Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File: 0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier: H/Nq1+Ohy1hYkb0m/KWZ0LyHBX8w2mdqhXor8qmr6C0=
Subject key identifier: F7:78:9F:91:CD:7F:71:CC:F7:4D:12:71:10:4D:10:79:D6:06:17:2D
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 0194BBCED2351CBAC9EB7F50061DF6D778E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: svwh42gkj8IUuEO2/uqzE6BK23zr/uN2FBsjjx8pnl8=)
2: ZyIu060SPaMWxMQNL4CIeyP46Zk.roa (hash: GVU/SWZQhKij7yAFfd4z7w9wi6LHgd9IcJaXLlSPbVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d2:35:1c:ba:c9:eb:7f:50:06:1d:f6:d7:78:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=f7789f91cd7f71ccf74d1271104d1079d606172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:c9:ba:a1:d9:fa:08:22:e4:67:7c:67:eb:
ec:f7:35:a6:0a:29:6c:5c:1c:40:c7:32:ff:e0:c8:
3b:88:6c:ba:77:a9:46:be:20:9f:c6:35:d2:f6:9c:
01:4a:69:c6:1c:df:10:39:24:17:41:ee:f3:c3:84:
53:93:a8:cf:3f:97:02:54:67:da:21:68:96:a3:30:
fc:95:9a:4f:fd:02:7c:f6:ac:4e:96:5a:5d:79:3a:
2d:14:ae:31:7c:11:2b:07:df:c2:d1:c6:14:77:4d:
be:4c:7b:17:8e:0d:cb:ff:4a:19:01:28:e7:6c:26:
91:cb:f3:c8:b0:40:f3:39:e2:0d:5a:98:5e:e4:32:
45:e2:3f:46:78:c3:1b:78:bc:5d:9e:ab:d7:12:1d:
eb:49:16:ac:48:cd:34:94:89:4b:ee:15:89:c9:a1:
e5:c4:37:bf:73:cd:e9:b1:3e:aa:77:84:91:da:6d:
cf:db:65:df:b6:58:7d:7d:46:24:73:91:19:7a:59:
b9:fd:66:ac:ee:23:a3:c2:18:46:97:90:3b:c4:d6:
3b:91:2d:2b:c2:f7:f6:b5:ca:6c:3c:20:18:e6:01:
4c:f0:b3:e3:14:b9:34:9a:16:48:6b:02:93:89:df:
7e:2d:fa:0f:7b:82:ba:3f:2d:5b:2b:21:0c:b1:e7:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:9F:91:CD:7F:71:CC:F7:4D:12:71:10:4D:10:79:D6:06:17:2D
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:bf:01:7f:ab:83:93:d0:32:8d:6a:90:a2:5b:90:9d:dc:
b4:60:1c:c0:22:15:ba:ad:50:64:c0:d6:48:6a:f1:73:6e:50:
ba:73:d4:46:75:27:07:5a:ec:73:d2:f2:06:41:28:25:30:64:
b3:1d:01:bd:05:4f:5a:d3:ec:d9:7d:88:bf:36:27:9b:d1:f2:
01:96:75:a9:0a:fe:7d:99:1f:af:0f:be:19:4e:d2:ed:e9:71:
2e:41:18:b4:f1:c1:d4:ee:3c:5c:84:7a:4c:87:a4:e3:38:68:
34:48:d7:4b:b1:da:1b:5d:97:ec:cb:2b:f0:d7:b5:12:43:10:
a5:81:27:89:2e:16:8a:c1:96:eb:ef:12:46:35:ad:61:cc:4f:
02:94:21:67:0c:9a:14:0a:ee:a7:78:d4:01:6d:76:ae:5f:a4:
bd:91:3c:43:7c:52:67:95:da:b6:31:98:85:3d:55:de:38:dd:
25:cb:70:25:f2:56:b6:be:ef:20:b4:f6:e0:e0:ad:43:af:ce:
e1:51:31:42:87:2e:9c:be:88:38:d4:d1:c6:47:0c:a4:0f:53:
77:08:60:a8:fa:8b:68:ab:ab:c7:20:8b:21:93:70:92:fd:e0:
90:3b:61:47:f1:18:b2:9f:62:f2:f0:0b:02:5a:fe:48:30:a3:
db:dc:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:37 2025 by rpki-client