Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
File: GHRUZrThRoMLlit0kG2xxtCB_HA.mft (raw, json)
Hash identifier: VZhS8nsv1c0xmuG1tSo8b1TVD7cDoaoxRhBECJx35/8=
Subject key identifier: 92:AC:03:FC:06:6E:62:A7:6F:40:D8:52:A3:F6:16:13:98:49:E4:B8
Authority key identifier: 18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
Certificate issuer: /CN=18745466b4e146830b962b74906db1c6d081fc70
Certificate serial: 0194BC72E1B253B16183D7A4FC8C0A883C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
Manifest number: 13F0
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: GHRUZrThRoMLlit0kG2xxtCB_HA.crl (hash: 6DPDVuEtXlJSPuhAiQtVjSd4NXkPktjXaVu/mfXcBwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:b2:53:b1:61:83:d7:a4:fc:8c:0a:88:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18745466b4e146830b962b74906db1c6d081fc70
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=92ac03fc066e62a76f40d852a3f616139849e4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:2f:d4:87:00:3e:f7:5e:31:ce:d4:f9:10:
fc:a3:63:45:c9:31:6b:30:1e:df:84:7d:06:79:1d:
bb:1b:24:2e:ba:aa:a7:83:f1:81:cf:dd:90:02:cf:
e2:6a:d9:48:12:83:47:c6:b2:f9:60:a6:f8:33:53:
fd:d7:e9:62:89:5a:d4:65:3e:6f:d3:f5:e8:ee:45:
33:1e:2c:bd:b6:5c:e1:89:72:07:fb:22:b8:e1:96:
66:c4:0e:05:09:7e:24:49:6b:98:0d:3c:a6:2f:2d:
04:79:7b:a0:be:db:6c:76:bc:b7:f9:ed:5c:64:d1:
01:b8:97:7a:ea:43:af:48:50:79:a7:56:88:d3:b0:
fa:7b:3b:fc:ad:38:6f:28:ae:e2:9e:35:f4:53:26:
7f:03:2c:7a:93:3a:e0:72:60:40:9a:89:91:d5:23:
16:0b:33:d0:52:9f:03:4e:4f:ac:d5:2c:ec:bc:c7:
db:83:14:13:12:0f:68:41:ea:4b:86:a4:47:4a:be:
a5:c8:92:5c:ed:78:a9:6f:9e:41:ae:39:ea:44:8a:
e8:1a:5e:f1:3a:db:d1:c5:ea:61:8c:bc:fc:ae:a3:
1e:26:53:01:d2:8a:c4:85:82:ba:b4:e6:d0:e6:6f:
3d:7d:c0:7c:07:42:ae:09:fb:10:52:6b:18:53:56:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AC:03:FC:06:6E:62:A7:6F:40:D8:52:A3:F6:16:13:98:49:E4:B8
X509v3 Authority Key Identifier:
keyid:18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:e9:d4:c6:f5:72:84:e5:6d:79:3c:77:29:60:80:d6:f8:
34:f3:d5:90:be:f3:60:c2:58:7a:ef:0a:06:b0:10:c1:2a:f8:
3b:67:2d:a9:02:05:c3:ac:4e:12:a8:40:ca:16:75:23:43:55:
d7:49:df:7e:19:0a:50:8e:16:7a:5b:4c:94:21:27:cd:c9:84:
8a:30:33:89:12:e4:f7:d5:99:8f:21:06:6c:a7:38:e5:fb:b2:
80:0e:87:ce:f5:0a:7e:cf:bb:22:2d:8f:e5:98:72:ea:ee:77:
2a:0a:ef:0a:57:df:58:ed:37:6c:39:ae:f7:19:d7:76:c2:c9:
1b:1d:ec:6a:a0:8d:b6:4e:8d:f2:d6:0a:cc:c2:f7:5c:0f:39:
3a:8e:d9:74:a4:35:bf:bc:8d:30:24:40:7d:f3:4b:c6:b3:42:
ea:d0:ee:c5:01:01:db:36:66:04:11:b4:94:73:25:46:6a:d0:
cf:55:fd:81:7a:7a:73:58:1f:77:bf:7d:67:1b:b7:01:ea:8c:
85:f6:fe:29:cb:6e:55:d0:e1:0b:8b:d3:44:bc:03:60:9a:75:
5d:ec:01:52:6d:4b:d4:41:95:74:d4:fe:d2:2e:67:51:b5:fd:
a1:31:20:12:6e:cc:b0:1f:d5:19:d4:a5:23:4d:8d:3b:de:a4:
f9:94:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client