Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: uJxhS6WOWZoYWFj3kb8INP/IOs+hKnpnnhX1jfXj1lM=
Subject key identifier: EC:12:F8:55:EC:05:1B:9E:BC:3C:0D:39:90:3B:E7:FF:C5:35:70:9E
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 0194BD17C2A446D7CA4DCB52BDCD3060792F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: WgiSVDWK7jTliTADu8EVwRZaGNgtBjxiqhgNhCS3HIY=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:a4:46:d7:ca:4d:cb:52:bd:cd:30:60:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=ec12f855ec051b9ebc3c0d39903be7ffc535709e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:5d:cc:ae:99:e2:1c:a6:68:d3:4d:0e:b2:
d6:43:82:7d:51:f9:11:7d:3f:6c:72:64:14:31:f7:
82:05:b7:06:8a:80:d9:da:eb:22:6a:0b:88:b5:ca:
92:bb:75:9e:d0:14:a6:0e:fb:dd:4f:ab:23:2e:de:
c4:f6:47:24:3d:cf:3a:ae:2b:2b:2c:bd:18:13:c3:
5d:e6:29:31:a0:b0:74:6b:7f:d1:52:93:c8:30:ac:
17:d6:8f:1b:bc:20:3f:92:a8:00:c2:d9:5b:a4:f2:
f4:52:92:73:29:18:5e:fd:8b:c8:5b:e6:21:0e:fe:
b8:85:ed:e1:0d:fc:35:b4:7f:d0:a0:d4:bb:d7:5a:
4f:9b:20:11:97:38:d0:2b:eb:62:39:01:a8:63:f3:
ed:6f:5a:b4:4a:61:14:18:3e:77:8c:ce:0f:17:6b:
e4:49:40:f6:2b:b9:75:78:fa:e2:5e:4a:76:f3:20:
a5:b4:22:2e:4a:80:2e:1e:d7:75:f3:56:3d:fe:b3:
1e:39:da:d9:bf:97:0d:70:84:ef:fc:e0:9b:74:6f:
41:c6:4b:19:21:73:7c:91:96:5a:c9:cd:5e:0f:54:
71:2b:53:db:ff:66:eb:06:f3:dc:a1:d6:b8:ce:8a:
b6:24:84:7b:8e:d1:8f:4e:4a:cd:64:15:5c:56:13:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:12:F8:55:EC:05:1B:9E:BC:3C:0D:39:90:3B:E7:FF:C5:35:70:9E
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:45:6f:b6:cf:62:d1:80:77:02:4b:b3:e7:92:7d:e1:c8:7a:
b9:df:15:e8:20:c1:3c:a8:1a:62:22:54:0f:f6:96:b2:13:d6:
cd:71:dd:4b:9d:b7:b8:91:21:9d:15:92:87:25:d7:2d:67:8d:
c7:e2:41:52:14:12:ba:5e:d0:d9:f3:5a:b7:f4:88:40:01:3b:
eb:80:a0:c9:90:67:76:3b:e6:8e:d5:9b:45:a9:1e:74:73:1f:
95:ec:67:37:e2:9c:ba:3e:cd:33:35:90:53:d0:1d:75:45:06:
19:50:70:f1:ff:63:33:15:9d:a0:25:d6:1a:9a:10:e4:18:55:
b5:2c:70:91:92:67:7c:aa:63:7f:97:28:70:38:2e:0b:b4:11:
04:77:dc:17:b1:c6:9f:dc:32:3f:16:ac:39:2b:86:65:6e:0f:
d1:5b:c0:3f:a9:e0:a1:37:a4:ee:a0:75:83:c6:6c:d0:01:60:
19:97:d6:7e:bc:2a:9c:36:07:68:64:2c:0a:4a:17:f4:52:9e:
b0:44:3e:4e:e0:69:56:7a:ca:42:98:b1:25:33:7d:07:7a:48:
6a:97:00:f1:2f:54:0d:ee:0e:75:a3:04:01:f6:d9:0e:8f:67:
35:81:e6:57:31:e3:2d:fb:6a:16:6c:f6:7e:e7:b2:18:20:67:
0c:9e:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:56 2025 by rpki-client