Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft
File: GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft (raw, json)
Hash identifier: PsLGw0fMJ8FIJWmBCGM1CUL8ngKWFf1i0U/UH7IRkXU=
Subject key identifier: 75:E8:D4:C6:87:CF:4C:D5:CC:8D:E2:2A:CC:98:FD:3D:43:93:98:9D
Authority key identifier: 1A:22:6C:6B:A6:FD:83:11:FF:0C:D3:3B:41:21:57:09:B2:B0:26:48
Certificate issuer: /CN=1a226c6ba6fd8311ff0cd33b41215709b2b02648
Certificate serial: 019481DF7147105515F916A45D77359447A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiJsa6b9gxH_DNM7QSFXCbKwJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft
Manifest number: 0528
Signing time: Mon 20 Jan 2025 04:01:31 +0000
Manifest this update: Mon 20 Jan 2025 04:01:31 +0000
Manifest next update: Tue 21 Jan 2025 04:01:31 +0000
Files and hashes: 1: GiJsa6b9gxH_DNM7QSFXCbKwJkg.crl (hash: SGVSpvEjVv08boGHlE8nUNub6xRBZAWcYUU4ED+wl2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:81:df:71:47:10:55:15:f9:16:a4:5d:77:35:94:47:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a226c6ba6fd8311ff0cd33b41215709b2b02648
Validity
Not Before: Jan 20 04:01:31 2025 GMT
Not After : Jan 21 04:01:31 2025 GMT
Subject: CN=75e8d4c687cf4cd5cc8de22acc98fd3d4393989d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:84:0b:97:c4:42:5a:50:bf:58:64:52:72:
a0:11:40:b6:35:91:83:78:94:33:8d:23:b1:b4:60:
6b:38:f8:84:16:74:15:0f:ae:2b:e1:4b:d2:9c:c9:
c9:b4:ca:14:07:be:6c:6e:27:4c:9a:55:2c:18:f4:
a9:53:eb:ce:73:2c:e2:bd:d1:ce:18:31:47:a4:ae:
94:7d:60:fb:4b:ff:7f:ae:4c:25:80:ad:bd:00:7c:
f4:4d:ed:7f:a0:3e:20:86:8d:2b:ee:63:db:39:f6:
ed:85:3f:da:97:e3:4d:40:36:7a:b9:3a:0b:de:66:
b2:bc:5d:d0:d8:96:a0:9c:20:e2:ad:2a:75:10:8d:
9e:92:eb:44:d2:66:71:ed:4b:24:42:f7:dc:e6:c0:
85:d6:7c:81:fd:f3:9b:5e:e2:cf:00:d9:62:ab:60:
5f:61:5f:5a:6e:04:5c:db:80:23:d8:5e:4d:fa:18:
0f:13:3b:00:3f:89:15:21:25:f0:60:cc:43:3b:b9:
1b:a1:c0:e2:2c:e8:32:22:4e:55:46:01:75:09:38:
d9:6d:32:a0:08:d5:97:11:6a:58:f4:ae:50:08:a0:
31:65:0c:99:c4:bb:e1:66:81:98:3c:65:5c:5c:c4:
3f:88:0d:53:a0:76:59:7b:fe:5f:f0:6b:74:fe:71:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:D4:C6:87:CF:4C:D5:CC:8D:E2:2A:CC:98:FD:3D:43:93:98:9D
X509v3 Authority Key Identifier:
keyid:1A:22:6C:6B:A6:FD:83:11:FF:0C:D3:3B:41:21:57:09:B2:B0:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiJsa6b9gxH_DNM7QSFXCbKwJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6f:f9:2c:93:b2:3b:5d:42:f9:f2:be:f5:41:de:f8:6d:57:
