Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: eI7qHr2RMIo92PJ+HZ9/v5li2ftX5z3iy1LM3+LTnn0=
Subject key identifier: 6E:70:17:55:E4:17:E0:58:6B:E6:CE:78:2B:1C:37:FC:49:0F:02:01
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 0194BC04FFF17BB433B2AEB43F89BD5F96DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 0701
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: C627mHW+nIOaswc7dYoLIcaf5lxvWKHaFK6aSyAaomg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:f1:7b:b4:33:b2:ae:b4:3f:89:bd:5f:96:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=6e701755e417e0586be6ce782b1c37fc490f0201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:9c:f0:a8:ef:24:18:86:be:60:cd:7c:ce:
3f:01:08:08:aa:f3:23:f4:da:b4:e9:c1:6c:3b:28:
b5:42:2e:5b:0b:6a:66:ae:4d:b7:8c:1b:19:39:64:
d4:1d:e8:72:2a:c2:eb:01:5e:d0:57:a0:f1:4e:e1:
9a:cd:d3:85:33:16:07:c4:05:59:02:80:f0:a9:fe:
c2:d7:e8:10:77:e7:fb:af:50:b7:41:eb:02:ab:a7:
49:7e:f6:91:13:76:f6:90:dc:90:eb:b5:52:8d:19:
fa:2f:7f:34:37:69:40:41:82:5a:7b:28:8b:db:d4:
0e:59:0d:78:a9:b8:85:ff:dc:db:b0:9d:de:9d:bb:
1a:6d:0a:04:6e:5c:a0:e9:31:7b:58:26:82:61:95:
dd:6c:69:80:3f:77:ba:f9:56:d2:96:35:96:c3:e2:
d6:f9:64:ac:6d:ce:17:d5:9d:65:6c:1f:4c:1b:8c:
91:3b:df:09:75:cf:74:3f:41:28:95:16:2a:91:23:
7b:6e:4d:86:a6:c2:de:52:2a:ac:d4:f2:04:dd:7f:
45:45:82:76:85:ad:d0:30:fc:25:44:f9:d3:78:fc:
6d:2b:55:70:19:36:e9:03:5c:5b:d5:77:3d:9e:9b:
8c:6e:2f:92:4d:20:77:a0:2c:8c:44:7a:57:15:9e:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:70:17:55:E4:17:E0:58:6B:E6:CE:78:2B:1C:37:FC:49:0F:02:01
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:69:3e:b6:24:3c:00:85:cb:2e:f0:04:02:49:d0:67:ca:7d:
c4:ef:ef:d6:b6:ac:bb:34:00:39:ab:b4:95:a6:1b:26:d6:0a:
76:ee:3e:6f:ac:e2:60:91:11:06:2e:2d:d0:81:0a:af:d7:6b:
c0:ec:aa:03:17:1b:bf:87:d8:ee:5f:b5:9a:a9:2d:f5:c3:11:
b3:a0:51:66:0b:b5:28:7d:b1:b1:2b:01:b9:77:bb:37:e5:fb:
e6:64:33:2e:6d:4c:dd:02:b4:5a:4d:e8:ae:db:d4:a7:91:e0:
3d:71:bf:01:de:96:e4:99:bd:f8:ae:ba:7e:8b:60:31:7f:84:
48:9a:12:40:e3:37:25:f7:41:b1:5f:8e:3b:aa:2c:b5:d2:67:
48:f3:ed:58:d6:13:e3:de:37:d5:04:56:4d:0e:de:1c:ad:c6:
84:e6:87:f9:cc:37:6c:76:cb:6e:25:0d:e2:35:74:0d:d3:82:
a2:a6:df:c2:ab:ac:50:90:b2:db:ba:83:a0:17:bd:b8:76:ce:
dd:99:56:98:7c:21:67:fb:29:c4:06:ed:0b:43:aa:96:d2:08:
ed:fd:ae:ea:66:29:d9:7e:97:17:74:c4:f3:64:b1:f0:9d:ed:
cc:e9:71:54:87:ab:9d:be:d6:f4:80:36:7e:95:ae:28:47:22:
50:af:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:32 2025 by rpki-client