Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File: GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier: JGB4BBl54bQq1I9iHRpuw5BiRWnlCWUE3sZVWL0Or28=
Subject key identifier: 5B:B6:7B:52:9E:2F:56:EE:10:9C:55:E5:2F:D0:87:2A:B9:5F:24:F1
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial: 0194BBCDB325AAAC43E82F3EA9BB4F4F33A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: k8bPvm5x5Iyev0SKDWVs212QvFJ/V8YpgWy57oTdkEE=)
3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b3:25:aa:ac:43:e8:2f:3e:a9:bb:4f:4f:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=5bb67b529e2f56ee109c55e52fd0872ab95f24f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:59:e6:f4:f8:ad:86:5a:71:7f:54:6f:24:
0b:c6:08:3f:c5:11:df:43:7a:99:80:45:a0:2b:b3:
a1:0c:16:6e:70:49:12:c8:3f:8a:1a:93:f6:28:23:
39:3b:45:6c:63:c7:ca:5c:f1:0f:2b:04:ea:1e:7a:
52:f5:41:d8:1c:1d:7a:9d:cf:6d:89:59:6e:39:9b:
61:c1:f9:e3:d0:fc:b4:2e:fa:39:ae:70:98:e7:e0:
d7:f7:57:cd:ad:20:d6:5d:fc:83:a8:d4:30:b3:08:
d8:fe:37:c1:62:16:d1:d5:2e:56:f3:5e:5f:c6:bc:
43:04:ce:5a:0d:04:67:37:cc:da:3a:91:9d:59:0e:
b0:20:9a:95:76:1a:97:b8:b9:07:e4:10:3a:4a:70:
95:e7:c6:6c:9c:94:5b:0b:45:86:c7:a4:b5:53:e8:
7e:6a:ba:cc:bd:f4:7f:07:ea:c0:92:91:a3:86:eb:
db:c2:c3:7d:37:4b:ce:14:a2:4f:fb:13:6b:fd:90:
ab:7a:f3:28:b6:62:ba:d0:48:e1:3b:68:b3:00:c8:
77:8c:9b:27:de:b9:10:b2:4f:4f:a3:98:ab:39:6f:
45:d0:5f:a7:0a:85:ce:96:54:18:c6:97:fe:8b:3e:
cf:e5:fe:7b:b1:db:31:69:66:c2:f3:fe:65:01:d8:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B6:7B:52:9E:2F:56:EE:10:9C:55:E5:2F:D0:87:2A:B9:5F:24:F1
X509v3 Authority Key Identifier:
keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b3:15:29:6f:15:03:16:e9:22:23:a1:e6:a5:0b:59:70:40:
42:2a:58:46:f8:d0:f5:6e:8e:bc:f0:72:29:3c:2d:3f:a7:97:
92:71:27:eb:84:9e:9e:cc:09:ea:bd:cb:c2:1b:9d:db:42:fe:
7b:0b:24:ed:b0:21:40:23:d0:55:1c:87:a2:19:8a:18:77:be:
c3:18:f2:ec:b3:2d:bd:aa:27:95:df:0f:bb:53:89:99:98:fc:
ae:89:f0:b9:b3:6c:9a:8a:a6:c6:bc:6a:32:8f:f1:65:5b:f4:
ac:c1:9f:cd:76:ae:64:ef:5c:74:9a:aa:60:62:f9:ab:72:f6:
58:c3:f1:85:8f:d1:2d:90:28:e4:d4:bd:d6:36:d2:96:b9:4f:
3c:b3:8e:4d:47:ca:90:48:8f:bc:cd:60:7d:dd:26:7b:84:9b:
c8:2b:fd:89:ff:37:17:36:6f:2e:a9:a7:e3:ed:88:60:4c:6e:
fa:32:91:94:f4:b6:4c:ad:9d:e0:84:44:4a:1d:23:58:6a:73:
9f:37:7c:01:dc:6c:fd:fc:87:0e:2d:33:d8:7b:70:54:17:61:
4d:33:de:76:b3:83:78:b5:54:3a:df:c0:c6:68:26:ae:7d:7c:
f3:bb:c5:2a:df:60:f1:0a:13:30:e7:30:75:dc:68:54:7b:d8:
d6:f9:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:05 2025 by rpki-client