Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: BT58OzwH6m8XK6idAI0P5PIZBrQQnF9hP32o9bELb6U=
Subject key identifier: A5:E0:B3:EF:B6:A3:C5:8C:8D:D5:75:33:A9:67:5F:E8:E1:49:15:D6
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 0194BC3C9C00F24864979785D19A42AAAB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: YXIEw2GOqxbCfJpdR5VTZ87BtPD+QTadUtKvNRpswyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9c:00:f2:48:64:97:97:85:d1:9a:42:aa:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=a5e0b3efb6a3c58c8dd57533a9675fe8e14915d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:da:e2:1a:0a:9e:fd:60:58:61:21:5d:88:
06:d8:ff:4d:36:68:e6:c0:fe:51:ca:89:38:9b:6a:
bc:0e:4d:48:31:fb:2e:0b:10:af:b7:b2:a2:40:09:
0a:a1:d2:b2:2b:78:2d:4b:9d:3c:ab:9d:54:da:f3:
4a:36:04:1e:66:87:a8:b7:53:80:32:3e:c0:76:f6:
85:cf:7b:73:c7:ad:ba:f6:ff:d0:2c:e7:8d:7b:e2:
41:c7:71:1a:ad:b8:3b:28:4f:5e:58:e8:32:7d:13:
72:0c:74:4a:65:af:1c:44:d2:17:80:f1:e6:ef:cc:
4f:39:78:ad:55:5c:ba:1d:39:7a:43:e8:9f:7d:66:
cc:77:d2:a6:a3:a9:73:3f:28:5a:b5:68:de:86:df:
4f:e5:58:30:b3:96:84:89:7c:47:67:f5:ac:8f:ca:
d3:dc:aa:da:69:20:d6:ec:00:ff:9f:ef:04:da:4e:
4b:49:60:6c:e9:52:80:05:0f:22:35:c5:4d:2e:60:
26:65:8b:ba:5b:5b:26:52:70:52:7d:5a:7c:20:25:
94:0c:d9:76:4a:20:85:b1:3e:68:b4:58:5b:ce:6c:
d5:69:c3:e9:1b:77:ea:ea:ad:da:98:04:b3:41:59:
ea:70:b5:f1:3e:e3:1d:a1:24:db:c6:29:ec:8b:e9:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E0:B3:EF:B6:A3:C5:8C:8D:D5:75:33:A9:67:5F:E8:E1:49:15:D6
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b6:0b:89:f9:3d:66:56:9a:b8:d9:42:69:7f:ed:f8:98:72:
4b:8f:3f:36:64:c7:e6:50:bc:ab:e3:59:24:e2:b5:77:cc:6c:
b9:02:cd:10:d5:cc:01:3e:12:6a:05:d7:ef:45:1c:33:2d:b8:
ae:a1:d9:d3:77:2b:16:02:49:21:a2:b7:9d:c0:6d:eb:12:3c:
be:70:6f:29:86:bb:b0:66:a6:49:a5:b3:b3:e4:61:bc:2d:d2:
08:6b:a3:f2:04:b2:6e:46:90:4e:fb:37:11:b5:35:97:5b:31:
ef:59:08:d1:6c:54:1b:5d:0e:61:64:9a:bb:82:ac:0c:6e:0b:
9a:0f:b0:ed:dd:d8:35:aa:e8:34:9d:36:e3:e9:78:bf:d0:ec:
51:13:91:36:b6:93:cd:97:14:ba:a5:cd:6e:de:1a:63:3a:23:
bd:b8:64:14:5a:3f:a7:98:48:0e:21:0a:70:d7:62:20:c5:f8:
98:2c:86:b5:e0:74:0b:05:0c:4c:82:b3:cd:7c:18:81:f8:46:
ae:76:f8:26:be:09:c7:46:62:ca:25:3c:35:77:e9:75:a0:fe:
94:b9:23:e2:c5:f9:9e:62:d2:20:9e:ec:f2:69:94:17:6f:db:
17:43:ac:70:cf:00:02:6a:a2:60:ed:b5:ab:d1:e9:42:bd:27:
bb:3a:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:01 2025 by rpki-client