Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier: F7sZwlPhsCdgXeXShNpZeoM/LePRdd6FMLMV3mjol4E=
Subject key identifier: CD:0E:21:AB:1D:04:AC:80:9C:F3:13:63:75:99:35:8D:44:DE:39:79
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial: 0194BD17E2D7F53F918602D7653375632EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number: 0F7A
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: HN7mmN1rU5uQv/Mmtbx1E94cmqpg2deB6mOr3J3zBsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:d7:f5:3f:91:86:02:d7:65:33:75:63:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=cd0e21ab1d04ac809cf313637599358d44de3979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:09:21:2b:06:0b:61:d3:66:87:64:39:bc:
2a:dc:3a:9e:d7:b0:89:3d:6b:0e:c1:cd:83:eb:0e:
ff:af:5f:10:4d:0c:ed:4f:a6:77:38:ed:66:b6:da:
99:d6:2e:4d:b8:cd:87:db:14:e8:22:47:c3:2d:4b:
63:09:ff:64:7b:63:cb:69:db:cd:a8:57:7d:0e:2e:
66:90:74:62:a9:78:6d:64:c7:80:59:ff:1f:07:13:
1e:37:87:01:75:2c:97:a5:e3:e1:7b:c2:45:ec:1d:
cd:5f:54:20:64:75:76:04:96:31:81:95:f5:fa:13:
ee:4e:72:16:96:3e:6e:af:88:c7:8f:74:d4:60:5c:
3c:e4:15:43:a1:52:e9:19:f3:54:c3:a1:50:76:1c:
00:e5:30:04:9d:ea:6a:bb:d7:a7:0e:6f:f9:5d:d3:
0e:e9:9a:c2:b4:9f:8d:39:2d:27:9e:b5:b2:d6:02:
26:79:23:09:f6:b3:7e:09:59:11:df:30:72:68:7a:
eb:b3:ac:09:90:74:88:20:b8:ed:11:3f:18:d7:d9:
53:bb:c5:a2:7b:e3:96:0b:8b:4a:31:66:0f:9f:db:
cc:5f:0d:d9:52:91:3d:c7:d8:38:52:b4:c7:d3:d7:
bc:9b:c6:62:53:73:03:07:00:78:50:44:39:9b:33:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:21:AB:1D:04:AC:80:9C:F3:13:63:75:99:35:8D:44:DE:39:79
X509v3 Authority Key Identifier:
keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4f:bd:af:f6:61:48:ab:9e:ca:cb:79:f5:14:f5:d9:27:3f:
7c:53:1d:3d:9a:f2:7b:f1:5c:14:4e:d7:3a:c0:a6:9d:d8:45:
cb:f2:db:77:44:c2:9b:62:f8:15:49:36:03:41:07:af:d3:75:
19:7b:17:8a:dd:c8:04:16:cd:5e:1d:1f:9e:6b:c8:df:66:9c:
68:69:94:33:e3:73:c4:0f:d2:cd:fc:f8:ff:f8:27:1a:a0:4d:
8d:18:79:c6:78:ab:f5:29:36:a0:d3:73:4a:3a:84:7d:c8:6e:
28:ad:d6:08:fa:a8:4f:f2:6a:8a:5f:45:0a:1e:1c:30:4f:79:
c6:26:28:6f:dc:a9:b1:45:22:fa:b9:d2:3b:4e:6f:f4:d8:63:
59:88:04:4f:12:6b:10:4f:85:67:5c:51:19:86:41:67:2b:4d:
83:c8:0d:97:58:7d:eb:7b:9d:75:63:dc:3e:2e:4a:07:70:2e:
82:db:eb:b3:6b:d9:da:6b:e2:bf:ff:1f:e4:1d:18:56:d4:2a:
83:f2:fb:15:a6:8f:22:02:a6:96:cb:d4:2e:d3:77:ce:2c:00:
23:9c:bc:63:cb:f1:ff:d4:ac:7b:bb:51:57:a3:21:1c:00:90:
a7:eb:1f:1d:44:87:ea:fb:8b:b5:a0:df:73:26:07:21:24:41:
b8:14:7c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:21 2025 by rpki-client