Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/019d7f-632e-47f8-8952-67d6eeeae8d5/1/G5nQ3bMeGW8IEDkqv42QVHlonwk.mft
File: G5nQ3bMeGW8IEDkqv42QVHlonwk.mft (raw, json)
Hash identifier: NGJ3nXmmA9SkB6g0tgqLMCvGY3052gL8usZ6Rdw+H+Q=
Subject key identifier: 47:36:94:D2:DA:02:31:8D:95:7F:D7:60:F0:0C:48:9C:C7:CB:42:D2
Authority key identifier: 1B:99:D0:DD:B3:1E:19:6F:08:10:39:2A:BF:8D:90:54:79:68:9F:09
Certificate issuer: /CN=1b99d0ddb31e196f0810392abf8d905479689f09
Certificate serial: 018AF533AF883F8C1AD982C61A0A5D229FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5nQ3bMeGW8IEDkqv42QVHlonwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/019d7f-632e-47f8-8952-67d6eeeae8d5/1/G5nQ3bMeGW8IEDkqv42QVHlonwk.mft
Manifest number: 0190
Signing time: Tue 03 Oct 2023 11:01:59 +0000
Manifest this update: Tue 03 Oct 2023 11:01:59 +0000
Manifest next update: Wed 04 Oct 2023 11:01:59 +0000
Files and hashes: 1: G5nQ3bMeGW8IEDkqv42QVHlonwk.crl (hash: Y0t18MdRP8WEOMJlhZUdnWSZwam3AcQBLkSNvufiEfs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:33:af:88:3f:8c:1a:d9:82:c6:1a:0a:5d:22:9f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b99d0ddb31e196f0810392abf8d905479689f09
Validity
Not Before: Oct 3 11:01:59 2023 GMT
Not After : Oct 4 11:01:59 2023 GMT
Subject: CN=473694d2da02318d957fd760f00c489cc7cb42d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:47:40:96:8b:52:da:3f:f7:c2:64:d1:aa:
a1:30:42:a6:ec:78:4d:89:22:fb:a0:9c:91:97:d3:
d2:f5:b7:f2:a4:a1:ae:dc:f1:d5:72:8a:c6:5f:3a:
13:53:03:0e:bc:ed:fa:1a:da:17:7a:2b:d4:6f:f9:
99:4d:f1:5d:94:ed:ea:2c:16:fd:32:42:e0:ed:73:
1d:49:e6:ee:f4:b8:e4:b0:ba:80:c6:2a:91:fc:eb:
d4:26:ae:67:1a:4c:4d:ef:8b:ed:a3:57:c0:66:60:
18:ca:1d:8a:84:da:db:ba:72:a6:09:20:68:c5:57:
2f:6f:59:94:7b:c9:aa:f6:d0:fd:12:ac:76:81:36:
32:9f:52:74:48:c3:d9:02:3b:94:d1:ee:c9:f5:23:
69:4a:9d:34:9c:c4:97:7c:46:67:7f:f3:a1:5a:a6:
9d:a3:65:5d:1a:6f:4e:c7:bd:95:1b:41:26:a2:fc:
0e:aa:00:0b:39:c0:f0:d5:0c:5e:f2:2f:fe:e0:ed:
e9:8e:29:f1:d5:e1:a3:a1:c2:a3:7a:8a:98:55:84:
2a:6d:bf:41:04:26:e0:39:29:c0:2b:01:e7:94:45:
e9:e0:f3:69:c0:f3:3e:3d:71:1b:90:e1:ec:bf:0f:
ef:6b:5b:98:1c:e3:2c:33:11:a4:a3:6f:25:ab:3a:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:36:94:D2:DA:02:31:8D:95:7F:D7:60:F0:0C:48:9C:C7:CB:42:D2
X509v3 Authority Key Identifier:
keyid:1B:99:D0:DD:B3:1E:19:6F:08:10:39:2A:BF:8D:90:54:79:68:9F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5nQ3bMeGW8IEDkqv42QVHlonwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/019d7f-632e-47f8-8952-67d6eeeae8d5/1/G5nQ3bMeGW8IEDkqv42QVHlonwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/019d7f-632e-47f8-8952-67d6eeeae8d5/1/G5nQ3bMeGW8IEDkqv42QVHlonwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:44:95:58:bc:5e:e6:73:e2:db:93:7b:24:f6:be:e5:dd:88:
48:8d:1f:dd:3f:d7:79:41:d6:d2:0d:af:19:0f:34:59:cd:91:
cf:2c:12:e0:42:eb:ea:9a:8b:0e:13:63:ad:15:9a:b5:d6:e6:
db:61:62:27:7a:26:be:e1:92:0a:35:48:43:06:df:97:6c:65:
bc:0d:b1:af:ca:c1:35:f6:b4:a4:96:aa:c9:8a:55:da:7b:c6:
ab:86:5a:b3:57:a8:c8:c5:74:6e:b2:b8:80:f3:54:3f:79:40:
9d:6e:df:3a:86:7d:72:df:8b:00:dd:4f:d4:2e:6e:ad:f5:e0:
5e:a3:17:15:9d:00:9c:40:c4:47:67:17:51:0c:80:c1:a1:a0:
97:cf:61:fd:84:5e:e5:36:3d:6f:fc:4f:aa:f3:8a:c1:89:63:
b3:23:0f:eb:90:f8:0f:dd:bd:8b:a9:39:36:30:18:28:a0:dd:
2d:2a:cf:22:ce:c0:e7:24:3b:65:a9:c3:37:a6:90:a2:ec:ed:
f8:d4:ef:7f:35:26:a0:33:48:ad:06:39:24:5b:38:20:f7:13:
eb:54:44:aa:bd:5f:db:14:34:d3:07:74:44:4b:a2:c1:4f:4f:
d8:96:a2:f1:44:f1:9c:74:3b:a5:af:d0:2d:bf:48:a9:c5:59:
d6:f2:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:18:34 2025 by rpki-client