Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier: Pjom4LUIua67jmPJNcf7IkD/Sqxw9+BFUEycsV4I3DE=
Subject key identifier: E3:BD:95:1F:95:3E:01:A1:62:09:1A:EC:B1:E3:29:0B:0F:BD:6C:77
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 0194BC04C1B62D32BD42C3CA1AACCE80253F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number: 0AEB
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: 8ZiJdniq4CFimmiqvIpe93wZMTyit7PeHMOcTIu7+9w=)
2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c1:b6:2d:32:bd:42:c3:ca:1a:ac:ce:80:25:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=e3bd951f953e01a162091aecb1e3290b0fbd6c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:4e:10:16:a2:ee:0b:a5:f5:4c:12:34:2a:
30:9b:3f:64:6c:02:bf:f8:bb:6d:d6:a9:cd:00:0d:
51:30:c4:f2:f9:ed:b2:b2:66:7b:1f:f7:3f:be:78:
03:c0:bf:24:89:4d:87:f3:f1:0f:5b:67:d0:3a:07:
a1:75:f2:f0:ff:66:a5:cb:82:f7:05:d0:b4:b3:d0:
35:b3:86:61:eb:fb:e5:db:3e:0b:7a:10:57:80:40:
3e:6b:87:43:83:19:a4:79:f1:43:d9:3f:7a:03:b1:
23:9a:a9:c9:e2:0a:7f:1e:35:5e:5a:51:91:31:7b:
8e:32:ff:b4:8b:b6:f9:26:43:77:d7:bb:70:57:f5:
21:b3:ee:69:17:15:94:22:24:39:04:9e:03:06:99:
e0:52:c0:eb:c6:5d:7e:07:d9:91:61:a4:c4:f4:96:
84:5f:1e:19:1a:2c:4f:f8:52:bc:03:8f:4d:cd:66:
b1:f8:71:dc:7a:57:c7:9c:b8:05:2d:fc:98:0f:a5:
21:9f:05:41:b1:7f:8d:0b:6b:95:34:ae:8e:d7:be:
d5:50:7d:16:b5:68:13:78:63:90:5c:fe:b1:fe:fb:
95:4e:6f:6d:a0:f4:1f:3a:9f:41:ef:f9:75:53:08:
4b:3f:cd:56:54:50:ae:4d:59:92:61:6c:0d:26:86:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BD:95:1F:95:3E:01:A1:62:09:1A:EC:B1:E3:29:0B:0F:BD:6C:77
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a2:6f:bc:d4:1a:6e:bb:1d:3a:10:01:63:89:fc:75:80:ff:
8c:79:0e:7d:75:e8:a0:02:61:7e:96:b1:a4:96:ab:bb:1f:5b:
1b:a7:a5:d9:3d:f8:31:95:33:45:4c:b9:f0:ec:2f:6d:4e:a5:
b6:96:71:f4:e8:81:da:78:2d:8f:ff:e8:10:be:0e:dc:ac:0d:
61:b5:0d:fe:7f:81:f7:ff:4d:83:33:4a:6c:60:2e:6e:00:a0:
69:12:ae:aa:b4:0d:c7:67:d9:e8:89:14:77:21:7d:73:5b:2d:
1d:39:20:d0:00:04:8f:3a:de:92:65:57:c2:1b:9d:75:85:69:
bb:82:27:1f:14:5a:68:35:46:c7:c5:0d:ed:43:75:e8:cc:3c:
bd:52:f9:d5:16:38:73:46:10:eb:cb:01:aa:f9:82:09:8d:8b:
d6:8d:e6:ec:b6:8b:6f:5f:9e:42:08:95:f8:a3:d2:52:5b:35:
3a:d5:ec:95:a5:97:20:f4:5a:af:9e:b6:24:cc:e8:13:d6:e9:
28:55:5f:9c:57:52:2f:15:00:90:29:ef:eb:8a:4f:24:51:fd:
91:97:a2:fa:c7:fd:f5:02:2e:c1:b3:99:6f:f6:9d:a9:0e:7e:
25:75:87:6d:72:70:03:9d:29:9f:c9:ce:07:e6:52:8c:c6:08:
99:2b:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:19 2025 by rpki-client