Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: CBwN1jZU7qKSfbaA//8exi4ksMxbqsadiIXp5PCsnW4=
Subject key identifier: 30:52:7E:60:38:F2:1B:36:37:EE:F0:B5:C3:F3:85:BD:D1:62:4C:DB
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0193549BED1EC62F22A9A5D2909DBBE3416A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0825
Signing time: Fri 22 Nov 2024 16:02:05 +0000
Manifest this update: Fri 22 Nov 2024 16:02:05 +0000
Manifest next update: Sat 23 Nov 2024 16:02:05 +0000
Files and hashes: 1: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: evcjy4YinW4kPaNsVk4Uj8nXD88dOpFce1I7nv6ndag=)
2: kEvHJm0xfcE-udlLZ89zGNgT_kc.roa (hash: w5R84g1pG3aKju8NyF/T/+G95LogoPy1QwRnXWmFo/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:ed:1e:c6:2f:22:a9:a5:d2:90:9d:bb:e3:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Nov 22 16:02:05 2024 GMT
Not After : Nov 23 16:02:05 2024 GMT
Subject: CN=30527e6038f21b3637eef0b5c3f385bdd1624cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:0a:69:1b:f4:cc:29:2c:f4:86:d0:50:a4:
aa:9e:bc:64:7e:ef:16:24:f3:12:0c:07:4b:c4:ca:
33:9a:e7:31:a5:bd:80:45:c0:bb:2a:05:ea:8a:fd:
b6:b9:9e:34:62:12:3f:3e:e1:14:44:57:67:a8:81:
72:4b:63:5a:3c:eb:f5:18:ac:4f:f2:31:43:3e:1d:
26:24:79:06:b0:c6:50:22:82:bd:d3:94:d7:a8:59:
fc:16:82:05:96:32:6b:50:2b:de:7d:3a:ec:a6:db:
02:3d:d6:cc:8a:cf:bd:6e:67:0e:e8:b3:8c:0c:b2:
10:09:ba:d4:b4:65:29:91:4e:51:7e:9f:ca:75:d7:
f0:d6:02:b3:ce:33:80:05:b7:16:92:3b:81:9e:ed:
4b:22:38:98:b6:bb:ca:a2:c3:ba:6e:be:7c:d6:e0:
90:29:2f:22:c2:6d:82:41:72:2b:cd:72:3d:40:b6:
c2:fb:29:5e:4a:b0:8a:76:2e:b7:ec:35:27:8d:71:
b5:d3:38:56:c5:d8:a6:59:2f:aa:a0:14:78:d9:6a:
a1:d9:11:97:03:25:ad:18:d6:c1:a1:4e:97:cb:ef:
15:b4:7e:dc:19:3e:5c:2d:44:62:53:11:86:a3:d2:
f0:04:11:3f:2b:02:12:0e:22:52:c7:82:c3:2b:f0:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:52:7E:60:38:F2:1B:36:37:EE:F0:B5:C3:F3:85:BD:D1:62:4C:DB
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:16:78:38:e1:6c:d4:27:31:8a:fb:63:90:7b:33:7e:52:
f1:8b:e5:a5:c4:00:e6:61:bd:50:a4:fe:21:09:30:42:86:03:
5d:59:dc:fb:4c:08:5f:70:d7:cb:b0:f5:8a:1b:52:0b:2c:bd:
68:28:3b:06:d9:16:03:37:ba:5a:23:54:dd:24:1e:2f:df:78:
44:e1:69:cf:b3:a0:7d:2e:52:91:f1:74:84:13:81:53:a5:70:
64:51:d0:e1:a4:95:47:df:5e:af:0e:b8:4b:ac:1a:49:a8:3b:
82:5c:57:17:05:5b:1c:b7:66:bd:8a:27:1c:ce:a3:7d:9b:dc:
2c:48:50:48:45:6f:cf:f3:48:04:1f:49:16:e6:47:59:84:cc:
33:ad:5d:b8:c3:d1:02:de:70:3a:29:6d:41:44:13:96:23:ca:
fb:b4:8c:ed:61:99:a2:33:8b:e3:3f:25:eb:e7:1c:72:4d:ac:
7f:93:64:ed:fe:8c:62:29:db:78:61:6a:f3:9e:11:6a:86:67:
30:de:40:6a:c7:0b:eb:b3:2a:3d:b4:93:44:19:b7:a9:0b:e0:
80:64:ba:a4:58:43:1e:6f:c9:f2:a5:6c:f6:7f:4d:94:64:b2:
60:fb:82:e6:b2:df:66:1a:be:82:ee:eb:04:da:73:39:62:ea:
cb:78:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:52 2024 by rpki-client on console-fra.rpki-client.org