Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File: GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier: Sg0OgR51dzVrViM/dH9+256QAuEvx7XMb9d+JOUk07I=
Subject key identifier: 5A:53:05:E8:1C:1B:27:3C:6B:BE:FE:90:83:A3:DD:10:D1:88:21:9A
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 0194BD174B1D728D9AF002E2583A52D320C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number: 0D02
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=)
2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: 0gm23p39qoF8p9CAOyoIEl170pOigwPuyd8cjF+iD5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4b:1d:72:8d:9a:f0:02:e2:58:3a:52:d3:20:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=5a5305e81c1b273c6bbefe9083a3dd10d188219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:c3:39:23:13:2c:95:8e:fc:c3:46:32:09:
f2:44:11:bc:29:9f:67:e4:a7:c3:18:bf:49:f0:25:
96:5e:4a:37:a1:a8:61:80:d3:3e:0b:bd:3f:5c:31:
ac:79:3a:9f:49:ea:fc:fc:4c:99:67:4b:f4:4c:2e:
50:ae:b0:66:7c:75:bc:ce:d1:03:4d:f9:0f:2b:dd:
c3:90:8f:eb:84:35:1d:82:1c:2f:7c:a6:0b:41:db:
25:a3:95:37:76:f7:46:34:4e:d1:c4:20:bd:39:73:
1d:36:17:20:5d:7d:11:48:fd:e5:bc:74:fd:a1:b1:
67:70:4a:47:e7:69:dd:2f:73:e7:cb:96:66:4f:6e:
1a:75:ad:ce:bf:a0:d1:5c:d8:26:2c:74:a8:79:5e:
49:49:da:0c:64:d4:d4:21:1c:db:73:67:ff:78:e0:
87:2c:b6:b2:ca:07:aa:9a:36:12:ed:e6:96:ef:af:
bc:63:67:f6:3d:de:5e:3b:57:23:4c:66:4a:25:c4:
5b:b2:14:23:20:3b:09:35:62:39:d4:48:08:51:ea:
d5:2a:27:4c:de:60:63:88:1a:52:69:a3:a8:42:b5:
9d:a1:8e:ae:d7:07:36:21:bb:b0:96:52:40:23:46:
a4:cf:f1:9d:b3:19:1d:b3:e8:e7:6f:5a:c3:42:8e:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:05:E8:1C:1B:27:3C:6B:BE:FE:90:83:A3:DD:10:D1:88:21:9A
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:08:69:1d:0e:c3:50:a2:81:e6:61:60:fb:e8:d9:fd:7a:c8:
20:22:93:4d:c5:51:cc:11:a6:e8:64:09:7b:19:be:f9:0b:7d:
e9:54:e9:19:34:1f:dd:76:30:96:8b:ca:7d:d6:11:c6:92:84:
ae:f9:fa:37:cc:78:61:a7:ed:66:3c:a4:60:6d:3e:de:17:b4:
71:d3:73:e4:e3:05:ff:be:17:35:9d:d5:e2:c0:ef:cd:37:64:
2b:7e:02:d8:8e:f6:7d:b2:42:5a:ab:be:61:7d:79:82:61:b1:
99:21:85:c1:33:47:4c:7d:98:da:89:a2:30:35:4f:39:da:a4:
ed:30:df:af:3f:d5:3e:b3:3e:72:1d:1e:cb:d3:17:f4:ee:37:
47:75:2b:dd:c7:18:e2:55:e8:d9:f8:11:10:93:6a:f4:cc:31:
be:8f:7d:49:8f:9a:94:81:b0:19:04:47:f9:5e:1d:ef:11:12:
ba:06:1c:e4:50:8e:d0:ff:71:84:0c:84:a5:1d:71:ce:4d:45:
88:90:b0:13:c1:0e:82:f4:38:1f:5f:53:70:8d:7d:11:60:74:
66:06:81:00:c6:24:6a:db:76:7a:ed:3b:08:01:b3:7d:25:65:
13:45:e6:ee:ea:a0:db:8a:a8:1a:b1:ef:25:b7:5a:54:64:20:
71:41:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:07:01 2025 by rpki-client