Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: Q2M+8EZN13xuXaKzccVGUTIDuqHIAPkTSjzCG2nYrow=
Subject key identifier: 0A:5A:0D:C6:AB:4E:D7:49:56:31:10:F4:2E:95:26:BA:02:19:1D:B0
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 0194BBCEFA5699C9C91534FFB3776934A521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: j5UdL65AOE/DlZ2ir0v/OIHG6z9NhEDwjLom7WnoTD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fa:56:99:c9:c9:15:34:ff:b3:77:69:34:a5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=0a5a0dc6ab4ed749563110f42e9526ba02191db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:e7:7f:53:75:6c:4b:d8:c5:a9:53:0c:0f:
55:c3:91:b6:19:40:bc:b9:1b:34:8a:a7:53:1f:8f:
0f:ba:68:9c:10:dd:3a:f0:d3:7d:d5:33:95:05:2d:
2b:ba:5f:ba:dc:6f:42:86:37:1f:fd:aa:89:fa:7f:
5c:33:72:cd:e9:65:1c:59:a5:2a:13:73:09:84:c6:
3e:49:9a:e1:c1:27:5f:55:0b:c2:fa:4e:bb:c0:0f:
da:43:94:97:c3:68:86:f6:9d:04:ec:5e:87:8f:97:
d9:d8:ca:de:06:f4:08:30:64:d2:df:19:b1:b2:22:
c5:8d:a3:29:14:1d:07:fc:1e:45:25:55:80:c7:1c:
bd:e2:78:d0:e7:22:0e:a9:74:81:9a:56:29:2b:ba:
48:ef:3e:af:ba:8b:f6:24:47:69:7e:cb:c7:ed:14:
db:57:89:63:15:45:b1:9e:b3:34:32:b1:2f:df:0f:
63:b0:8e:ec:c8:8f:45:b9:6c:0c:63:45:bb:b1:a0:
f3:bf:7c:fa:31:9f:46:c4:29:52:02:0b:50:36:7b:
89:ac:d5:77:50:e3:86:bd:13:8e:87:93:39:96:c4:
c5:17:f1:c8:71:bf:e3:cd:e4:64:b6:a9:b0:09:cf:
4f:99:8a:c1:b5:9b:9c:c0:92:cf:9e:50:ef:90:9e:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5A:0D:C6:AB:4E:D7:49:56:31:10:F4:2E:95:26:BA:02:19:1D:B0
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:da:45:84:4c:a9:74:a6:c9:82:c1:3d:34:af:31:7e:62:
66:ca:c2:0d:48:e5:1f:18:44:e7:c9:7f:f4:e6:7c:24:d6:6b:
8b:54:f3:b2:93:1e:e7:1b:cb:1c:6e:20:15:d7:a7:de:6a:dc:
6e:e7:47:36:62:14:1e:bb:80:43:dd:7b:80:65:66:aa:10:c3:
0a:4c:f0:c7:85:0f:c1:f9:93:89:6e:dc:28:5c:17:79:55:82:
c4:f5:c5:71:10:40:2c:06:0e:06:0d:e1:04:ec:2a:2e:16:8b:
65:a8:4f:39:e9:40:45:fb:1f:b9:5d:aa:61:fb:c5:67:a5:c7:
ca:58:be:7e:e5:5f:93:ac:3b:c8:35:c7:4c:68:af:1d:f0:1e:
b8:1d:86:18:25:8f:d5:d9:6c:a5:8d:7b:f8:84:dc:07:3c:fe:
83:03:2a:5e:16:b6:09:ce:ce:f0:65:ea:dc:83:06:26:55:c2:
14:d7:9f:ad:b8:fe:25:9c:b9:e5:b6:4f:bc:a8:50:55:67:29:
71:1b:d9:16:9c:a6:ee:12:6b:d3:2f:e1:ad:38:83:94:51:55:
57:91:11:12:9d:a2:29:59:a1:5c:1f:82:c1:c3:e4:5f:16:e8:
01:48:84:ae:4b:54:03:2f:eb:c8:f3:41:e9:fa:18:da:2c:0d:
be:6b:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:01 2025 by rpki-client