Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: tcHSW2QyprvQG/sP5CahXHNlHkmCpoomDzYXTVG42vg=
Subject key identifier: 36:63:22:8C:C1:CF:7E:96:06:21:67:17:DD:83:08:05:59:99:07:48
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 0194BBCEB524E3BAD131D3F36B5945B33BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0AFA
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: Yy0/YrdI0rkJPwb+Wrz9jxLdB93gAe4BefEAPJ2iYHQ=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b5:24:e3:ba:d1:31:d3:f3:6b:59:45:b3:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=3663228cc1cf7e9606216717dd83080559990748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:6f:5f:88:55:b0:1c:fd:6d:12:16:dd:c5:
f9:61:2b:ae:eb:58:c4:4f:a1:af:4f:86:f5:e0:66:
89:aa:48:b3:49:5e:99:c0:3a:97:5e:a7:30:d5:ac:
96:89:0e:f4:87:0b:08:e1:35:0f:5f:04:e1:23:89:
92:33:91:b5:eb:a1:b1:eb:dd:7c:89:95:d6:b4:d6:
f0:60:62:ef:cd:15:32:f6:34:e9:ae:6e:bb:04:05:
60:5b:b4:45:7e:72:ca:5a:e7:1c:cc:cf:8f:a8:50:
c3:42:61:3c:c8:38:ea:2d:7e:21:3d:e0:5b:91:cd:
71:83:9d:6b:bd:6f:10:34:e2:28:32:f1:13:3a:2c:
47:b3:f8:ff:a8:6f:89:dc:7f:1a:a8:c4:09:0a:dc:
91:4c:00:d2:63:a2:1f:b3:2d:af:ed:55:58:28:89:
c9:a0:a9:59:15:ef:61:3a:1f:fa:23:a6:2e:6e:f8:
c7:66:57:70:90:4d:26:5f:45:b2:98:c5:bf:59:14:
79:48:ab:04:89:42:15:1a:59:fe:9c:67:4e:a8:74:
da:d2:8e:ed:ea:c1:ca:b1:a6:df:bd:b8:f7:cd:74:
16:41:81:76:45:31:79:2d:52:45:23:4f:2b:15:08:
ea:ea:a3:15:28:15:fa:58:02:f0:e1:f3:b7:19:2d:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:63:22:8C:C1:CF:7E:96:06:21:67:17:DD:83:08:05:59:99:07:48
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:02:86:eb:a9:7f:dc:f8:16:9f:53:ea:fb:bd:e9:42:11:
93:7c:f0:8f:54:d5:bc:48:ff:ad:33:c7:11:36:5d:51:8a:06:
7b:7b:d0:f6:09:8f:95:fa:82:32:1b:d9:12:c6:88:4d:4d:46:
4f:f6:b5:95:27:33:6d:b3:ac:a0:50:cd:fa:9f:be:e7:32:a3:
d8:c0:7f:9d:f1:07:65:56:0e:02:19:a2:2b:1c:0c:38:f3:85:
f8:13:90:ba:aa:7e:cf:8b:9f:2c:b8:fa:65:8a:3e:18:55:d9:
26:9e:57:2c:be:0e:18:12:38:c4:84:ac:1f:46:99:59:fc:52:
43:69:c4:ee:da:d4:78:de:33:05:d7:0a:5b:48:f1:68:59:ab:
7d:e6:04:67:7a:d0:00:e5:12:20:3c:ad:12:cd:1c:f6:01:2f:
10:ae:a6:06:8a:df:ca:f4:5a:42:df:4b:33:fe:df:4e:1f:a2:
29:f0:ea:12:00:46:0d:76:d7:22:bc:06:8e:c8:27:96:c0:ce:
c6:de:cf:14:b6:2e:9d:43:14:ed:8b:9e:dc:71:7f:42:6f:46:
8f:05:2c:17:2f:58:96:cd:0a:7c:ae:08:56:04:7c:40:43:89:
39:1b:1b:18:9e:9b:4f:50:58:50:8b:84:b7:00:25:e6:39:27:
d8:a2:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:00 2025 by rpki-client