Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/23da49-3133-4abe-af8e-efc31989e385/1/Go6vPfrKEh-S2YLlojJ8u8-jWiM.mft
File: Go6vPfrKEh-S2YLlojJ8u8-jWiM.mft (raw, json)
Hash identifier: aldh6XGqfg4miQlNgrBpGRmymx2G00000tHw6eW3Teo=
Subject key identifier: CD:89:BF:72:EB:07:EF:D1:16:6D:CB:81:E8:65:1C:8C:59:45:FF:6A
Authority key identifier: 1A:8E:AF:3D:FA:CA:12:1F:92:D9:82:E5:A2:32:7C:BB:CF:A3:5A:23
Certificate issuer: /CN=1a8eaf3dfaca121f92d982e5a2327cbbcfa35a23
Certificate serial: 0191E5096DABBFBED24C8988BA5433C8E482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Go6vPfrKEh-S2YLlojJ8u8-jWiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/23da49-3133-4abe-af8e-efc31989e385/1/Go6vPfrKEh-S2YLlojJ8u8-jWiM.mft
Manifest number: 0E6B
Signing time: Thu 12 Sep 2024 07:01:25 +0000
Manifest this update: Thu 12 Sep 2024 07:01:25 +0000
Manifest next update: Fri 13 Sep 2024 07:01:25 +0000
Files and hashes: 1: Go6vPfrKEh-S2YLlojJ8u8-jWiM.crl (hash: jX2WQK36eNZ3q8R6JL5oT/rZd1KAAqVx8Ko4EbErRgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:09:6d:ab:bf:be:d2:4c:89:88:ba:54:33:c8:e4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8eaf3dfaca121f92d982e5a2327cbbcfa35a23
Validity
Not Before: Sep 12 07:01:25 2024 GMT
Not After : Sep 13 07:01:25 2024 GMT
Subject: CN=cd89bf72eb07efd1166dcb81e8651c8c5945ff6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:b0:ab:b1:c1:22:b9:0c:f7:38:6a:0d:4a:
f2:0e:31:a8:01:22:67:9f:38:94:88:90:8e:8b:68:
ef:66:c0:04:3a:4b:47:7f:08:92:33:ff:30:93:38:
22:fb:42:24:67:e5:b3:a5:53:18:33:bc:aa:79:59:
09:82:40:3a:34:e0:92:e8:2c:43:0a:2b:b0:3a:62:
b5:b0:f9:84:de:71:ff:12:b9:14:80:ff:b5:f2:24:
2e:9f:7f:32:19:1f:d9:18:b9:8f:d6:cc:82:0c:55:
14:74:af:e7:d5:75:f1:b3:eb:71:aa:4f:56:ea:78:
a3:ca:95:14:75:ec:6d:8a:a2:cd:e4:44:22:98:fb:
c5:61:56:47:22:06:b4:91:91:89:63:2d:4a:25:a3:
e3:a5:47:59:0e:86:01:bb:c0:b1:de:cd:1e:91:3b:
ec:db:bc:81:3e:ec:04:4e:19:76:61:f9:a0:ab:c3:
1b:5f:02:77:4b:bf:a2:89:b8:24:65:f3:9c:22:02:
92:e0:c0:63:53:38:50:91:a3:b7:ba:da:82:1a:d4:
6c:74:16:05:05:d9:bd:3f:10:31:fc:fd:0a:b9:ed:
8c:fd:f9:0b:c7:a6:37:7e:40:55:d2:0e:d9:34:28:
63:81:c6:e9:60:86:a0:f5:0d:c6:94:aa:9c:0a:e3:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:BF:72:EB:07:EF:D1:16:6D:CB:81:E8:65:1C:8C:59:45:FF:6A
X509v3 Authority Key Identifier:
keyid:1A:8E:AF:3D:FA:CA:12:1F:92:D9:82:E5:A2:32:7C:BB:CF:A3:5A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Go6vPfrKEh-S2YLlojJ8u8-jWiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/23da49-3133-4abe-af8e-efc31989e385/1/Go6vPfrKEh-S2YLlojJ8u8-jWiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/23da49-3133-4abe-af8e-efc31989e385/1/Go6vPfrKEh-S2YLlojJ8u8-jWiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b0:77:ca:c7:6e:64:ce:7e:af:f8:14:b4:c7:ef:5e:76:f2:
d4:de:03:08:e1:86:7e:8a:fd:85:59:a9:c7:bd:ee:31:2d:88:
6d:a5:0e:4f:e4:43:5f:7f:6e:d3:ca:db:a8:b5:2a:d4:0e:15:
59:ed:9b:db:8e:39:d8:33:eb:af:44:8f:19:6a:ff:fd:45:75:
2c:a6:13:9a:ee:bb:07:e1:01:eb:5f:64:16:b1:a1:fc:3f:e2:
11:56:d2:72:d5:d9:1b:51:68:fe:37:f6:bc:ae:6c:9b:6a:f4:
55:a8:61:4b:d6:5e:5a:dc:c9:85:d3:1c:52:77:bb:5a:04:a8:
4c:4d:d5:86:bb:c3:b9:b2:17:6a:1e:56:fd:aa:ec:89:54:b0:
ae:1c:36:7a:e6:88:22:1c:8a:53:b7:5e:c8:16:a4:b2:73:bb:
df:3c:dd:23:10:3a:4d:6c:41:0e:fd:6a:74:97:42:a5:f5:2a:
8a:57:9a:8d:64:7c:2e:2b:b9:d7:ac:82:bb:ab:38:ea:da:d2:
84:71:0b:ea:99:2c:05:5a:e5:3d:e2:a5:e4:ea:3d:56:42:df:
8d:97:d4:e7:a4:40:87:fd:14:e3:b4:68:dc:6d:03:02:e3:de:
04:89:4b:31:eb:46:be:7e:a4:f6:0b:60:db:69:64:2b:d6:f0:
49:d2:c7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:57:06 2025 by rpki-client