Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: SdlLueT//92YToSQVGVHs9tKKUaT24xglAcmLp8YNJ0=
Subject key identifier: 7F:E7:5D:F8:37:16:3A:86:3D:FA:4E:49:C3:AF:BF:84:C5:0A:16:6B
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 0194BD4E6BA824CD1FF3ED3EADDF86F3DE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 0FBB
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: bYtuZ58ztAYHpdsJ5wzvDpZC++y8iyl0ROVjDtgg+4I=)
2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:a8:24:cd:1f:f3:ed:3e:ad:df:86:f3:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=7fe75df837163a863dfa4e49c3afbf84c50a166b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:01:42:61:96:ab:82:60:ae:81:3c:d5:67:
42:18:d3:17:ea:c7:e4:c7:7c:5e:2f:79:2e:ae:18:
9b:46:7a:54:73:9f:b9:d2:50:8e:1a:ac:57:83:22:
29:65:e4:c6:04:92:53:c1:a9:7d:d7:93:fc:49:be:
4d:28:69:c9:87:15:2e:36:4e:87:e3:94:2a:69:50:
e8:08:bf:a1:6a:1d:26:e4:34:dd:10:16:f2:6e:e2:
66:c9:4b:4c:cf:91:b4:bd:31:fc:53:12:d4:c7:fb:
c2:71:31:df:7e:05:19:25:5a:99:e0:67:13:32:ac:
67:6b:d5:0d:9a:4b:d1:6a:33:76:16:ca:9b:9b:cf:
47:72:5b:26:76:1f:5f:9a:f2:b5:19:5c:03:f5:39:
30:fc:68:ee:8a:ea:50:df:64:98:0c:ab:66:e8:5b:
5b:67:42:0e:ba:62:6b:a6:26:a2:83:29:3b:4f:16:
a2:75:ef:04:c0:86:42:8e:6d:fc:f1:26:f1:7a:46:
51:b8:00:75:51:a2:bf:0d:f0:d2:10:20:ed:9f:5a:
f3:d7:ff:79:8f:60:ec:c5:86:47:40:0c:ee:dc:ec:
af:59:86:6a:0b:c6:49:ff:95:8e:3d:8d:f5:11:a7:
89:a4:a1:6a:43:fe:12:21:28:c2:b9:71:06:2d:42:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:5D:F8:37:16:3A:86:3D:FA:4E:49:C3:AF:BF:84:C5:0A:16:6B
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:af:14:e1:d5:a4:f2:9c:ce:9e:52:5d:cc:d4:b5:d9:89:f1:
62:81:4d:fd:de:7c:2f:ce:b6:6f:f1:17:4d:82:ad:c7:d8:93:
7c:33:80:c9:3c:b2:c2:a4:24:d8:84:1c:30:cb:90:e5:9c:89:
55:a3:01:62:d5:18:1c:f8:a8:2e:6a:fe:e0:ea:06:e7:f7:8e:
24:ae:40:b7:26:f0:f2:2b:5c:2e:6e:93:f1:3b:29:5a:21:a2:
ae:75:6e:04:24:fa:43:40:84:90:f5:c9:24:1c:61:1c:ba:64:
cc:00:16:93:69:2a:bc:7a:95:8f:5d:0d:1a:31:c7:7d:46:57:
ed:48:a9:f2:2a:85:06:27:b8:37:7c:fe:c5:df:ae:8c:b0:5d:
41:ec:6f:be:87:19:76:c9:0d:0d:ac:08:6b:4a:bd:cb:17:39:
7b:a3:d8:25:39:99:a4:4e:3a:42:e1:88:50:18:9f:a9:90:2b:
72:3d:c1:a1:68:e4:2d:2b:1b:64:1e:d2:e4:0d:aa:41:3f:f1:
24:d5:c1:48:63:6b:f0:a3:e2:7c:97:30:01:67:57:ff:ab:83:
ae:81:97:37:bb:4b:68:47:cb:cb:08:4e:0d:6b:a8:19:92:ab:
58:97:ac:2d:ef:71:8b:69:a6:c0:15:df:72:43:9a:a3:36:4a:
41:e1:cd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:03:44 2025 by rpki-client