Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
File: giapl0ECulgiFxiL5tSdh3bTvrs.mft (raw, json)
Hash identifier: C81wCSRdr9GpJL8BP9kz5D1PMz8ZP/mBZWb+zgjlo9I=
Subject key identifier: 39:39:87:3A:4E:97:75:93:8C:B8:58:35:BD:9A:10:19:DB:0F:F4:74
Authority key identifier: 82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
Certificate issuer: /CN=8226a9974102ba582217188be6d49d8776d3bebb
Certificate serial: 0194BC3CA2F60171C0B6E468ADD9454D5619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
Manifest number: 131B
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: bHa5FimsimJ7r5ToFYrryDiB-9M.roa (hash: fOdUqsDSfmPIMyaQ7PWVxrcyqzptZELP3xikWCnwSh0=)
2: giapl0ECulgiFxiL5tSdh3bTvrs.crl (hash: 52Qm1U/EsdixjvNNpEfr3MeSPZ/RrttGkDhtLxeqaKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:f6:01:71:c0:b6:e4:68:ad:d9:45:4d:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8226a9974102ba582217188be6d49d8776d3bebb
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=3939873a4e9775938cb85835bd9a1019db0ff474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:48:af:ee:88:15:14:e9:9c:77:2a:91:62:
22:88:8e:3d:37:75:fa:ed:5f:88:1a:18:3d:98:6e:
40:d2:51:89:87:55:12:dc:b6:03:84:7d:76:db:a8:
1d:d6:65:43:86:24:45:8d:26:bc:a2:94:ae:e9:0b:
f4:15:c8:e4:27:1c:e3:0b:0b:99:93:45:9e:7b:70:
85:02:9d:7a:5a:2c:0d:59:06:fe:61:14:4a:86:b8:
49:4c:1a:f0:03:30:cf:7f:cf:53:a9:15:70:f6:8e:
8b:1e:4a:49:0d:a5:4f:9d:5a:3e:15:0f:0b:56:7c:
43:d4:71:f2:1d:4e:32:23:3d:34:96:12:6b:9a:c2:
d4:3b:7d:65:9e:ef:af:5e:69:ef:8c:66:9e:bb:4e:
cc:c0:66:0d:33:e0:30:68:d6:b8:3a:78:40:25:72:
aa:f4:f7:3d:ba:de:3c:66:25:97:fe:06:67:87:8e:
ad:62:24:b7:24:00:6f:e2:1f:8b:ab:94:40:c7:3d:
27:84:93:2a:63:37:c1:76:67:8a:42:16:57:8c:05:
a4:2d:3a:9a:32:54:db:97:1e:0f:37:dd:f5:d4:08:
bb:67:a3:41:8c:01:39:d6:5b:38:fb:1c:dd:14:9a:
c8:5f:84:82:6e:8a:32:b5:31:d8:37:e6:ca:e3:d6:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:87:3A:4E:97:75:93:8C:B8:58:35:BD:9A:10:19:DB:0F:F4:74
X509v3 Authority Key Identifier:
keyid:82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d9:7b:e6:0a:8f:30:71:e2:f3:fe:2e:4e:a4:03:c6:64:e1:
27:49:cb:f2:05:b9:68:80:2c:85:9e:cb:2b:18:a2:71:d1:de:
d6:29:39:70:ab:98:d9:8a:55:44:81:99:0b:1b:db:44:1f:5d:
70:13:bc:b8:35:9a:79:e6:5d:7f:69:18:b4:b9:9c:49:58:fc:
c3:80:72:75:39:0b:bc:98:0f:e1:28:f6:41:25:11:a2:4a:48:
30:c5:1d:53:c3:56:64:84:b7:97:55:c7:87:8e:4d:6a:00:1f:
e0:51:6d:fe:2a:9f:63:14:af:7d:69:09:6e:47:fd:8e:26:aa:
bb:dc:ad:d2:a6:e0:ec:e7:b3:f9:5d:1b:e4:95:af:3f:69:57:
17:33:1a:35:9a:ac:26:d0:d2:99:c8:2f:d1:4f:a8:b0:b5:0c:
4b:68:8b:47:8f:fd:ce:0e:0c:ae:64:3a:5f:f6:09:7b:8c:03:
fd:1f:6d:26:87:40:84:20:08:aa:45:7c:9b:e8:4a:ab:c0:da:
27:5a:c6:d1:c2:5d:86:b3:20:b1:9a:b1:d0:40:4f:17:e6:72:
f0:99:6c:bb:a0:ea:94:bd:d0:60:85:8e:3a:45:59:d6:21:60:
78:e8:e3:94:38:83:b8:05:9f:1a:72:78:4c:b0:bd:68:85:bd:
b1:f3:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:44 2025 by rpki-client