Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: 0xKndewvxAc+1GtDfJW4wR+Z6cuYMDwKJcnyZmUrY8E=
Subject key identifier: 53:4F:D0:B6:10:D3:1F:39:13:39:95:B8:7D:98:8C:C2:E5:26:6D:F2
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 0194BC3C79C7786A7B4C53380B9EA0BD3D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 04BD
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 8/KaFL2rDBlMjEJBHiSTRPcj296lblfq8UDH+S1/Kcg=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:79:c7:78:6a:7b:4c:53:38:0b:9e:a0:bd:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=534fd0b610d31f39133995b87d988cc2e5266df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:cf:3f:7c:9f:1b:ff:b4:b8:75:bc:7d:d5:
bd:ba:52:83:c7:b3:65:0e:09:c2:40:e4:be:d4:33:
d8:4a:2c:3a:35:33:02:9a:59:20:dd:0e:67:d2:a2:
90:9d:59:42:01:6c:5f:e6:a6:4c:8a:c4:8d:67:90:
3f:cc:8a:da:5e:40:37:36:8f:f6:6c:1d:cf:28:30:
23:2d:f7:74:dd:61:e9:bf:f1:be:ab:f1:5d:71:63:
c3:44:14:0d:7f:ce:2c:85:3d:9a:26:ac:e8:f9:6c:
57:4a:91:ab:db:de:72:a0:ba:41:76:ba:5c:22:e8:
66:ab:15:d2:ea:58:ff:e0:b9:3c:bb:46:75:ab:bd:
50:8e:b7:1a:0d:7c:ce:64:74:f1:f4:d8:3d:17:96:
de:29:c2:02:48:38:13:ef:9e:c6:4b:e7:0b:e8:c5:
94:47:0b:ef:4d:a2:9a:e2:c8:9e:68:f3:7e:19:68:
5f:54:3d:fc:b9:92:2f:7b:76:5d:1d:a1:a0:97:55:
42:69:e6:1b:a3:f6:c7:56:34:b9:c1:33:4d:a2:16:
23:2f:c9:5e:01:3c:84:70:a0:49:00:aa:6b:e9:b3:
12:da:61:23:70:e5:b6:9a:a8:8c:5f:d1:21:c0:6c:
fc:01:bf:58:bb:2c:1b:88:e9:4f:78:f7:41:6f:50:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4F:D0:B6:10:D3:1F:39:13:39:95:B8:7D:98:8C:C2:E5:26:6D:F2
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9f:1e:b7:c5:21:f4:92:bd:1d:80:f6:a3:e4:73:d3:d6:66:
52:75:9a:69:ba:c2:be:d9:03:3c:24:80:e0:7f:fc:db:44:27:
65:2e:bf:f7:fc:63:ce:13:a5:63:ba:86:c6:04:57:34:f6:df:
4f:14:7b:02:19:11:15:e0:75:37:22:86:74:4b:5d:56:68:fa:
da:71:dd:d3:16:b4:67:59:40:3e:8f:6e:c7:01:75:6e:68:6a:
64:c7:27:25:3b:d7:ef:c9:f3:bd:54:d8:5e:e9:b8:a1:9a:89:
e8:b8:80:6f:70:6e:cb:f9:e7:2a:f5:02:5c:c2:4a:b0:83:ed:
b4:14:70:27:2d:53:cd:6f:d0:ce:24:a0:7c:1c:a3:41:9a:37:
d3:34:6c:c0:52:e1:cd:92:2b:89:84:b7:22:9a:09:12:83:b4:
37:3f:2b:fb:30:8f:33:34:dc:5e:fd:1b:30:9b:67:bf:54:a6:
cd:a4:5a:06:0b:13:1c:3e:fe:54:58:74:24:13:b6:8f:6c:d1:
4a:65:3b:7f:7a:73:96:92:9b:12:e3:b7:83:72:1b:53:b6:42:
27:13:9f:d7:80:81:e2:fa:00:5e:5d:26:95:5b:af:30:71:90:
19:e3:66:cc:a9:73:2c:88:06:11:8d:c5:10:c5:79:f8:88:7f:
ac:38:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:46 2025 by rpki-client