Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: c2n+W6mB4TNRd3jm8YWZW7vDUpRE4DMTXt/t5qv0FTU=
Subject key identifier: B2:74:E4:70:82:D0:78:61:C6:72:6B:17:F0:06:6D:1E:07:E9:5A:1F
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0194BD853355B8867007F11CDF317F9DCDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 08E0
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: TXIje64Dp6sZePCtm/sAHR6TvyXpbNruIMhtIk9ZLWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:33:55:b8:86:70:07:f1:1c:df:31:7f:9d:cd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=b274e47082d07861c6726b17f0066d1e07e95a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:4f:98:bc:d1:18:d2:d0:b4:91:82:ba:c3:
ee:e7:f2:ed:75:50:6a:c0:ef:49:9b:89:e8:e6:95:
db:ec:7a:f9:ee:84:a3:48:25:ef:e3:d9:57:8f:c9:
28:f2:a9:99:b3:40:5e:67:a5:90:58:53:dc:cc:dc:
d1:9c:d3:08:bc:7b:e1:8b:a3:f4:3b:1d:c2:e3:60:
74:85:7d:4f:49:9e:30:b6:00:10:cc:d9:af:28:1c:
f1:5e:63:a1:dd:71:87:26:0c:67:73:00:71:47:60:
54:6b:af:58:31:54:d7:a3:da:ce:25:4d:5b:7c:bd:
f9:72:c5:d2:d5:c6:f1:77:20:64:cb:e5:4d:8d:a1:
f9:62:9a:14:dc:d2:73:3c:ea:66:48:a7:8a:39:cd:
a8:dc:60:79:d4:15:39:fe:31:6d:bd:bd:35:0f:c0:
6f:cc:ba:1e:8f:fc:e9:0b:95:89:c8:44:8f:32:a0:
6a:0a:2c:63:6b:25:ec:6f:34:d7:5a:3b:e0:fc:2f:
03:60:24:c8:4a:fa:bc:3b:79:fa:3c:4c:6f:35:e8:
5f:3f:eb:fb:84:31:41:53:e4:de:93:0d:fd:9c:a1:
f9:12:d7:51:0e:f1:c9:b3:ec:99:b5:3e:2f:03:c0:
49:b7:d2:3e:0f:3a:98:7e:24:1e:f2:33:65:08:56:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:E4:70:82:D0:78:61:C6:72:6B:17:F0:06:6D:1E:07:E9:5A:1F
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7a:9e:b7:97:f7:75:ab:a5:56:76:42:7e:13:a7:21:ab:49:
41:a4:f1:f5:ae:b2:85:7e:1d:d1:d9:6a:65:b9:ff:1c:e1:eb:
77:8a:ec:c9:21:14:ff:f1:79:82:a3:22:3a:87:ad:42:32:9c:
20:17:38:66:3c:6e:60:55:00:b2:f9:4b:17:99:42:af:3b:6a:
1c:0b:c6:99:66:64:fb:fa:d6:9e:a1:6d:9f:ed:44:22:bb:9f:
b3:ec:10:85:0b:67:a4:ff:a8:f3:53:7f:a3:a4:40:21:36:11:
c5:7c:29:11:a5:b6:fb:a5:ca:30:b2:82:15:f9:d8:5f:fd:55:
6f:ad:f1:46:c1:14:3c:8a:88:4d:4a:6b:06:53:b8:2d:91:1f:
d5:2f:b1:0c:de:ef:94:7b:4f:91:85:e2:7b:34:a8:66:44:d3:
e2:0e:59:f8:13:f9:06:d4:4c:b4:e9:2a:3d:ec:9c:d7:f2:a0:
0f:3a:37:a5:a9:3f:c9:c6:58:dc:94:f4:4d:66:0a:c7:ef:2c:
ff:b6:3f:fb:ab:1c:40:91:f1:97:45:e2:9f:1e:fd:b1:d0:fd:
cf:d4:70:33:11:b0:fb:66:7b:02:69:08:80:ee:88:1d:63:cf:
44:1d:f8:73:f0:db:f4:ee:35:ff:f7:12:fd:3d:71:88:28:02:
8c:49:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:58 2025 by rpki-client