Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: bUoa/U7H38g5o/vMdqa/qRT6UvPP3A/5OSmIgp0mPi0=
Subject key identifier: 33:EF:81:00:49:69:D3:5F:44:E9:22:0C:35:DA:61:FD:6C:A1:1D:DE
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 0194BC3C0679F33C29CA88C321D3D23D58C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 08F4
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 0nY8WimC5lB0bql9f3U9kRi_8I4.roa (hash: 8StTkkNbb/yW2jlpCIQh00ucmFvEjZPmIDJRuFhboiI=)
2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: /ijz/jjIT5zUWpE+5kxe7sLMC2Yg0V7WE9rVW70t1Ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:06:79:f3:3c:29:ca:88:c3:21:d3:d2:3d:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=33ef81004969d35f44e9220c35da61fd6ca11dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:59:bb:e6:cf:a6:bc:e5:d5:ef:cb:9c:25:
f4:f0:8e:d0:72:32:50:5b:c2:e9:74:52:10:1f:80:
3d:2a:5d:55:67:7e:7d:de:51:da:fa:f9:c5:68:b7:
fc:c0:e1:5a:c2:60:a7:1a:f0:64:9d:47:a8:69:41:
31:e6:4a:d6:59:ca:f0:fb:cd:88:ca:67:04:76:cd:
4d:86:a9:e3:43:12:27:7c:82:23:3c:f4:8a:24:e2:
b1:94:6c:47:fb:d5:37:62:d2:5d:6e:f9:39:08:86:
98:5e:3c:a3:0c:d7:15:d3:74:84:c7:aa:d7:ac:4f:
7a:ca:73:ba:96:82:69:51:77:7c:b5:64:a7:d2:57:
1b:31:c0:8b:8e:6b:be:f7:ca:67:6b:eb:ba:88:23:
6c:0b:64:e1:7f:4b:57:94:aa:86:5f:0a:ed:ae:ac:
5f:c1:06:82:38:5b:75:0c:94:9a:c7:86:26:7a:7f:
78:d8:01:66:c1:bb:eb:02:12:b7:0e:57:6a:dc:23:
ed:84:41:66:22:e1:71:78:ff:48:06:fb:cf:7f:18:
52:d0:03:09:a5:78:ec:6a:12:a5:f2:b5:f6:6e:6d:
27:3d:47:c4:cc:34:58:4a:8f:70:54:52:a0:62:77:
0f:3a:aa:fd:8c:39:7a:4a:29:9c:bc:72:fe:d4:14:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:81:00:49:69:D3:5F:44:E9:22:0C:35:DA:61:FD:6C:A1:1D:DE
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1b:63:3f:cd:2f:9f:0e:bf:d3:f8:b7:f6:ab:b2:f6:2a:8a:
97:fe:b2:b1:ff:ef:1a:9a:2b:3b:8a:03:17:55:3f:d5:bc:e2:
89:37:a5:58:d0:1e:b0:1d:5e:73:31:50:eb:3a:ff:db:c0:29:
6a:03:e0:a9:fd:8a:f8:40:4f:44:b1:1a:13:26:b7:e2:a9:5c:
01:24:24:52:eb:2c:85:dd:cd:e0:68:bf:9c:a9:8e:73:30:f4:
46:01:91:ab:09:7f:82:64:87:e2:8a:9e:6b:60:87:6b:69:0f:
dc:8a:3a:bd:05:60:69:26:d4:77:e9:8e:87:70:28:28:83:76:
1a:53:41:83:a1:46:72:44:69:04:30:71:c3:ac:6a:b9:87:fd:
fc:f7:5a:f1:5d:4c:c3:ca:6a:5b:98:a2:7c:1b:d4:c5:4b:2a:
b1:a7:ea:81:4f:61:ad:16:76:76:61:34:cb:44:be:94:73:bf:
e9:48:bb:84:60:7f:6b:22:89:41:a3:e9:98:00:59:8f:8f:51:
dc:01:79:1e:d0:9e:62:3d:ac:e8:86:0d:07:be:23:18:53:20:
d3:11:18:65:64:e6:7c:ea:93:1f:ef:23:cb:2d:3e:c7:d8:7d:
4d:af:d9:eb:2d:6a:f7:29:8e:cd:2d:66:23:00:98:24:c0:08:
50:f4:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:43 2025 by rpki-client