Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: aSyyGNNR9EW7bZs3xDeYILz8DmuSK9783LwZvfWEWB8=
Subject key identifier: 20:32:8F:DE:65:84:F7:82:39:CC:E3:1C:C1:52:A7:B0:43:17:BA:ED
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 0194BC04C42967F1649B5B3DCF4E3FBA9F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0127
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: Gu1VfmEwwWGyyu8mUifUt3Et1aU.roa (hash: HigRll08o/Aqm4OTZp77tT+XoPqn533WGHlSSBF902U=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: BijqFR67lHEZRmXh92nQ7uKv5RXKTDTm6UUbhjeetJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c4:29:67:f1:64:9b:5b:3d:cf:4e:3f:ba:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=20328fde6584f78239cce31cc152a7b04317baed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:52:40:b1:ee:e9:52:67:72:59:43:57:6e:
ec:51:0b:71:58:00:6b:e1:40:17:df:ff:57:7c:6d:
86:1d:61:a6:e1:10:fa:07:30:a2:ff:dd:29:ab:7b:
aa:58:1b:f0:58:a9:40:0a:31:a1:ac:ee:6d:c6:09:
89:96:c4:4d:98:14:f4:ff:ed:55:13:0b:0f:06:52:
da:36:de:99:f8:21:e2:d2:39:63:e8:f8:27:6f:0c:
4e:36:0a:9d:7a:51:62:af:8d:55:93:24:0a:82:65:
da:67:1d:b9:27:ac:cd:91:92:e5:c9:ee:e7:79:7d:
d6:9d:67:21:1c:4a:f4:b4:18:26:2a:de:9e:5c:61:
58:9d:a6:c8:39:f2:b8:ea:38:c6:ef:3a:ee:ef:cf:
68:6b:57:38:05:97:18:2e:ae:e1:a3:db:98:16:db:
41:e4:24:55:13:7e:b6:31:57:95:28:8c:3b:b6:32:
e6:8b:ca:21:49:a1:3b:37:1d:db:4a:0c:43:38:bd:
1d:05:3e:07:e6:75:8e:e2:74:33:8f:15:86:b0:a5:
f4:2f:78:8e:42:94:34:19:5e:8e:f6:fb:28:62:a2:
53:69:7b:d7:94:25:01:9b:90:12:49:4d:33:71:9a:
78:3b:94:20:2e:19:76:69:3a:bc:64:2c:7f:8a:b5:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:8F:DE:65:84:F7:82:39:CC:E3:1C:C1:52:A7:B0:43:17:BA:ED
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:40:75:ce:d3:66:68:59:fe:85:21:cc:88:03:05:15:e9:
31:41:46:45:53:e7:ff:d0:10:44:ae:e1:1f:12:d7:97:02:ca:
9b:cc:b6:79:9f:7d:15:a3:21:07:05:ba:6b:50:53:95:65:f4:
db:bc:8e:15:60:1b:14:bb:b8:33:ba:15:c4:f1:f7:12:7f:be:
ab:54:df:f1:b8:af:85:20:92:ce:b4:ed:b7:b0:ba:18:bc:c0:
30:ae:b4:7a:5d:6f:7c:4e:ae:52:37:93:82:ae:11:3b:9a:57:
d2:92:2f:69:32:89:fe:e3:8f:29:60:13:87:20:b1:89:1b:c6:
e2:fd:31:5b:e9:2f:bf:fe:1f:2b:70:a9:40:99:1f:23:25:4a:
12:30:1b:4d:23:78:76:c6:9e:e5:44:b4:58:0a:91:e0:af:ab:
0b:e5:6b:c2:73:03:63:f0:30:4d:4b:ae:e6:f0:f1:4f:eb:1f:
09:61:53:06:ca:18:31:67:b6:13:4d:0d:a3:5d:0e:d0:4e:1a:
0a:a7:dd:4e:03:bf:ea:f2:13:0a:3f:8f:df:3c:8a:96:b8:ba:
cb:4e:6a:58:43:7e:7f:35:df:ae:33:5e:92:f3:22:24:96:31:
08:28:b2:c0:3e:c0:81:53:4a:eb:53:18:34:05:83:ab:94:14:
bc:6c:5b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:31:31 2025 by rpki-client