Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: TTetMT0MhFmuPoZn9TDvwBBECjLEbnaTCSBX38VnJBA=
Subject key identifier: 50:6E:59:5A:39:80:64:0F:E0:EB:63:22:28:F8:35:AF:C7:B0:C5:23
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 0194BD858AFBC8CFA8658DDFEA3B8B0E6319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 0E07
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: AaUegSVoYFCBubTb6Pj8olZ6nVxKrMEA7hs4wCyMk/M=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8a:fb:c8:cf:a8:65:8d:df:ea:3b:8b:0e:63:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=506e595a3980640fe0eb632228f835afc7b0c523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:70:a7:7d:79:65:49:95:4a:e9:7c:ab:c8:
e7:70:13:3f:84:53:50:84:16:d0:28:7e:b0:a8:82:
04:59:13:2b:e5:11:40:82:19:b0:e3:0a:4f:cb:00:
df:63:99:2f:ed:bb:2a:5e:df:a5:62:5c:1e:53:3e:
e8:59:96:27:84:b2:3d:5d:2f:1e:05:20:93:da:39:
bd:c3:39:4b:17:b2:85:02:a8:1d:fe:50:5c:3c:27:
a3:33:63:51:f3:45:e2:3f:ef:8b:f0:ac:4a:42:c4:
be:e8:02:59:bf:89:e6:cd:69:cd:f7:2c:7f:13:c7:
ff:a8:39:ea:80:b2:15:3f:2b:68:76:40:f6:62:0b:
6a:d2:36:8c:14:1b:3b:23:6b:28:90:4a:22:6c:68:
b3:23:fe:ea:80:bd:e1:a5:e2:78:8f:09:b7:98:83:
41:45:61:1a:d7:e4:2b:65:ea:bf:4c:3b:b5:67:b8:
23:f7:ea:7f:b3:42:af:32:5d:53:40:6d:d5:80:78:
90:b5:bd:fe:94:f2:af:73:bf:fa:3c:78:89:ac:4d:
21:a7:0f:98:cd:72:e3:90:94:8a:f2:16:cd:20:14:
00:7d:aa:fe:5a:cc:1c:76:0d:db:c3:e2:7e:c6:2a:
65:14:cd:d3:c5:96:16:a3:20:0d:3d:38:4d:3f:fd:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6E:59:5A:39:80:64:0F:E0:EB:63:22:28:F8:35:AF:C7:B0:C5:23
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:78:d5:68:b4:5c:f6:69:75:44:3e:f6:ee:5d:8b:2b:40:
97:bc:b9:b8:4e:e3:50:d4:91:39:ef:ba:b8:d1:0b:8c:d7:d7:
af:10:74:1d:33:37:b8:72:61:ce:41:fb:e5:59:6f:8e:a9:c0:
84:26:23:57:25:bf:10:0c:a9:8c:da:76:75:ac:37:f9:f3:bd:
84:e6:89:0a:38:42:9a:3a:24:fd:06:86:55:84:9d:d8:bb:b1:
04:25:b1:53:b5:d1:2b:91:fc:69:9c:1f:1d:9b:1e:7d:5d:9d:
66:eb:a9:4c:f9:a2:16:08:f6:c1:51:cc:f6:f6:cd:58:46:3b:
64:40:a4:bb:04:d1:0a:e5:ac:29:f0:fc:ff:77:7f:b1:59:aa:
db:3c:52:bf:c7:10:09:8c:82:9f:98:3f:52:20:f1:c5:d7:1e:
2b:6a:39:c6:d6:5d:f0:47:a6:6d:ec:67:e9:33:b7:53:e4:e6:
68:09:a4:d8:52:b7:1f:28:c8:f6:05:64:4f:11:31:fc:07:16:
63:96:6f:31:e1:a2:3b:ec:ae:ee:cb:98:39:60:1a:08:72:ad:
58:93:4b:b8:42:69:28:b0:e0:3e:f0:c3:ef:e0:42:f3:bd:94:
0b:c1:fe:fb:96:be:ce:d1:8f:b4:2d:62:f5:1a:d5:21:d0:39:
a6:64:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:12:18 2025 by rpki-client