Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier: GxVJVRfANTsNzrKyF6Ckm8GuOXlJ2rMNlT+z4PG6qVw=
Subject key identifier: 37:25:62:34:50:33:41:21:F0:02:5A:D3:16:5B:6E:DB:1B:75:36:D1
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial: 0194BC3BEB175CDF1F84905D7BD84B63AEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number: 0F33
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=)
2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: YU7TeYj0qm29SY3lZPTe2ZCtHfC71wQBwofeEHbQheI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:17:5c:df:1f:84:90:5d:7b:d8:4b:63:ae:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=3725623450334121f0025ad3165b6edb1b7536d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:08:b3:98:2d:40:d7:74:e7:a0:a0:73:63:
7d:e8:14:69:f0:3e:45:31:b6:7f:a9:f9:0f:de:f8:
e3:5a:7c:09:b4:3c:ff:1f:13:63:87:d5:ff:da:50:
69:32:35:96:17:42:34:87:f2:d7:5f:ae:d8:5d:97:
43:24:9e:de:f3:59:7e:95:20:f7:e0:e3:00:08:af:
ae:8e:bf:19:19:8b:87:62:d1:bd:2e:4c:20:71:03:
17:17:e2:d0:77:12:e4:82:95:41:cf:af:cb:82:1f:
c0:8f:bd:fb:bd:84:fb:12:ed:d5:a1:3e:55:0e:69:
de:0e:83:82:8a:7c:ae:0a:a4:da:58:7e:dc:f6:44:
f9:f8:d4:21:96:8a:58:35:b7:5f:1a:29:89:ce:5c:
cc:3c:81:48:e3:6a:8f:0f:36:fb:4e:d2:79:5e:93:
e0:c4:09:da:80:ec:8f:d0:bc:77:78:2f:9e:73:4e:
de:38:fe:85:24:66:32:15:6a:4f:ba:c8:0b:75:f9:
91:d5:7d:2b:39:6c:b5:d1:21:aa:1c:3f:11:90:26:
e8:e9:9f:07:8f:dd:d1:d1:96:b0:7b:84:7b:5b:99:
d2:ea:cb:d9:b6:a1:e7:df:43:e5:19:66:ba:a7:78:
f2:1f:a9:ae:e3:2b:e9:97:8b:f5:fb:05:f5:e1:4b:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:62:34:50:33:41:21:F0:02:5A:D3:16:5B:6E:DB:1B:75:36:D1
X509v3 Authority Key Identifier:
keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c1:ee:b0:58:ac:fd:95:39:25:04:f7:3c:ca:e2:d0:85:fd:
02:bb:31:63:a4:69:75:7b:0f:72:b9:dd:48:a3:0c:7b:14:60:
24:36:d0:b5:83:45:23:28:84:1a:c6:a0:58:e9:75:bd:f8:09:
0b:36:2a:6d:a5:c2:88:81:81:8e:e4:53:d8:34:49:a1:63:92:
89:f7:85:33:36:9a:fe:10:70:20:0d:b7:f6:e4:3c:c9:9e:59:
24:09:5b:13:ec:26:1b:42:d6:10:76:5e:2a:ab:29:d6:25:7b:
6b:f2:a2:8a:4d:44:76:bb:e1:29:2f:30:aa:50:17:f6:c9:9b:
c2:44:b2:3c:d9:07:9a:07:42:a0:ad:b8:15:0c:c2:74:c7:1d:
67:3e:6e:90:29:3f:12:54:3c:bd:6d:03:8c:a3:39:77:18:4c:
d4:7e:4b:7f:21:9a:63:58:10:cb:07:cf:3a:9e:99:03:3f:7c:
f8:b6:9b:e6:51:31:53:b5:cc:f1:65:00:c7:ea:ad:16:08:ae:
a2:3f:74:75:f4:d3:8a:fc:a3:55:73:88:2b:41:46:cc:f0:51:
33:e6:ac:4d:07:a9:09:7f:f5:d8:d5:29:1e:ae:ea:6a:04:50:
23:33:23:d7:b9:48:79:ae:f1:30:72:81:3b:94:df:e3:69:07:
8d:57:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:46 2025 by rpki-client