Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
File: 1GYMK1_mmAYfHgqlfVXfbPBChU0.mft (raw, json)
Hash identifier: KNZvmj86QrYJN2RQjrnhazATZzvyY/aHeH5PVLxuXHI=
Subject key identifier: 13:67:47:29:CC:77:5E:1A:A1:31:28:4D:CD:3B:43:7B:06:D2:A4:1A
Authority key identifier: D4:66:0C:2B:5F:E6:98:06:1F:1E:0A:A5:7D:55:DF:6C:F0:42:85:4D
Certificate issuer: /CN=d4660c2b5fe698061f1e0aa57d55df6cf042854d
Certificate serial: 01948EBEA446B3ECBA33AF46E1EF62141254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
Manifest number: 13A2
Signing time: Wed 22 Jan 2025 16:00:45 +0000
Manifest this update: Wed 22 Jan 2025 16:00:45 +0000
Manifest next update: Thu 23 Jan 2025 16:00:45 +0000
Files and hashes: 1: 1GYMK1_mmAYfHgqlfVXfbPBChU0.crl (hash: ZVYW2JmbKH3df1SuOPoyY9nnriCJC9zRlflOprL8D2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:be:a4:46:b3:ec:ba:33:af:46:e1:ef:62:14:12:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4660c2b5fe698061f1e0aa57d55df6cf042854d
Validity
Not Before: Jan 22 16:00:45 2025 GMT
Not After : Jan 23 16:00:45 2025 GMT
Subject: CN=13674729cc775e1aa131284dcd3b437b06d2a41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:b7:93:3f:49:1f:be:2e:7f:dd:f7:84:5a:
9b:17:54:ec:17:e7:2d:85:66:21:26:6f:c3:08:f8:
73:7d:ce:4e:fd:6d:91:da:82:78:13:24:51:8a:33:
ae:45:c5:f1:19:6c:3a:2a:9c:5d:37:68:d0:58:39:
b2:41:d4:01:7a:51:37:f9:24:5e:16:f8:f6:f4:2f:
d5:63:81:a2:ec:ee:91:22:26:ec:17:59:64:c4:39:
ca:04:04:65:1f:19:de:80:59:44:3f:42:bc:0c:55:
58:2e:38:b5:d4:e4:c4:93:79:99:7e:bf:af:f1:42:
ac:0f:a8:ea:60:6a:ab:b7:b5:35:94:8a:60:af:01:
42:26:69:7f:03:a6:91:7a:5f:26:32:63:8e:6a:51:
9e:98:dc:97:6e:72:99:26:fd:52:ec:47:f9:73:8e:
4c:69:92:a1:4f:f4:f6:50:ca:f4:97:36:45:58:fa:
f0:5f:29:5e:0f:25:f9:03:ea:18:08:fa:fa:fe:26:
87:38:b3:61:06:9c:fb:3e:2b:fe:4e:84:c6:62:00:
77:0d:5f:64:83:5d:de:0c:37:dc:88:16:72:5e:26:
47:6c:2b:6f:75:b2:d6:50:de:db:7c:e1:29:b9:09:
27:ed:63:c3:aa:95:42:49:b4:b1:1a:dc:ae:38:c3:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:67:47:29:CC:77:5E:1A:A1:31:28:4D:CD:3B:43:7B:06:D2:A4:1A
X509v3 Authority Key Identifier:
keyid:D4:66:0C:2B:5F:E6:98:06:1F:1E:0A:A5:7D:55:DF:6C:F0:42:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7e:eb:65:94:e5:f0:7d:11:60:54:82:56:43:1d:ba:48:34:
d6:5d:4d:e0:fa:b2:b9:e7:fe:3c:eb:06:5f:97:3f:53:b5:6b:
88:8d:04:8c:11:d5:50:2d:a6:2d:99:b1:89:03:ae:bb:c4:69:
4e:98:8c:85:4a:a8:e6:78:4c:c5:34:8b:0c:09:8d:ed:25:c8:
c7:57:4b:1a:3d:d9:32:c2:ca:78:b3:e8:74:bc:3f:d0:16:74:
04:01:79:2f:c4:ec:95:78:85:cb:fa:3d:a9:ad:d3:e3:46:4a:
0b:0c:e9:9f:02:bd:8d:ef:7c:b1:8e:a2:31:41:53:c5:88:70:
98:b2:63:22:6a:8b:e3:42:a3:96:71:83:63:a9:e3:78:f4:23:
80:3f:b3:cb:86:89:fa:3c:2f:49:f7:43:f5:51:75:e2:0a:76:
b5:9e:ae:4e:a7:ba:61:41:20:54:a4:98:7c:0c:64:81:fa:f1:
fb:02:4a:cf:5f:fa:f4:b7:90:d4:48:8c:2b:1c:0b:31:2e:5f:
a9:78:3f:6a:8d:1e:7c:66:4a:c7:33:90:06:5d:01:62:f2:cd:
43:dc:b2:73:27:a4:ca:ad:5c:36:e2:00:94:ba:4b:38:85:65:
37:1a:a7:b0:9f:1c:d9:de:bf:db:19:27:fe:f5:20:29:4c:f8:
f0:6a:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:33 2025 by rpki-client on console.sobornost.net