Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: EaixlBabevh6PCdvYs6Py6l3bu0cPVM6GyRpeMyOi/E=
Subject key identifier: 61:92:90:5A:F7:07:FA:85:32:D5:61:58:92:CC:86:F8:22:C6:A6:91
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 0194BBCE1AFCA581BBEC06C94B97CEEA864E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0BC5
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: JR2FzVrx4Yy+/VmpeBaYhf/9evZj/QwR+7E16tzMDpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1a:fc:a5:81:bb:ec:06:c9:4b:97:ce:ea:86:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=6192905af707fa8532d5615892cc86f822c6a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:10:7e:1e:86:17:b5:e3:18:c1:2c:b9:58:
c2:d0:0e:35:5d:81:62:7e:85:85:ba:01:52:d1:23:
09:b6:99:21:cf:77:d9:4b:31:b4:5f:32:b2:a2:05:
ee:5d:36:de:78:5a:47:16:68:bf:d8:60:98:4d:1b:
9b:3a:15:55:dd:c5:b1:e7:56:5d:6e:48:a4:79:c6:
f2:76:df:81:8d:11:ea:a0:7e:6b:fa:66:d7:38:ed:
01:0a:f3:b6:4c:d3:73:68:50:94:e0:c6:64:fc:ca:
e2:68:b1:18:3e:2a:b1:2f:e0:11:a8:03:9e:bb:5f:
fd:8d:c9:cf:14:42:33:00:6f:fd:14:d0:1e:19:43:
d9:d0:77:25:b0:5c:bb:37:31:02:1f:0a:1f:43:8a:
5d:9a:e6:ff:2a:b3:d0:d0:53:64:cb:be:9a:34:0a:
36:f4:04:3d:22:17:17:fa:bc:9c:74:21:32:aa:2f:
58:f3:5b:84:02:2c:aa:4d:75:02:71:a0:83:dd:e1:
f0:0a:61:21:6d:e6:eb:a0:4b:35:68:1f:82:42:89:
7a:70:0a:d2:32:58:dd:47:2c:56:0e:95:7a:4f:3c:
82:8f:ec:0e:07:3f:01:8c:60:2f:7a:bb:42:e3:42:
91:0c:89:d8:e9:5d:54:f9:20:20:73:4d:2c:4e:e7:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:90:5A:F7:07:FA:85:32:D5:61:58:92:CC:86:F8:22:C6:A6:91
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e8:a7:46:3c:73:09:96:65:35:d1:d2:f6:9a:41:f5:d6:e2:
36:36:f7:d5:60:d4:1c:cb:5b:d7:bc:e0:65:15:4c:7d:71:e5:
80:f3:a0:50:5d:32:6c:c2:82:de:b0:b6:6a:6b:9b:8b:1d:9f:
f4:29:15:94:59:e3:95:20:c1:d8:fd:27:3e:61:3f:1f:f9:fd:
61:5e:06:b5:f4:97:dc:30:9a:2d:4e:40:e1:c8:5f:60:63:7f:
9e:70:22:ec:12:59:39:f6:5e:e2:51:c6:8a:89:93:0d:a4:fe:
56:1c:52:b4:01:b9:40:79:ae:71:b6:7e:11:fd:ba:11:1e:7d:
a8:a8:41:a6:13:41:66:54:4a:f3:9b:16:c6:15:f5:7b:4a:94:
a2:b0:00:90:4e:c5:a0:1b:f4:ac:7c:b9:8f:b6:6f:7a:1b:2b:
5a:09:22:ba:63:26:c8:c0:aa:bc:47:38:50:83:d6:7b:30:41:
c1:10:6b:25:dc:2d:c1:57:1b:42:be:8b:15:09:18:ec:54:00:
fa:9e:84:6a:1f:c1:b8:35:9b:cd:01:e6:6a:75:af:37:f0:89:
f5:05:c2:b2:2b:c8:ca:56:f5:3c:5b:d3:52:0e:2d:f7:06:ef:
e3:32:42:86:2e:a5:8a:97:c6:cd:46:97:76:a6:21:15:b8:e6:
ce:5a:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:31 2025 by rpki-client