Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: tlKx9shgLWnqUxpl0KW7Zmf1BTtTkvJxUwgEWujlve0=
Subject key identifier: 86:B0:DA:D6:75:2B:AE:F6:4E:CE:46:C5:CE:AF:07:55:E5:DD:D0:50
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 0194BBCE06C13508739A64F1290F2E658B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 08BB
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: bcgHeTecNhcHR9QWO6gmvpmmI5c.roa (hash: EV6/wlUYGCbS7xEazmx8eI5Bar/BgAFt51P9o3UlOuQ=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: wT6MTkgPlsOk438okhgr2APapNLB25xpWzN/nL23ZSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:06:c1:35:08:73:9a:64:f1:29:0f:2e:65:8b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=86b0dad6752baef64ece46c5ceaf0755e5ddd050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:2f:72:9c:25:42:12:08:e1:f4:be:dd:10:
ba:62:87:27:57:72:ab:60:38:73:71:63:25:ed:89:
b3:24:19:60:21:8d:76:ea:d4:63:e4:8d:92:c8:d0:
e1:2e:81:64:1a:c1:17:ed:cf:29:19:15:47:32:8c:
ca:04:60:49:5a:c9:59:3a:ed:ce:bb:cd:3b:95:05:
06:41:ad:c4:18:0f:35:b1:43:74:cd:66:1e:c9:01:
fd:09:85:6b:05:09:35:ab:dd:1c:25:a5:81:38:5e:
57:cb:c3:6a:c2:25:4b:0d:1a:ee:59:e8:0e:5f:ee:
e0:e9:93:35:61:5f:0d:ae:d8:92:38:b4:32:ee:8f:
4d:8a:3b:bb:12:6b:4d:69:1e:be:75:df:0e:51:f6:
94:48:24:c4:03:fb:37:b8:b6:d1:95:32:11:fe:55:
2e:05:c9:e8:3a:45:6d:28:90:d3:76:a6:89:7a:e0:
bb:2c:ec:30:8a:c7:9f:85:92:08:da:a0:b0:4e:8d:
96:b3:5a:18:cd:52:e5:07:8f:31:74:67:6b:f9:a5:
1e:39:ae:6e:07:93:36:85:6f:ad:88:02:f5:a7:1a:
92:96:07:02:4e:25:93:00:da:de:f6:c3:e7:de:1b:
e4:86:75:2b:38:12:46:ea:94:ae:dc:01:eb:99:3d:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:DA:D6:75:2B:AE:F6:4E:CE:46:C5:CE:AF:07:55:E5:DD:D0:50
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d4:11:fd:08:b5:ef:57:95:c8:23:6d:32:a8:e1:d1:32:e2:
15:83:26:03:f6:0d:ff:44:98:ee:46:d3:6f:ca:db:23:66:96:
63:8a:86:5e:4e:e9:ac:34:30:5d:b9:95:02:8a:ce:1d:57:17:
3a:7c:4e:9e:c6:b9:56:f2:fe:36:8b:4d:a3:a5:69:d2:78:58:
4d:93:4f:4f:35:fc:8f:ec:51:bf:b6:b0:5e:3b:9c:2b:16:d0:
8e:59:9b:3f:58:a4:69:f6:15:c4:2d:d0:64:ab:b3:84:e5:d0:
13:20:c5:30:b6:2a:0d:31:bb:d7:30:6c:23:c9:a6:29:be:b6:
76:21:0a:7a:19:ce:f3:b3:3f:09:b0:69:ba:fe:47:a7:9e:9d:
df:fe:d1:52:7b:27:ea:7f:49:ad:b8:de:15:27:af:67:b1:fe:
8e:89:ad:b5:0e:9f:05:cf:e4:fe:97:6d:06:c7:86:0f:f0:4a:
22:3d:1c:8e:42:0b:03:0f:29:ea:23:64:f6:27:95:72:73:49:
02:54:a2:8c:c1:73:a4:3f:ec:81:23:dc:3e:aa:cb:36:ad:16:
5a:11:a6:2d:8f:31:5b:f2:68:9d:c7:aa:4f:ca:00:a4:07:8d:
0a:59:c1:0f:b0:2c:f5:f5:84:9c:13:1d:fe:4e:91:71:ac:fb:
50:8d:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:25 2025 by rpki-client