Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File: GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier: wvKCHN7PT+zjablE7uTXFWDvPjTz0ZQnm5w+9lnqYsc=
Subject key identifier: 3C:21:AF:70:64:A7:54:9B:BC:6B:72:A5:A1:86:66:5C:61:EE:7D:ED
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer: /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial: 0194BBCE26F020B0E2A0FD762F36457EE3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number: 0CEF
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: UHwOPET17qlv1wunyO4XbbEM66dmGCGO5OvjqEQ0l74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:f0:20:b0:e2:a0:fd:76:2f:36:45:7e:e3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=3c21af7064a7549bbc6b72a5a186665c61ee7ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:aa:e8:7d:d6:b1:cd:ac:6d:b2:44:7d:72:
7b:49:02:01:17:91:a9:33:ab:77:34:93:69:89:d9:
26:ea:90:61:9f:bb:81:d2:4d:53:87:8d:4f:1e:4f:
ea:6e:17:ba:d0:0f:5d:72:9d:e4:06:27:24:9e:32:
af:f2:df:11:14:cb:b0:d2:ca:0f:76:89:ea:15:e9:
d2:18:0f:fc:c4:2b:e7:66:d3:75:e1:e7:a2:a1:f8:
72:e0:48:34:4f:4e:9b:e6:dc:96:4d:f9:96:45:9c:
01:23:84:84:e4:52:6b:72:c8:e3:39:e9:63:90:e4:
e7:e9:c7:d3:e1:73:fa:d1:a3:1a:da:e7:a7:93:f1:
50:63:6e:76:94:80:f3:dd:8e:49:e5:0e:af:f5:d0:
26:0c:f1:72:29:8e:be:09:be:27:b8:20:57:17:13:
1b:52:78:83:d6:5a:7e:3e:08:e9:5c:d2:e2:b5:69:
44:b4:8a:3c:97:1f:1b:e6:82:76:4f:c9:34:60:28:
36:0a:42:dc:41:88:d8:65:d0:cb:bf:9f:c4:1e:aa:
80:67:4c:09:75:60:47:7c:ff:92:bb:26:a2:13:86:
2e:e3:cd:3d:2a:40:55:e4:ee:46:5f:3b:03:95:6b:
98:a6:c2:ab:56:49:c2:e2:4a:ba:ca:3c:3d:c5:1a:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:AF:70:64:A7:54:9B:BC:6B:72:A5:A1:86:66:5C:61:EE:7D:ED
X509v3 Authority Key Identifier:
keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:43:6a:5c:40:d6:ad:27:59:1e:8e:74:e6:2e:42:22:ad:96:
48:f9:84:6e:cf:23:33:38:d8:69:20:6a:5b:93:3c:6c:29:23:
de:4c:e2:68:e0:23:99:88:33:1f:a0:6e:43:0a:3f:33:bb:46:
49:aa:37:ee:83:28:f3:b8:56:cd:79:da:ab:33:5c:58:e5:ac:
10:15:91:6d:10:7b:a2:79:ac:6d:11:f9:2b:fc:1e:04:15:70:
14:72:44:9c:4f:f0:c3:2e:79:b8:32:95:45:e8:42:dd:16:05:
f2:ac:74:6f:2e:bb:15:39:aa:d5:f3:0a:d3:5f:b2:67:55:da:
9b:1f:42:3b:f1:7b:50:93:f6:6a:ae:dc:87:af:b5:11:16:07:
0d:57:e1:e5:e8:6f:c4:f4:42:a0:8b:09:f1:ba:9c:38:19:9c:
03:5d:00:e0:bb:8f:4d:fe:fa:d7:4b:d8:33:54:28:c9:0a:6c:
4e:cb:e2:72:e8:f7:13:4b:a8:fa:7e:e1:7a:d6:b5:2e:ec:bc:
d7:e9:9a:42:ac:88:b0:7b:a4:84:4b:b1:a1:78:32:97:87:b2:
5b:9b:11:54:69:80:92:60:5f:f6:19:e6:84:5c:b0:c6:9a:42:
ab:94:e2:cd:03:20:38:38:1e:e8:f0:cb:81:f9:42:8e:c9:98:
37:14:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:34 2025 by rpki-client