Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier: UXCB4jy9SuVtWiGUecT61QUI50E3jGnpUznFgYybkGE=
Subject key identifier: B5:CD:AF:E5:AD:CE:F2:04:FB:34:90:0D:EF:61:CA:65:CC:B0:97:12
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial: 0194BC732015CCE52961F62D081F64A0B256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number: 05D5
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: sBpR1EkYcyiI2hkKkLdRsafvEy3MRHDztqlXvMsvB1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:20:15:cc:e5:29:61:f6:2d:08:1f:64:a0:b2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=b5cdafe5adcef204fb34900def61ca65ccb09712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:04:41:cc:24:4d:2d:42:4e:10:07:5f:a5:
07:0e:99:97:05:39:46:f1:98:55:93:8b:12:90:1f:
de:b9:1d:f2:b5:1f:f2:71:10:70:b9:56:d8:fd:7b:
77:6b:87:80:04:8c:12:34:a8:79:f4:56:f0:06:9d:
be:6a:40:f4:72:be:e8:c2:e0:c3:f7:28:11:6a:81:
7d:4e:84:56:c1:a1:39:86:84:ed:c7:73:d8:da:e9:
b9:e2:48:f6:c2:21:12:25:23:bd:b5:f5:98:ff:5b:
55:55:e7:7c:b3:a2:cf:5f:ee:b8:55:a4:90:38:b0:
d6:32:7c:3d:e6:a3:19:24:87:78:0d:cc:08:b7:e6:
a0:83:d7:40:63:8a:30:a8:da:af:44:65:6c:70:f6:
e1:37:84:8f:ff:05:fc:be:bf:5a:7b:95:28:db:2b:
90:a3:5e:2b:5a:07:e4:ef:5a:3b:60:5c:b7:1a:7e:
38:6a:3e:81:18:5b:8f:59:48:b0:b0:38:bf:0d:fe:
0d:67:e7:bb:30:c9:ed:51:83:5b:25:26:3e:c3:5b:
aa:55:dc:ed:43:88:1a:af:b6:02:ea:09:3a:bc:2c:
17:9d:04:f8:6c:24:e2:cc:5c:08:89:ad:00:70:af:
36:97:c9:a6:b2:68:1e:f5:7e:82:42:dd:03:a6:41:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CD:AF:E5:AD:CE:F2:04:FB:34:90:0D:EF:61:CA:65:CC:B0:97:12
X509v3 Authority Key Identifier:
keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:01:e3:86:7f:5e:ba:64:74:3e:4e:d0:6f:38:e2:56:6d:68:
f2:bf:54:af:68:39:41:2b:d1:15:77:6b:99:ad:e0:3a:0d:81:
6a:6d:6d:c6:b0:38:6f:bd:77:cd:18:03:99:b9:00:da:e0:b7:
c0:72:b9:aa:bb:dc:5d:c6:86:8a:66:2a:37:58:ac:af:48:ff:
d6:73:60:6a:96:b4:f7:0b:ef:04:ac:12:ec:74:28:4e:51:49:
95:4a:46:f8:03:b2:af:99:78:1f:af:a2:80:a3:54:ca:a9:61:
6b:7d:33:e0:82:cb:20:f1:03:76:bf:58:d6:7c:30:aa:7a:50:
7f:64:31:03:1b:fc:62:c6:b9:fc:44:d8:3f:33:de:54:e3:17:
02:1d:82:b1:98:be:96:a8:16:cd:3d:b0:88:da:1a:7b:36:76:
c3:ef:38:2c:43:49:e7:ff:46:3d:07:b2:76:f1:84:76:55:ae:
38:de:be:66:79:86:9d:31:47:b0:3d:b1:4f:28:35:5b:07:eb:
4b:82:50:6e:72:15:17:1c:2d:64:39:d4:40:f3:f5:c3:24:c2:
ac:15:a6:19:a9:e8:3b:ad:4a:de:8a:03:02:7e:9c:7e:0e:e2:
c1:0a:74:8b:2f:70:f5:bf:25:18:1e:78:09:70:e1:3a:ec:7a:
e0:bb:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:26 2025 by rpki-client