Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier: nrZ2KxcmcB4vPq3droTeVgjQ1SXnomySiLKPpWsjgRU=
Subject key identifier: 7E:69:0C:6B:CC:3E:F7:57:23:4A:D5:20:CD:74:6D:B9:B0:D9:D2:87
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 0194BCE0B5FA39D4002B7034EEBF618664E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: ENddU71AWsbfb-qIFVaxmAFw8qU.roa (hash: XIdLWvH5+lzPfcvEbUgIrNoDUrBQA7L4fLl6rSwliqY=)
2: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: 6RHQRBQAnG2SuRHbj6mHgd8UPwyHbrFXNrfEWX3x80g=)
3: Zq70FHMZD76_Gue3kDu809Jb-QQ.roa (hash: C35CxPCBZyY0sb6IH9wA6K1/eolcaHDQJDP8Tb7cqSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b5:fa:39:d4:00:2b:70:34:ee:bf:61:86:64:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=7e690c6bcc3ef757234ad520cd746db9b0d9d287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:b6:7a:0b:e6:f4:10:8a:cf:15:6c:97:bd:
bd:3a:9c:fd:da:bb:33:7b:fd:bd:b8:d6:eb:03:18:
ad:5c:b9:e0:05:43:cf:33:d7:3e:7b:70:c8:ab:2a:
50:6b:62:2d:00:aa:5a:53:eb:df:71:fb:1c:0d:77:
87:8c:64:8a:59:a0:3d:7c:cd:b1:8a:f3:6d:fe:4e:
89:95:cc:f0:da:a3:df:de:56:21:91:2c:b8:53:f5:
94:2e:e0:d0:72:30:b7:be:cb:74:03:45:1b:9b:4d:
0a:a1:2c:ce:7a:33:ac:ac:7c:8f:62:75:f0:df:3e:
32:fc:9a:fa:b7:e4:f8:e2:1a:e6:62:29:7a:dd:b9:
28:3e:e2:8d:a7:54:d0:ea:67:65:f6:6a:38:b4:65:
63:7e:a8:df:1b:4d:8d:ff:94:e1:ad:7c:59:42:e5:
34:52:0c:bf:91:01:38:a5:af:26:51:1f:a0:ac:bd:
28:0d:57:78:25:e9:89:0c:07:96:b4:6d:97:3a:89:
21:d8:92:5b:d0:0c:8f:d8:ca:82:16:a1:15:87:47:
55:7f:43:02:ae:e2:44:cc:b2:68:83:9d:96:cb:15:
72:80:79:41:7d:4e:7b:fc:2a:34:b1:83:a5:67:0f:
fb:be:e2:cf:37:f9:27:a9:5a:57:3d:0a:84:89:ca:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:69:0C:6B:CC:3E:F7:57:23:4A:D5:20:CD:74:6D:B9:B0:D9:D2:87
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:06:03:e4:aa:aa:49:31:4e:f5:46:1c:46:fb:45:8e:9d:75:
c9:79:38:d6:14:b7:5b:fb:85:9a:00:7d:f5:d6:5b:90:8a:8c:
a5:2c:0e:f5:60:4f:9c:7b:c7:38:bc:55:5c:31:25:d0:43:01:
d0:b7:ea:e4:70:97:60:e4:2f:0e:90:eb:aa:c4:5d:e5:e9:d9:
8d:bc:45:d5:de:4b:ee:ec:a8:7d:0f:2b:5f:dc:b4:e9:e9:8e:
30:08:4a:72:43:77:2a:8f:21:63:c1:3a:f9:2a:cf:df:4b:65:
57:32:f9:01:b5:14:7e:9a:c4:4c:fd:29:75:c2:14:ca:55:1d:
a9:d6:19:a0:90:0d:0c:67:dd:dd:64:28:c7:b3:ff:c5:c0:04:
3c:22:a5:4b:81:d5:a4:09:d4:9c:42:03:39:0f:e9:12:eb:7a:
69:d9:25:45:f1:66:49:ea:2d:ee:74:1e:b8:5b:fd:1b:fe:4f:
7e:1b:51:96:bf:a7:67:f8:d3:de:45:8e:f8:06:89:75:0c:d9:
bb:e1:55:17:06:d1:16:5f:d1:48:73:e5:26:c0:0a:fc:e8:fb:
5e:56:ab:87:28:f7:f1:6c:62:39:b4:1c:59:66:7f:32:f7:bc:
09:25:e8:3a:a9:d5:b9:f1:42:e4:68:0c:e5:be:62:9c:64:e2:
c2:bc:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:56:57 2025 by rpki-client