Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier: kUjYs0vCJv3hJFtx6q77mqFz1r2cF4oHi/wtb1TOaCk=
Subject key identifier: 9C:D8:79:52:7B:08:92:D9:E1:B5:7B:5D:68:DF:A5:17:D6:47:9C:37
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial: 0194BBCDCB61691D619D62E0C2FEFB850C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number: 0756
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: s4WP1SUWEXk2pLfvwR/gCzFf5bKlGhhO2vw5Bv+ECN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cb:61:69:1d:61:9d:62:e0:c2:fe:fb:85:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=9cd879527b0892d9e1b57b5d68dfa517d6479c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:0f:b8:7e:b9:56:73:5f:f7:7d:4c:7e:8c:
f9:3d:31:17:6a:75:ea:33:2c:10:ba:af:79:55:9f:
d8:de:4b:ff:76:34:1e:d8:9b:d3:a9:54:ea:31:36:
f8:2b:fd:b2:64:fc:56:b7:d9:ca:16:91:02:da:d8:
7c:10:0a:00:08:ab:b7:62:4c:14:4c:bd:80:d5:3a:
af:e9:87:03:ad:c9:e9:ee:28:01:51:e7:87:c5:e7:
10:5f:4a:98:cb:1e:c5:d2:df:1b:41:7d:5b:d3:5c:
33:5a:78:3c:22:69:a7:07:21:df:e1:09:41:b4:3d:
67:db:bb:dd:d5:5f:c4:13:22:36:ac:77:53:a9:11:
7f:50:21:72:76:13:56:30:b7:9b:2f:ec:3b:9f:f8:
e0:6b:73:e3:5c:65:77:27:7e:ba:5f:b2:80:bc:03:
17:1e:03:5b:95:de:89:af:92:2f:08:0a:ea:09:68:
8a:c7:77:88:7b:da:ee:68:63:65:06:f6:ba:59:32:
cc:2b:93:22:80:bd:8f:2f:50:83:20:87:b3:cd:78:
ab:fc:56:3c:e4:c7:5d:da:93:bc:bf:15:2b:29:a1:
97:b4:30:98:0a:eb:53:30:28:ac:06:ee:b7:34:73:
9b:be:26:a9:52:a1:b0:2c:99:45:8e:32:b1:97:77:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D8:79:52:7B:08:92:D9:E1:B5:7B:5D:68:DF:A5:17:D6:47:9C:37
X509v3 Authority Key Identifier:
keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d7:6e:a8:67:bb:61:0b:0a:d0:f8:cf:6b:59:4f:e2:3d:d6:
7e:20:6a:a4:ac:4c:54:3a:18:c4:4c:df:08:1a:f9:e4:1c:27:
20:d8:b3:61:af:a0:ed:4d:7c:ce:a4:31:9e:b2:51:4c:cb:d8:
eb:a7:d8:2e:7a:ab:6f:9b:3a:e4:18:42:7c:88:fc:55:48:f7:
78:d3:6f:ee:cb:6f:c1:9b:4e:b3:23:4d:1f:a7:da:4e:05:70:
58:3f:49:9c:4f:5e:4f:6a:93:62:64:23:1f:38:01:21:87:b6:
d0:ec:04:de:2b:40:d4:df:2d:c4:65:98:f5:52:1d:c1:c8:6d:
8b:8c:3d:f6:12:f5:d1:13:f6:6d:e0:bb:6b:21:d6:e1:02:bd:
fb:84:69:b8:6f:08:e2:dc:f3:ab:7a:78:3a:c3:67:95:da:bd:
07:b6:cf:25:be:a9:e4:1f:cb:37:bc:4f:6e:9a:32:6d:e6:54:
51:b7:f4:54:5b:f0:03:8e:0e:f3:f9:ce:27:3c:10:e0:44:b0:
9d:36:44:cf:7b:7d:90:92:9b:48:61:82:00:43:f4:47:e9:1d:
c8:53:27:71:28:6f:07:cc:ae:3d:27:33:14:60:97:62:fe:c0:
d7:c3:28:15:ad:f4:1d:63:c7:33:7d:d8:bb:1f:91:e1:3f:6b:
89:a3:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:55 2025 by rpki-client