Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: GPNQjV6n/XaEU4jurnvxVVVEoyaSBLmQ3IgCJEugxNQ=
Subject key identifier: 13:EB:2D:E0:51:3F:94:A4:BE:9A:D6:8E:27:65:E0:72:65:F2:51:00
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 0194BCAA10D5567C89C1F9F4D4F7A467C5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 23
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: MD1HgO68sbiwSyV8T3RMTvoCFDoE5H/NMdO1c1QTxTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:10:d5:56:7c:89:c1:f9:f4:d4:f7:a4:67:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=13eb2de0513f94a4be9ad68e2765e07265f25100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:d8:b0:32:02:81:6d:ba:fc:db:d5:bf:32:
e9:51:5a:7e:cb:bb:4b:58:2f:7a:3a:1f:0d:19:f7:
95:74:ca:f9:98:2a:a9:9f:09:1a:cf:0f:22:b0:bb:
b9:ec:80:fe:3f:b4:1c:4f:b3:54:03:e9:8d:18:af:
38:e9:3d:3e:5f:2d:50:35:9e:19:75:8b:c2:16:04:
49:55:1d:79:a5:df:68:6c:d0:31:ff:37:bc:9e:af:
75:c8:0c:54:fc:ca:b7:ba:c1:69:b1:dc:b7:b0:c5:
64:da:c4:be:7d:b9:3a:14:96:fa:32:db:ad:46:a4:
93:b9:2b:d2:7b:5a:58:4a:3c:92:ac:b1:c4:a3:a4:
1c:3d:79:36:14:25:fa:de:50:c3:00:53:1b:de:e9:
2d:d4:72:86:c4:8a:6f:b6:42:01:a9:ea:8f:b4:04:
72:80:a8:24:a0:67:b5:14:06:c0:09:0a:2d:eb:65:
7f:f1:c1:57:3c:6b:22:b1:05:16:05:33:c8:c7:01:
25:60:4a:b7:19:2e:e2:18:3f:c0:5f:cc:63:4b:23:
86:3f:bb:98:a8:88:fa:dc:f0:e1:37:14:56:46:27:
ab:9c:38:e2:36:88:09:94:de:61:6c:63:56:a6:39:
21:3f:c1:c5:db:8f:33:e3:e9:f2:b0:98:24:ef:3b:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:2D:E0:51:3F:94:A4:BE:9A:D6:8E:27:65:E0:72:65:F2:51:00
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:95:2b:ba:e4:b1:65:02:8d:ce:c9:d4:bb:4f:63:94:84:8d:
b1:0d:ce:58:17:79:80:39:c5:ad:1d:19:98:65:ba:8e:80:2a:
21:fa:da:8b:18:3b:1e:a3:3f:5f:08:fb:4b:3b:13:c3:a7:ca:
91:fa:b7:15:21:3b:18:ca:5f:53:8c:0e:1b:88:ec:6d:1f:fa:
0c:cd:6e:59:d9:d2:42:c1:5f:1e:a5:93:e4:58:9a:1b:aa:a6:
a2:51:23:f0:88:0f:e3:ab:2f:26:34:d2:a2:f7:be:fd:ed:1a:
58:32:fd:47:d9:4d:c2:cf:3c:68:9c:50:fb:04:0e:b5:28:c8:
67:69:dd:05:b4:e6:da:b7:82:d0:79:25:ad:05:fd:5a:61:25:
ce:0e:28:0b:21:ec:67:20:9a:d8:15:e6:78:17:0d:4b:d9:00:
8e:81:c3:08:86:e5:55:1e:47:34:30:c4:c4:68:89:48:0b:74:
fb:91:11:3f:97:f3:23:8d:09:dc:19:1a:d5:6e:9a:23:83:33:
79:ed:01:02:3e:57:c2:0b:e0:7b:cc:de:47:3b:98:0f:b6:5a:
88:09:b7:68:c5:a5:0b:02:a8:44:e8:a8:e5:eb:16:ea:35:55:
d3:63:03:94:1c:38:71:b8:63:ee:18:07:95:ff:e1:7b:31:12:
69:d7:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:35 2025 by rpki-client