Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft
File: gq-w1o12dTGQWAttfVTLTGJnS0o.mft (raw, json)
Hash identifier: 4f9twzUmaHo0p7zeh/JNGrD/lAS1CpFJBLBQNQ1LhcU=
Subject key identifier: 82:B9:00:9C:DC:61:B7:C1:70:6D:EC:FF:25:76:F5:57:9F:26:3C:4D
Authority key identifier: 82:AF:B0:D6:8D:76:75:31:90:58:0B:6D:7D:54:CB:4C:62:67:4B:4A
Certificate issuer: /CN=82afb0d68d76753190580b6d7d54cb4c62674b4a
Certificate serial: 0194B9DFB7084B0721CB59396C86D5FDA193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq-w1o12dTGQWAttfVTLTGJnS0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft
Manifest number: 060E
Signing time: Fri 31 Jan 2025 01:00:33 +0000
Manifest this update: Fri 31 Jan 2025 01:00:33 +0000
Manifest next update: Sat 01 Feb 2025 01:00:33 +0000
Files and hashes: 1: gq-w1o12dTGQWAttfVTLTGJnS0o.crl (hash: wrcobH32c183nFmQ9ijgnXRVjfEe8tkr5wki0V2FUlE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:df:b7:08:4b:07:21:cb:59:39:6c:86:d5:fd:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82afb0d68d76753190580b6d7d54cb4c62674b4a
Validity
Not Before: Jan 31 01:00:33 2025 GMT
Not After : Feb 1 01:00:33 2025 GMT
Subject: CN=82b9009cdc61b7c1706decff2576f5579f263c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:ee:00:d0:a9:2f:74:43:1e:f5:c7:ff:35:
cd:f1:a3:c6:dc:86:72:57:be:30:dd:b7:6d:20:d8:
0c:e5:6f:9b:5e:a5:07:70:39:26:7f:e0:da:0f:51:
a0:46:f7:35:ee:a7:1f:4e:06:3a:d5:bf:56:63:cb:
1e:3c:d7:02:92:f1:2c:52:a3:a8:22:ec:59:f7:3f:
31:2d:f3:de:10:6d:2f:77:da:d2:9a:73:e9:65:1a:
9e:78:5b:7e:6e:2e:56:dc:3a:ed:4b:c1:29:93:79:
c3:01:f9:06:de:92:e0:76:8e:4a:c9:f0:6b:a1:65:
20:47:4e:eb:45:f4:b5:23:6f:25:99:df:21:7a:05:
14:70:7d:f5:ec:1f:78:c9:01:7a:21:f6:8f:2c:8f:
b1:21:f6:e0:39:77:bf:68:e4:e1:74:69:ae:01:30:
e5:42:f2:f5:c1:c1:de:ec:ee:48:c6:68:54:21:31:
ea:fd:80:b1:a2:78:71:ff:79:eb:e6:38:09:6b:86:
b7:32:a4:d0:ef:08:8a:12:c3:b5:24:4c:10:28:45:
9a:a5:22:9e:a7:a1:ac:a0:a2:49:8e:fa:18:02:d5:
ac:e4:84:a0:37:2b:7d:a9:0f:6f:a8:5a:79:56:92:
71:58:86:31:5b:6f:16:8d:c1:50:06:a5:a7:a4:5f:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B9:00:9C:DC:61:B7:C1:70:6D:EC:FF:25:76:F5:57:9F:26:3C:4D
X509v3 Authority Key Identifier:
keyid:82:AF:B0:D6:8D:76:75:31:90:58:0B:6D:7D:54:CB:4C:62:67:4B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq-w1o12dTGQWAttfVTLTGJnS0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4d:40:cf:e9:30:d2:28:53:5d:b9:d4:2a:23:04:4a:d4:4d:
bd:c8:54:1a:6b:39:9a:28:83:07:6a:f4:42:09:79:75:6d:fa:
71:f8:8d:91:72:21:b0:ea:94:3c:16:b6:51:52:10:82:b4:5c:
71:58:02:78:80:be:a9:f9:b5:f3:cf:e2:52:42:f8:a0:ec:cd:
4d:b6:56:c0:69:aa:2e:23:2d:d2:03:26:11:59:02:a1:57:8f:
fe:a9:40:3c:4a:53:e0:83:b1:51:32:21:f5:4b:d6:a8:ee:0c:
ce:99:cf:cc:eb:a4:86:69:73:dc:95:91:13:fa:2d:41:3e:84:
25:94:b2:99:b8:d4:7f:ae:85:46:b4:b6:07:b2:82:6c:eb:4b:
52:a3:09:44:c8:74:8a:a3:02:6e:2e:3f:d8:a5:31:77:8a:c4:
b0:96:f9:6d:17:59:c9:5c:9f:07:0d:5b:76:5d:e8:e3:98:ba:
8c:04:97:93:de:b8:35:b3:e8:1c:31:15:3d:75:13:56:d4:2f:
a6:23:c4:e3:fa:03:b7:ac:23:24:0d:a9:6c:d7:b6:cd:6e:54:
a7:b5:f5:1c:e5:67:cd:c7:53:fa:7c:0f:63:3c:77:9a:11:5d:
f7:ab:1a:e1:27:4c:a4:0f:b7:d7:80:6a:2a:19:8c:b7:e7:56:
30:47:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:32 2025 by rpki-client