Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: Mz/ZxpJw1dDNGjZn5Qnj9JAAdF5CZA65iZns9m0mWaw=
Subject key identifier: CB:8B:C3:E6:CA:0B:43:98:C3:7E:95:22:12:A4:D1:CE:11:60:34:3E
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 0194BCE097A16FF776D3626C1FC2952830B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: ZE2li57w6o2mPM7AqISZSEh3cSTQ3uE0O7SoKINmJ9k=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:a1:6f:f7:76:d3:62:6c:1f:c2:95:28:30:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=cb8bc3e6ca0b4398c37e952212a4d1ce1160343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:38:de:1f:72:c3:91:02:e8:0e:41:d1:81:
a2:7f:30:50:91:92:70:2f:76:26:c6:46:d5:d1:1c:
be:fe:ff:ec:dd:e3:d6:6b:6f:39:e3:5e:ea:ed:67:
94:61:b9:0c:15:6f:23:f5:51:28:bc:54:7a:9f:dc:
12:a3:91:e2:7d:d6:80:85:38:91:fd:a7:34:a0:f4:
f3:db:95:be:44:09:f1:82:c1:12:72:55:88:27:ac:
3d:ea:eb:46:f9:fb:06:68:be:10:70:3c:4e:fc:43:
b9:9b:ac:e8:7d:5f:40:ff:08:fb:67:d8:45:55:98:
00:12:ac:51:13:eb:8e:b6:48:66:18:16:0c:72:3d:
aa:b3:57:69:ec:24:36:43:a1:a6:35:b9:c7:3b:e3:
43:03:5c:e4:45:f9:17:fa:03:c0:89:07:ca:67:2b:
a9:c1:51:4b:6f:94:a7:47:c8:ec:ad:f2:ba:96:96:
f7:89:70:11:28:8e:6c:e0:fd:24:0a:12:8d:c8:1f:
93:25:22:0c:93:df:57:02:b9:84:27:57:83:67:0d:
8c:e1:c7:f5:17:1d:a2:ff:d7:0c:af:c4:c8:43:1e:
d6:b4:46:9c:14:c3:82:ef:3a:dd:b2:09:1d:92:85:
71:36:43:6f:e0:d3:6c:72:2b:0e:94:eb:cd:70:5a:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8B:C3:E6:CA:0B:43:98:C3:7E:95:22:12:A4:D1:CE:11:60:34:3E
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e2:de:0f:ad:9d:9b:a7:20:80:13:af:46:14:8a:e6:b8:0d:
15:3b:69:21:24:ac:57:36:8e:fa:c5:60:a3:38:18:e2:7e:a4:
8d:7b:40:00:b9:7d:87:52:8a:40:0b:73:53:35:6f:5b:91:7d:
46:88:52:5b:bc:89:6e:ad:29:10:9c:86:cb:12:ab:73:e5:b9:
98:5a:75:b3:62:2a:0a:51:11:76:f0:29:8b:7e:2e:c6:d9:0a:
c8:77:73:bd:0b:c4:16:13:b8:cd:c2:bd:e0:6c:b3:05:3d:7b:
db:da:1c:68:72:b7:15:1f:6f:31:76:4c:47:f4:00:a2:9e:3e:
34:79:45:64:7c:96:fd:a8:1e:32:ed:71:22:67:9a:3d:30:fd:
be:2d:cd:0a:f4:e1:7b:1d:6b:b3:e0:c3:2b:11:a9:6a:ba:c0:
29:fe:9c:3c:37:46:bd:75:45:0a:f2:6c:40:a3:f0:5e:6e:c8:
51:e1:34:d0:c3:26:ed:c1:a4:aa:97:7c:34:aa:97:f5:c2:34:
b8:76:75:95:19:86:2b:44:d1:61:d8:66:a6:f8:1d:7a:b0:a7:
4a:e3:da:a7:1d:7c:07:c2:6c:d3:5a:03:b8:dc:1a:bc:6b:c3:
34:06:b0:b2:0c:7f:ec:a4:62:fc:45:94:38:c5:80:4f:7c:33:
27:2b:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:54 2025 by rpki-client