki-client