Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/h7-ak2z5rSjsWNt5imD9cd9sN_M.mft
File: h7-ak2z5rSjsWNt5imD9cd9sN_M.mft (raw, json)
Hash identifier: MFoeB5jTeqxcWVr4yc7vsI85ql23NUFZGLeIiXjSBr8=
Subject key identifier: 5E:35:FE:BA:B7:69:03:25:FF:BB:C6:39:5E:6D:B0:64:24:F2:4D:DC
Authority key identifier: 87:BF:9A:93:6C:F9:AD:28:EC:58:DB:79:8A:60:FD:71:DF:6C:37:F3
Certificate issuer: /CN=87bf9a936cf9ad28ec58db798a60fd71df6c37f3
Certificate serial: 0194BBCEE16C8D7559CC2527D977B9A41403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7-ak2z5rSjsWNt5imD9cd9sN_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/h7-ak2z5rSjsWNt5imD9cd9sN_M.mft
Manifest number: 0CEB
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: h7-ak2z5rSjsWNt5imD9cd9sN_M.crl (hash: v6W+4hd5mVdbms31s6Hx9FbymwxwzsbZfP7Du86nvuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:6c:8d:75:59:cc:25:27:d9:77:b9:a4:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87bf9a936cf9ad28ec58db798a60fd71df6c37f3
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=5e35febab7690325ffbbc6395e6db06424f24ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:24:8a:b2:b1:c7:72:a0:16:9c:39:48:f6:
78:15:11:0f:0c:4d:d2:00:ed:ee:28:f9:71:77:2b:
97:41:59:82:b5:d0:d7:fd:cf:b1:37:ee:c9:08:79:
c5:40:88:14:33:01:47:63:5b:90:c5:00:a3:13:10:
e3:bd:59:22:2d:3b:fc:6a:df:bc:54:9e:42:40:ea:
7d:14:04:76:75:5d:97:75:dd:71:36:67:37:7b:20:
4d:37:9b:f4:05:38:6b:1b:e0:7e:e8:3b:ea:f4:cb:
db:85:e3:3a:16:78:fb:70:a4:be:0c:02:ac:c5:8e:
c1:b8:53:cb:36:3b:77:95:1f:8c:02:de:ac:d4:ae:
50:f6:a8:3c:ac:95:c0:42:d5:f1:e5:0d:26:b9:ac:
f3:ae:90:23:d5:5a:70:38:38:8f:b8:76:b3:54:2b:
62:55:c3:48:aa:62:18:63:22:ef:aa:44:77:c9:9a:
2d:ee:88:93:73:c5:4f:49:6f:38:66:6d:9d:f6:6b:
20:4f:4e:33:65:26:65:55:6c:be:77:ec:29:8d:1b:
09:06:eb:01:8d:09:b7:bd:be:29:ec:d5:97:86:0f:
01:d9:a2:fd:21:56:f9:98:73:96:c6:ea:2d:d1:ad:
a0:ca:cf:4c:a9:1e:97:62:79:30:a1:43:86:eb:ac:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:FE:BA:B7:69:03:25:FF:BB:C6:39:5E:6D:B0:64:24:F2:4D:DC
X509v3 Authority Key Identifier:
keyid:87:BF:9A:93:6C:F9:AD:28:EC:58:DB:79:8A:60:FD:71:DF:6C:37:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7-ak2z5rSjsWNt5imD9cd9sN_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/h7-ak2z5rSjsWNt5imD9cd9sN_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/h7-ak2z5rSjsWNt5imD9cd9sN_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f2:25:47:69:98:e0:0c:10:22:26:63:12:bd:a2:ab:b7:fa:
47:0e:17:6c:91:d7:4c:e6:cf:6d:32:3f:81:c7:35:7d:2a:ec:
36:d8:2a:73:5f:38:f3:3c:07:ba:fd:b5:06:0b:b5:a2:0f:51:
c4:4a:8c:e0:c0:2d:21:d3:f3:8f:44:6d:e6:2c:8c:17:28:dc:
71:a4:b2:3b:12:7e:7f:96:8f:09:dd:fe:31:0c:9a:1d:24:f2:
b0:58:f5:6b:26:de:68:74:d2:a9:32:53:b4:95:4d:0c:fd:39:
07:d1:1d:a8:13:bc:5a:cf:e1:31:02:e9:ec:cc:01:53:d0:0a:
e1:f3:08:a8:e0:85:40:7d:63:b6:fb:8e:b0:8d:5b:c1:73:0a:
06:05:aa:89:ec:bb:b3:ee:ea:31:75:81:ff:0e:83:14:96:16:
4d:2d:ed:cc:9f:30:46:95:d2:11:13:f1:c4:60:91:f1:1f:41:
bc:d3:61:c1:10:af:f4:e2:58:29:55:fa:dc:37:28:7b:ac:1d:
48:c2:8a:9b:d0:8b:b4:ef:f0:cc:01:41:da:e4:cf:06:0b:fa:
3a:d8:d3:cd:db:d7:a5:1a:ec:98:e9:8f:87:07:ea:20:e7:5f:
59:55:08:46:c6:62:ce:44:4a:f3:b2:48:f2:fb:b0:b5:00:02:
32:15:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:15 2025 by rpki-client