Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
File: 1GYMK1_mmAYfHgqlfVXfbPBChU0.mft (raw, json)
Hash identifier: 52dNLujzQmEFDfRS/WylmwbrjjL6MwytdnSn9i3SyGU=
Subject key identifier: E3:86:C3:54:C5:CB:4A:B6:10:73:55:0C:3C:6C:6F:50:0F:E9:13:6E
Authority key identifier: D4:66:0C:2B:5F:E6:98:06:1F:1E:0A:A5:7D:55:DF:6C:F0:42:85:4D
Certificate issuer: /CN=d4660c2b5fe698061f1e0aa57d55df6cf042854d
Certificate serial: 0194A5EABF4DCE3678837788363B534E1EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
Manifest number: 13AE
Signing time: Mon 27 Jan 2025 04:00:12 +0000
Manifest this update: Mon 27 Jan 2025 04:00:12 +0000
Manifest next update: Tue 28 Jan 2025 04:00:12 +0000
Files and hashes: 1: 1GYMK1_mmAYfHgqlfVXfbPBChU0.crl (hash: UjTepk94xmuZxedalgYDvJNvlJGAHYA3BkPxJ2zQps0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a5:ea:bf:4d:ce:36:78:83:77:88:36:3b:53:4e:1e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4660c2b5fe698061f1e0aa57d55df6cf042854d
Validity
Not Before: Jan 27 04:00:12 2025 GMT
Not After : Jan 28 04:00:12 2025 GMT
Subject: CN=e386c354c5cb4ab61073550c3c6c6f500fe9136e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:d1:ea:d1:91:da:72:dc:bb:eb:af:09:56:
4c:02:18:57:a0:fb:57:6f:87:b6:6f:cb:db:92:25:
2b:91:f7:cf:93:5d:a7:df:9b:36:c5:ee:fa:06:ff:
a2:aa:78:0e:c6:6f:7a:b7:c3:d9:77:f5:5d:f0:7f:
12:bc:0f:91:0e:18:11:b5:26:ce:35:f2:51:8a:5d:
dc:7e:30:07:8c:11:10:b9:2c:b2:01:f3:15:41:e4:
17:7b:f6:ce:f4:a6:b1:23:41:9a:7c:27:5a:31:f3:
41:48:e1:ab:08:2b:72:3e:4e:6f:b2:ba:df:83:93:
e3:6b:3c:4e:79:b2:3b:b6:c1:a0:16:43:bd:de:4a:
55:81:99:d1:70:19:b0:f5:24:51:46:85:c9:dc:69:
f6:a3:00:6e:51:6b:f8:7e:37:ff:b1:f7:45:7d:8d:
6a:37:12:05:47:e1:8a:cf:d2:48:f8:e3:da:3d:fd:
89:ac:62:53:9e:d1:d0:1f:d1:1b:8c:f6:f1:90:42:
5e:4b:d2:04:be:9e:57:d2:ed:bc:be:83:95:9f:db:
33:49:51:cd:40:82:6c:0e:50:17:ea:7f:4e:4f:5a:
1d:03:e3:40:0f:8c:fe:6a:b3:35:63:df:d1:a0:2a:
e2:19:6e:a2:05:b1:81:10:1c:9b:cc:07:2f:11:b6:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:C3:54:C5:CB:4A:B6:10:73:55:0C:3C:6C:6F:50:0F:E9:13:6E
X509v3 Authority Key Identifier:
keyid:D4:66:0C:2B:5F:E6:98:06:1F:1E:0A:A5:7D:55:DF:6C:F0:42:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:02:1d:ac:10:44:c0:84:cd:43:1a:a7:c9:08:84:1f:c5:9a:
7c:81:24:00:b4:13:55:40:e6:8f:30:91:d0:51:6f:53:97:1f:
2e:08:a8:31:16:8b:91:d6:f6:c5:e0:fd:62:31:0e:75:43:35:
ae:67:f7:bb:8b:ae:af:eb:bc:e7:be:f7:94:e0:87:d5:e1:8e:
ae:f5:ae:b3:8b:91:a9:98:37:76:d1:27:8f:58:4c:7c:2c:a0:
9a:f6:31:40:49:22:be:98:b9:1d:ab:b5:81:a8:39:3f:f8:de:
e3:c3:4a:26:3e:1e:60:c2:a6:b0:b3:c0:78:83:97:1f:9f:8e:
81:c9:c7:14:90:dd:82:95:36:bd:a0:b4:f1:14:7d:87:c9:aa:
a0:51:6b:b3:b3:fe:4d:13:3e:99:2a:16:86:36:13:41:06:8e:
e1:a7:8a:7c:8b:a9:6b:3f:d2:d1:78:f2:ba:f6:45:28:da:62:
a0:84:34:1c:dd:fd:60:e3:e6:29:4b:10:7d:11:7d:df:c9:d6:
16:45:f5:a8:c4:54:0f:11:76:36:49:f5:58:80:ab:60:8d:f6:
ca:bd:00:4c:bf:42:89:47:c9:72:e3:99:3d:2f:24:53:0c:d2:
d2:5e:48:9e:99:d3:bb:29:74:03:cd:f7:c3:8e:24:5d:a8:e4:
65:78:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:26 2025 by rpki-client