Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
File: oev1TQKO5HZPYveK2HHb8CYih4g.mft (raw, json)
Hash identifier: O558x3hLRenQEBuHHTXOxg+2daS1XWfjz62LkdylZhs=
Subject key identifier: 3C:4A:D7:C2:08:3B:9B:B5:B8:38:2F:C4:2D:15:89:F3:BA:1F:E2:64
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial: 0194BC72B468838E937172D9123A6B9F1C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
Manifest number: 0174
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 0BmC-81HN_hGVStiVWyBsG7yPOQ.roa (hash: 1DBUkLbwQ3sH8OPXtfdrx6wa0RdQ3lqLVqMY8QCHCK8=)
2: 58QzCphRddJsBqi71H5oisOTtGM.roa (hash: K7oZA9oPzuB3kuDmCdohN1gPlNbeKKgYedD/MB4pxbM=)
3: K5VqopWIERNLlg6XYIHxbSMQwf8.roa (hash: 6CqhTE0o4WqNXO4cXlNrVv+QBipio9ZfLg1pbcvRhvU=)
4: Qt9hOGMkdfDH8ID_bHwfLmJlE60.roa (hash: ARZiY2rT8rE43lKmT9EIHjzaS4HpYkA+YcbbFMZTS4E=)
5: oev1TQKO5HZPYveK2HHb8CYih4g.crl (hash: nrdiDaoqt+2ykSBvmtAYEPpG2PYEpodSMvsdI5o50jA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:68:83:8e:93:71:72:d9:12:3a:6b:9f:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=3c4ad7c2083b9bb5b8382fc42d1589f3ba1fe264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:5d:71:7d:dd:59:8e:9c:ec:9b:e4:e1:a0:
e6:4c:57:36:42:ce:00:de:ce:ec:27:6d:e5:17:88:
50:9f:5d:63:47:5b:fd:63:d7:9a:89:0a:ab:cc:b2:
85:8d:9e:e9:90:78:98:ed:43:c2:d4:6e:ce:4f:06:
3b:85:f6:ad:33:fe:f4:f2:25:fa:70:79:1e:21:04:
ac:9d:a4:44:00:44:6e:49:27:7d:11:ab:e8:b4:5b:
27:bb:4a:9e:62:b4:5d:f9:c5:57:bc:21:24:e5:6e:
e8:84:10:f7:13:14:db:56:22:b0:db:7f:4c:95:d8:
dd:46:65:65:9e:ba:3c:8f:e5:e3:3c:b9:35:4f:2c:
c8:90:43:66:43:53:8e:e4:e6:77:21:19:a8:fd:2a:
a3:71:e4:95:75:bd:90:0b:0d:b0:ab:d2:2f:b4:54:
74:47:2a:a4:0a:0c:42:33:cc:df:d0:53:6c:8b:29:
70:33:31:a0:95:bb:cc:74:0f:34:b0:c1:7e:fe:cd:
3b:aa:ce:30:dc:56:e2:33:e9:55:db:af:25:f2:c0:
a0:17:b6:af:ce:b8:70:a9:95:50:d9:25:6e:18:04:
15:a1:20:b9:41:fc:4d:f0:89:e0:d6:06:37:6f:18:
b5:3f:eb:e9:a1:9d:b1:f3:3d:31:6e:a1:51:17:50:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:D7:C2:08:3B:9B:B5:B8:38:2F:C4:2D:15:89:F3:BA:1F:E2:64
X509v3 Authority Key Identifier:
keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:65:92:a6:4d:94:9c:e5:e1:3e:35:99:68:92:a3:49:c5:0b:
ea:47:30:09:cc:d2:9c:db:f4:02:bd:07:ab:66:b6:e7:93:62:
10:d3:7f:88:87:f5:8e:28:74:34:e5:87:cc:5e:7f:81:fe:e4:
6d:a4:be:dd:30:ad:03:b8:32:ae:0b:f5:52:7e:a1:1a:9d:fe:
08:06:b5:4f:33:a2:c9:c1:07:40:5b:85:92:32:a7:86:bb:34:
42:28:8a:10:63:24:6b:e5:e2:4f:36:5b:f8:60:78:97:41:7b:
8c:28:cb:66:0b:11:6b:00:56:9c:ad:6f:f5:d8:c4:b1:00:12:
53:a7:a7:6b:4a:95:83:79:51:d0:3a:46:f0:fe:0f:c4:43:87:
6e:34:3c:c9:17:f1:9d:26:1e:fb:97:b1:d2:b7:e1:d0:3c:f9:
11:15:a9:eb:51:ce:05:15:59:92:19:86:73:69:fc:aa:b9:84:
ce:9d:3c:8e:37:a3:a7:9c:8f:42:60:db:90:bc:ee:ad:83:b5:
60:9e:09:b5:f5:3e:7e:1d:a5:2b:61:c4:58:4a:26:c5:29:94:
b8:05:7a:c1:20:7b:18:99:60:0e:5f:ef:78:c0:b6:77:2d:81:
12:d8:41:f1:f0:11:9f:0c:17:8b:d0:31:98:2f:24:cf:47:95:
e4:fa:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:18 2025 by rpki-client