Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: +ZzqnQTGN+mqLxU7HtrYwJOeoKXVmrW2KNIcG54AvsQ=
Subject key identifier: 47:24:27:EA:79:22:5B:57:5D:3F:76:42:27:A1:49:4D:80:17:D3:61
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 0194BCAA1BEA8930E16B85A0A607FF5B9109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0982
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: GSGaag86LOH5ZPCySzk/cpu8j0Iu7/ZVtIDZXAufSQQ=)
2: PiONgyQtYCxtAKel6AwlToYS7WY.roa (hash: GhuVBG356WKiZheC0jkKfbw1tCMHk61qHlrUSlnDnIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:ea:89:30:e1:6b:85:a0:a6:07:ff:5b:91:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=472427ea79225b575d3f764227a1494d8017d361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:67:11:d0:23:99:04:9f:37:8f:1e:88:e8:
ca:e6:4a:b7:36:ef:1c:1e:af:f7:b1:c7:f1:31:36:
14:da:a6:d1:97:df:4e:05:97:71:70:e8:aa:ac:d4:
dd:cc:d4:2f:7f:0d:c9:e3:75:1d:4a:68:8a:c2:60:
e7:6d:07:c7:66:7e:7b:ae:5d:32:21:43:d7:b9:1e:
86:1d:8f:ef:84:7c:ac:ad:61:9d:c5:cb:02:16:e3:
56:7e:52:ef:ef:84:07:19:c1:73:04:0f:c0:63:ee:
bb:f3:e1:a9:1c:b5:f5:dd:db:44:96:2e:5e:a1:08:
6c:1e:cf:7f:d3:20:e2:45:58:6a:e8:32:72:28:c5:
dd:2e:af:fe:17:17:21:36:92:7d:e4:07:76:5a:b9:
ef:1e:5a:94:f8:30:16:fa:57:ce:14:ab:63:11:56:
0e:4f:97:a1:95:45:89:66:b9:26:0f:b0:3b:55:72:
46:18:f6:c0:0d:89:b2:64:57:c2:b2:7b:ce:a5:b7:
ff:67:1d:42:99:5d:71:2f:67:9a:e3:82:4f:3c:57:
93:40:87:64:ed:7c:c6:07:f5:65:b1:af:5f:25:bc:
f5:7e:bb:2d:ac:d6:82:ca:0a:23:6e:c5:87:2d:16:
13:1a:cf:aa:08:c7:73:cd:d2:2b:b4:db:9b:c4:4b:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:24:27:EA:79:22:5B:57:5D:3F:76:42:27:A1:49:4D:80:17:D3:61
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4b:6b:fd:a5:32:7c:e5:05:e8:83:2f:b2:53:e7:2e:ed:23:
47:fe:47:1f:71:fb:68:cd:81:d1:03:4b:51:52:a3:f9:b3:11:
74:fb:cc:e2:c1:6f:25:9a:40:6a:4d:7e:c2:f3:e5:b3:71:ca:
89:57:9b:8f:ad:a0:4a:4f:6f:0a:a6:78:36:7d:cc:a7:4f:40:
75:8c:8f:66:fe:cf:ad:c7:b1:ac:37:30:68:19:0c:e6:51:ed:
72:49:12:5e:98:f5:9f:bc:4c:ee:26:c8:75:92:62:a3:b4:55:
f6:9c:3f:81:93:7d:10:0f:42:81:7f:5b:01:26:a8:ff:7d:f8:
24:a9:0c:9e:3d:38:e3:51:2f:32:51:95:6d:38:84:ee:32:6a:
12:fe:d7:d0:18:32:75:60:ee:a1:bf:13:d1:7c:4f:24:11:eb:
3c:42:8a:21:ac:b8:2c:b1:ad:fd:7f:a9:d6:d9:12:0c:00:53:
f1:8b:65:6a:b4:c1:11:37:be:23:3b:f4:3b:ad:29:d3:68:c6:
21:b3:51:99:a7:8b:a5:9c:70:90:6c:b2:17:ba:b5:a1:42:9c:
65:cc:ad:5d:8e:0d:b4:27:78:32:8a:5f:b1:fa:e2:c0:66:ac:
74:3f:35:3c:b0:02:3a:b2:16:21:14:19:59:b1:0c:25:34:6c:
6e:0f:74:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:17 2025 by rpki-client