Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
File: G68dbBfxeiDxUwVXZjn97fqihaQ.mft (raw, json)
Hash identifier: GwgBWO5FBeVjW3yM/HSaKO/736oZZ30qfq/06qThhbs=
Subject key identifier: F4:55:21:7E:66:54:A1:47:33:38:97:A0:69:FF:83:62:DD:66:1B:E3
Authority key identifier: 1B:AF:1D:6C:17:F1:7A:20:F1:53:05:57:66:39:FD:ED:FA:A2:85:A4
Certificate issuer: /CN=1baf1d6c17f17a20f15305576639fdedfaa285a4
Certificate serial: 0194BBCE31FC1C5DACF358F6104C68B4298A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G68dbBfxeiDxUwVXZjn97fqihaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
Manifest number: 0526
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: G68dbBfxeiDxUwVXZjn97fqihaQ.crl (hash: nv4d+YuSkPb/XwNcwyZynoLf3zLzBFigS7Spn6oHMPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:31:fc:1c:5d:ac:f3:58:f6:10:4c:68:b4:29:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1baf1d6c17f17a20f15305576639fdedfaa285a4
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=f455217e6654a147333897a069ff8362dd661be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:af:31:fc:be:bf:83:05:b3:6b:63:7f:3b:
c9:bc:da:5b:cd:2b:53:a6:8f:1e:cf:9c:2a:20:2b:
e4:7f:8f:71:33:37:78:92:d5:0f:41:e1:f3:22:2f:
8c:7b:d1:aa:9a:a9:8f:eb:09:26:21:bd:c9:b5:ff:
36:fc:83:06:f1:d8:d4:9c:af:a8:f6:14:74:64:99:
c1:33:45:ad:57:37:6b:f5:64:3a:24:ff:b5:96:c7:
ce:7c:a2:c6:e4:5a:81:ef:e1:cd:b4:6b:da:e9:c9:
3e:02:d4:a9:b8:2a:80:ae:3a:92:03:50:0e:21:94:
6a:c6:a3:44:08:52:4a:e2:1b:63:46:32:1f:a9:92:
fa:f6:de:46:f4:33:97:3d:63:33:45:37:79:74:49:
5b:c0:f8:b1:79:07:74:1f:ff:bc:ec:f8:83:2b:e0:
0e:72:18:0f:63:79:91:cf:74:0c:f2:30:73:f1:1d:
bb:40:b2:a6:96:06:cd:f5:8a:d9:07:52:27:39:85:
ac:b1:77:1a:11:0c:71:98:60:75:91:95:ba:da:85:
bb:05:c3:2a:f1:11:08:34:65:fa:ff:ee:56:16:84:
3f:fc:00:fe:41:a5:5b:76:3c:0a:f5:fc:72:c4:05:
b9:fc:99:7f:e4:85:36:fe:87:54:49:5c:91:84:04:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:55:21:7E:66:54:A1:47:33:38:97:A0:69:FF:83:62:DD:66:1B:E3
X509v3 Authority Key Identifier:
keyid:1B:AF:1D:6C:17:F1:7A:20:F1:53:05:57:66:39:FD:ED:FA:A2:85:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G68dbBfxeiDxUwVXZjn97fqihaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cc:f7:d6:ce:08:a4:3b:da:90:32:51:27:61:e2:1f:f2:6a:
e9:1a:15:ad:b5:4c:91:02:34:0e:43:a9:02:0e:a1:78:b5:db:
eb:c9:90:44:d3:a9:e0:a7:7f:99:a9:1b:a5:6a:90:1a:a7:9c:
89:b2:54:af:4d:99:4b:a3:b8:52:fd:4a:8b:2f:63:4a:47:55:
bc:49:14:10:0a:4a:e5:4b:4e:b9:27:80:ea:6c:b1:bb:3c:ac:
a9:21:31:15:51:8c:d3:aa:e6:52:d2:7c:23:45:82:71:39:40:
cb:64:74:22:ab:f4:01:b6:80:67:00:6c:9a:1b:a7:61:c5:ec:
f7:9e:cf:3a:3f:26:c6:e3:9f:c0:42:da:5c:3a:99:45:18:63:
6c:ae:4a:96:22:fd:1b:e5:4c:71:c0:09:fa:2c:89:8a:de:06:
f4:46:31:47:8e:7f:bf:ae:cc:6b:e8:f5:48:8e:79:ca:80:dc:
24:58:00:c4:92:01:fe:00:43:ce:cb:b7:d6:bb:a0:5b:b7:0e:
0a:5d:dd:06:e8:ff:55:3e:6c:4d:ea:bd:91:de:b9:51:00:40:
b6:e6:12:8f:20:e2:ad:3c:d8:63:23:d0:09:ec:13:b1:3c:74:
d0:95:83:cc:fc:5b:88:36:59:5f:8d:86:f3:37:d9:2c:ff:93:
42:be:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:49:52 2025 by rpki-client