Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f14fa1-a26c-4caa-9349-634f74fbac94/1/G-GHf3jq6VlD_8hjWc7Q973RG9w.mft
File: G-GHf3jq6VlD_8hjWc7Q973RG9w.mft (raw, json)
Hash identifier: RjLegoZ+4BeGlID4TWjH5AOLZZ/zPA36NfETYQm6pxc=
Subject key identifier: B2:14:92:61:D8:71:B6:A9:5E:A5:37:98:7D:2C:58:6B:9A:34:BE:E4
Authority key identifier: 1B:E1:87:7F:78:EA:E9:59:43:FF:C8:63:59:CE:D0:F7:BD:D1:1B:DC
Certificate issuer: /CN=1be1877f78eae95943ffc86359ced0f7bdd11bdc
Certificate serial: 018EFE2B4F64FF65892E9E915C58C0F9B4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-GHf3jq6VlD_8hjWc7Q973RG9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f14fa1-a26c-4caa-9349-634f74fbac94/1/G-GHf3jq6VlD_8hjWc7Q973RG9w.mft
Manifest number: 112C
Signing time: Sun 21 Apr 2024 01:00:34 +0000
Manifest this update: Sun 21 Apr 2024 01:00:34 +0000
Manifest next update: Mon 22 Apr 2024 01:00:34 +0000
Files and hashes: 1: G-GHf3jq6VlD_8hjWc7Q973RG9w.crl (hash: HuHKnZi665DX/jiiJnhxl2i32LErHG0pI8jdDat1SyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fe:2b:4f:64:ff:65:89:2e:9e:91:5c:58:c0:f9:b4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be1877f78eae95943ffc86359ced0f7bdd11bdc
Validity
Not Before: Apr 21 01:00:34 2024 GMT
Not After : Apr 22 01:00:34 2024 GMT
Subject: CN=b2149261d871b6a95ea537987d2c586b9a34bee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:ca:09:d3:e3:6d:d7:3f:46:35:9c:de:1b:
67:12:db:f6:23:08:3e:2a:02:9e:7c:77:c0:7e:1e:
f0:43:e7:48:72:7a:06:c2:3a:3e:ba:c6:17:55:a7:
4f:46:27:9e:51:58:02:45:70:1c:08:fe:50:f9:30:
d9:8f:a5:4a:60:35:b9:1a:24:fc:04:8c:77:12:bc:
dd:0f:52:e4:86:bf:06:15:00:2b:0b:98:2c:98:de:
d7:b2:d3:e4:f9:d6:8a:01:aa:3f:ba:63:65:d3:0d:
99:27:24:35:ef:a7:88:b8:c3:d1:4a:ba:d7:59:dc:
9a:b1:ab:0d:11:b1:de:ef:e6:b7:79:3f:03:1a:90:
55:d8:c3:50:4e:5f:07:43:fd:4e:9d:2b:8d:5c:3e:
ce:de:b8:e8:27:8b:cf:15:ef:e8:41:97:b8:6a:21:
19:48:e7:b6:e7:8b:41:23:5d:81:d1:5c:87:b7:2c:
46:1d:d8:68:43:9e:78:9c:07:7e:69:7a:5b:e1:c3:
0a:d3:63:4c:71:3a:fc:da:6e:a2:c4:7d:ce:38:74:
69:8d:dc:a8:a9:9f:6d:f5:15:05:b0:2e:76:d7:53:
4c:34:f3:ba:2a:e4:58:8b:0a:2c:7e:df:e6:de:ac:
d2:a4:cf:ed:dd:c2:d1:87:8e:3f:23:f5:b3:d6:9f:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:92:61:D8:71:B6:A9:5E:A5:37:98:7D:2C:58:6B:9A:34:BE:E4
X509v3 Authority Key Identifier:
keyid:1B:E1:87:7F:78:EA:E9:59:43:FF:C8:63:59:CE:D0:F7:BD:D1:1B:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-GHf3jq6VlD_8hjWc7Q973RG9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f14fa1-a26c-4caa-9349-634f74fbac94/1/G-GHf3jq6VlD_8hjWc7Q973RG9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f14fa1-a26c-4caa-9349-634f74fbac94/1/G-GHf3jq6VlD_8hjWc7Q973RG9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a0:4c:e7:48:61:3a:ed:76:17:37:3a:04:8e:af:90:c3:40:
cd:3b:4a:ab:66:63:1a:1a:3c:22:0d:14:9d:4c:89:f0:07:2c:
da:50:b2:f7:d9:2a:5a:d7:52:c5:64:75:b0:26:45:2d:3e:c0:
70:39:ba:7b:3f:15:89:8f:8a:cf:eb:22:69:09:5d:9a:b9:4c:
ca:f7:2f:3f:29:11:60:8f:60:ac:6a:53:e2:8d:65:b4:c6:ed:
b4:33:13:0e:95:a1:ce:f6:e4:93:83:49:65:e7:af:a6:cf:8b:
fb:25:da:4d:59:0c:a4:17:4c:5a:a8:53:62:cc:c8:96:29:af:
26:4b:a1:4a:98:63:a5:3b:fa:6e:58:8c:61:b0:5d:71:10:5f:
55:3a:9c:3e:9b:10:00:97:7d:9b:c9:ea:c7:fe:32:99:a8:ed:
51:7f:1d:5c:2e:a5:08:85:d8:6e:26:84:05:5c:95:5e:18:47:
1d:9c:f0:3c:33:33:43:35:e3:e6:5d:6f:84:2a:ac:ce:3e:e8:
39:38:7d:31:75:f1:3b:5c:95:3a:1e:a0:87:6e:e5:3b:e6:2f:
0e:f3:ae:ce:17:66:c8:a4:21:56:fb:61:2f:5b:ef:63:47:7d:
af:0f:b1:df:42:ef:cb:d0:07:b8:46:37:1b:9a:90:31:48:a0:
60:a8:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:57 2025 by rpki-client