Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: OFCCB/16OyzJgpvZLY3UnWVtR8q3/HSODeRd6IVDVKU=
Subject key identifier: 09:50:EF:FC:39:50:8E:B0:D5:C9:6D:89:A9:F2:E4:7B:68:1D:7E:9C
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 0194BD859FC039AB88CC272C81B392FB9C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: AmpoRaTRffvBfrQa3Oz18lmHDIchzBfOFePNr6sulvU=)
2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9f:c0:39:ab:88:cc:27:2c:81:b3:92:fb:9c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=0950effc39508eb0d5c96d89a9f2e47b681d7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:cc:41:ba:dd:ae:b3:7c:0b:dc:0d:e3:6d:
d9:7d:9e:d2:4d:f2:b8:ad:3c:3f:19:f0:0e:ef:e3:
17:d6:56:c2:99:4c:cf:8d:29:b1:9b:92:37:3c:7a:
40:32:7a:a1:a5:12:8f:8e:1b:b0:45:03:df:66:25:
89:c8:ab:58:15:26:36:0b:d3:54:ec:e1:79:2b:b2:
fe:2c:1c:2e:df:e6:5e:c0:49:6c:7a:aa:b6:7b:0b:
1c:b5:f7:02:99:56:75:3a:04:6a:24:36:07:db:0e:
f8:a6:e0:c3:0b:ed:ab:1a:42:00:dd:df:43:17:3d:
c2:43:bc:97:30:f5:07:5a:26:d8:c5:ed:2b:cb:fe:
84:c9:82:59:81:bc:69:b8:78:64:e6:bd:81:19:a2:
45:04:f0:5e:ef:2d:dc:a1:7f:a2:01:a6:7b:40:72:
bd:15:3a:16:fc:fc:0a:da:5a:ad:8f:77:b2:f4:ba:
1a:0e:88:ad:1f:5c:e4:78:97:f2:55:05:93:94:2f:
75:6e:da:57:b5:5e:8e:49:ea:9d:e2:f1:4e:85:de:
81:69:92:2c:b3:65:a3:e5:fb:ec:04:7b:3c:91:15:
05:9f:d0:74:7a:51:c9:20:40:7f:f1:d3:1e:3b:c0:
79:a5:b3:eb:41:6a:2f:43:60:46:f1:73:6c:c6:82:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:50:EF:FC:39:50:8E:B0:D5:C9:6D:89:A9:F2:E4:7B:68:1D:7E:9C
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c0:23:77:ac:53:3b:be:c6:ca:5f:a7:88:ce:97:30:ab:79:
f2:1e:b2:6a:79:77:b1:f2:90:03:3a:32:f3:da:9c:62:58:cd:
e9:24:b9:85:ca:e2:2b:38:ad:e2:ff:82:62:ac:89:fd:a6:b1:
24:a6:d9:bc:65:17:6f:55:35:96:e5:62:63:00:54:a3:92:02:
87:a2:10:d5:6b:61:40:d2:1b:8d:06:42:cb:c3:b1:79:af:cc:
38:fd:a4:30:a6:cb:87:54:41:eb:6d:a6:42:e7:c1:00:8e:59:
92:96:d9:8c:c1:80:95:27:bf:34:a3:24:5c:63:e1:5f:76:12:
9b:ca:69:71:15:da:2a:68:db:4d:6b:e2:8b:c2:e9:c7:29:22:
5c:e5:4f:6a:a0:cf:65:42:b2:82:ef:2e:ab:b1:63:1f:b0:99:
0d:6e:de:b6:da:31:01:19:5e:58:c2:66:64:2a:8c:46:71:5e:
79:f5:ac:e2:06:a7:da:21:67:22:65:fe:d8:e3:48:d9:8c:f2:
0f:1b:de:d4:2c:09:b8:4e:ba:f9:2f:6e:45:9a:eb:66:0f:18:
fe:d4:a4:5c:90:2d:15:7d:8a:8a:58:99:6b:48:9d:e6:d8:62:
bb:bc:71:96:82:1d:6a:85:85:e5:6d:0b:86:b6:64:9d:d3:06:
69:be:c2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:27 2025 by rpki-client