d5:a7:5b:ca:16:7f:1a:5b:ad:b1:7f:bd:e3:94:bf:ce:db:e1:
9f:f1:f6:7c:13:90:4e:cf:09:b4:dd:0c:20:5b:98:8d:fe:97:
8d:76:73:5f:c8:4b:fd:52:87:0f:ad:3f:b2:4c:d3:14:c6:00:
01:c3:f7:37:f0:c5:e2:26:f2:4a:00:d8:a8:e3:3b:7a:40:96:
08:75:25:30:0d:58:94:b2:40:46:f2:46:5f:28:5b:c4:86:be:
76:22:0f:79:5a:a1:ad:de:07:bd:51:9a:c1:54:c2:2c:7a:45:
14:56:ae:9e:68:d2:51:95:9b:8e:9f:21:b9:47:59:25:bd:dc:
66:96:62:da:9e:af:69:e1:ba:96:94:3a:ab:2d:9e:1d:03:3a:
d5:cb:d4:cd:15:f9:1e:cc:73:60:b2:a5:43:83:04:3a:e9:a2:
04:8e:02:23:73:fc:bb:71:0a:b8:1f:99:bb:57:e5:1c:91:33:
da:00:ff:12:92:b0:ff:aa:77:69:1c:22:fe:fd:42:76:5c:3a:
e5:ec:67:71:1a:83:15:85:cf:33:d7:f0:e5:6e:fc:34:3a:47:
0a:ae:ec:a9:51:4d:5f:11:dc:3c:92:f2:7a:2f:42:35:d6:0c:
b0:86:53:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSB33FHEFUV+RakXXc1lEemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjI2YzZiYTZmZDgzMTFmZjBjZDMzYjQxMjE1NzA5YjJi
MDI2NDgwHhcNMjUwMTIwMDQwMTMxWhcNMjUwMTIxMDQwMTMxWjAzMTEwLwYDVQQD
Eyg3NWU4ZDRjNjg3Y2Y0Y2Q1Y2M4ZGUyMmFjYzk4ZmQzZDQzOTM5ODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuyEC5fEQlpQv1hkUnKgEUC2NZGD
eJQzjSOxtGBrOPiEFnQVD64r4UvSnMnJtMoUB75sbidMmlUsGPSpU+vOcyzivdHO
GDFHpK6UfWD7S/9/rkwlgK29AHz0Te1/oD4gho0r7mPbOfbthT/al+NNQDZ6uToL
3mayvF3Q2JagnCDirSp1EI2ekutE0mZx7UskQvfc5sCF1nyB/fObXuLPANliq2Bf
YV9abgRc24Aj2F5N+hgPEzsAP4kVISXwYMxDO7kbocDiLOgyIk5VRgF1CTjZbTKg
CNWXEWpY9K5QCKAxZQyZxLvhZoGYPGVcXMQ/iA1ToHZZe/5f8Gt0/nFbQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXo1MaHz0zVzI3iKsyY/T1Dk5idMB8GA1UdIwQY
MBaAFBoibGum/YMR/wzTO0EhVwmysCZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lKc2E2YjlneEhfRE5NN1FTRlhDYkt3SmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8zYWM2YmQtZTU3Yi00MTkzLWFiYTQt
NTc5Y2Q5YzdhZjQxLzEvR2lKc2E2YjlneEhfRE5NN1FTRlhDYkt3SmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8zYWM2YmQtZTU3Yi00MTkzLWFiYTQtNTc5Y2Q5YzdhZjQx
LzEvR2lKc2E2YjlneEhfRE5NN1FTRlhDYkt3SmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG/5LJOy
O11C+fK+9UHe+G1X1adbyhZ/GlutsX+945S/ztvhn/H2fBOQTs8JtN0MIFuYjf6X
jXZzX8hL/VKHD60/skzTFMYAAcP3N/DF4ibySgDYqOM7ekCWCHUlMA1YlLJARvJG
XyhbxIa+diIPeVqhrd4HvVGawVTCLHpFFFaunmjSUZWbjp8huUdZJb3cZpZi2p6v
aeG6lpQ6qy2eHQM61cvUzRX5HsxzYLKlQ4MEOumiBI4CI3P8u3EKuB+Zu1flHJEz
2gD/EpKw/6p3aRwi/v1Cdlw65exncRqDFYXPM9fw5W78NDpHCq7sqVFNXxHcPJLy
ei9CNdYMsIZT3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:55 2025 by rpki-client