Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: c+2xxWgLo+NJA1tbBnZ6g9aBNiP2cVGUScwhy/r95vs=
Subject key identifier: 5F:D2:54:07:4C:CA:93:49:2F:66:71:6A:A1:5B:93:C8:C5:23:D0:C7
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 0194BC3CA88D42596029413674DBF6FFFEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: O6jlXnQ8ft0nzyjawhTerUS/4es4ZSl0NGtjOQmJvhs=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a8:8d:42:59:60:29:41:36:74:db:f6:ff:fe:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=5fd254074cca93492f66716aa15b93c8c523d0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:59:f9:32:de:ee:84:88:59:55:a6:a4:7c:
96:a9:6a:eb:a1:5c:28:24:4a:3b:1c:bf:24:41:5c:
bf:46:fb:08:40:94:be:1f:67:25:17:28:f0:42:ef:
96:9c:2c:97:fd:60:b9:e6:df:51:db:66:5d:8f:ee:
f5:01:7d:93:94:08:e1:65:c0:00:4e:56:87:ac:ea:
04:ee:68:23:06:41:b4:ea:49:f1:69:56:7e:1e:c9:
9d:46:24:c8:a2:c1:d2:53:90:37:2e:09:7b:39:d4:
77:23:3d:6d:26:07:48:0e:28:ac:d9:74:e3:16:53:
b3:c0:34:ce:3d:9e:e9:61:4b:4f:b2:28:ff:2f:62:
45:db:09:19:45:4b:d9:d7:ec:6f:09:55:e4:16:82:
e7:03:56:79:36:3b:7c:80:98:9e:7f:1f:10:45:b2:
32:bf:b8:ef:51:e9:66:36:04:70:94:72:cb:3c:f0:
5d:8d:96:72:b4:df:a6:a6:13:27:a6:cf:5b:1b:c3:
d8:92:9d:04:65:a0:be:74:b2:01:63:bf:1f:fd:c5:
83:ae:35:e2:38:8e:89:a2:ac:60:d4:21:b8:be:a9:
86:c9:6c:ff:97:32:f5:84:38:07:39:f7:f7:67:d7:
4f:4c:9f:77:af:ba:5f:1b:02:b2:df:ad:82:92:d4:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:54:07:4C:CA:93:49:2F:66:71:6A:A1:5B:93:C8:C5:23:D0:C7
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:65:b3:20:9c:00:7f:58:36:e7:09:df:32:51:30:3f:96:de:
fb:5e:b3:03:56:c2:de:81:17:07:83:49:f9:58:34:77:14:bd:
f6:8e:cd:03:8a:7d:b7:b3:ad:9b:94:34:56:64:c1:bf:56:7e:
05:77:3d:c3:4d:de:57:65:4e:34:be:fc:29:76:b4:cc:b9:b6:
0b:ae:75:11:ae:da:26:ec:89:97:20:ea:1e:4d:8c:af:6b:1d:
4f:a1:1c:85:fe:24:b6:4b:29:2b:96:fc:20:73:34:b6:62:ae:
ff:d2:aa:7d:c4:e1:2f:0e:df:13:bf:9e:0f:7f:fd:f8:12:fa:
27:78:d5:1b:9c:4e:6a:0d:c3:5f:1b:d2:99:65:c4:80:a8:e9:
c8:ff:ca:47:46:07:6f:71:74:d9:29:36:9d:37:a6:dc:51:d9:
aa:b0:ad:5c:42:f6:1c:9d:72:df:29:55:cf:ef:3a:39:10:7c:
fe:9f:e4:da:c5:a9:4a:2a:c3:fd:24:46:87:aa:a6:50:2e:b1:
57:af:d2:1f:00:48:9d:d3:a1:ac:b9:74:3e:03:75:a0:93:6a:
d7:6d:7e:a1:8b:da:ba:20:41:80:2a:34:91:a9:f7:36:f0:ea:
84:e7:03:96:a4:2e:92:8b:98:57:a5:06:03:0c:b2:2c:af:e6:
fa:00:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:29 2025 by rpki-client