Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
File: RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft (raw, json)
Hash identifier: 0dePcMHgIntrMNPlwt4xeawGtqBdxG9aloeXkSlOprk=
Subject key identifier: 58:A2:8C:9A:A9:7B:E5:C1:ED:99:A6:98:50:54:BF:19:B6:86:CE:8E
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Certificate issuer: /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial: 0194BC3C4EE7F5F1ECF1BC3575D38260B7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
Manifest number: 0B5C
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl (hash: g7Yn/wsNwhaW6bEaesW1bf92vFqcihF5UwrZ++b6iE4=)
2: UQFRRC8sXbk0r4Q6fEr2IYKv7N4.roa (hash: 7PfHdaN/WSlX46HPIjWpG4hQQPCzHjIU2IYqvwhWpeo=)
3: mycUbYI1PYCeJUOytd7OByddKj4.roa (hash: PDtk9wU6hfm72jtlMfw1RCeJrC6rGpFRRw/nfzu+rDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:e7:f5:f1:ec:f1:bc:35:75:d3:82:60:b7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=58a28c9aa97be5c1ed99a6985054bf19b686ce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:5d:45:dd:5f:2e:d0:64:af:27:79:83:6a:
0b:a8:72:6a:50:1d:27:87:e4:f4:f8:12:5f:a5:c2:
4b:18:78:4e:1b:12:bc:71:03:05:78:df:26:6f:cf:
f7:39:8a:fc:a7:96:c7:75:c6:6f:a2:aa:29:fb:c9:
1f:48:45:2c:67:14:11:fa:05:8f:82:2f:bb:82:50:
29:5b:cc:98:15:12:34:95:c0:61:4c:e7:9c:3e:38:
19:03:66:c9:6e:df:9e:7e:86:f6:c3:0f:4d:30:1c:
f9:39:a9:f6:e9:b5:47:35:72:ee:25:37:3f:9a:ae:
56:f5:3c:f3:64:f8:97:45:d9:e9:fd:51:2d:be:8e:
1e:85:a8:b2:76:06:1a:47:bf:09:05:b6:ac:bc:d4:
04:66:04:42:44:82:33:e9:b9:cd:f7:5c:e0:76:0a:
3c:49:76:e4:cc:36:7f:15:13:c6:f5:b0:f0:de:58:
2c:a4:2d:4c:cd:c4:a3:a3:8a:5a:50:c2:43:08:05:
30:c2:12:3b:74:60:e3:59:b9:12:65:02:de:24:ea:
89:51:82:8f:e8:81:77:69:24:2d:e5:4a:46:d0:21:
94:3d:9d:ae:d0:4a:bb:8d:a6:a9:3c:a9:f7:17:29:
ba:3f:11:94:fe:ac:0d:71:91:1e:af:9d:54:9f:c7:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A2:8C:9A:A9:7B:E5:C1:ED:99:A6:98:50:54:BF:19:B6:86:CE:8E
X509v3 Authority Key Identifier:
keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1b:20:8b:ff:d3:cb:c5:76:90:78:3d:bf:4a:80:b6:cb:d1:
d4:02:78:dd:d8:2f:ff:4d:6f:00:9c:02:03:d7:6f:53:bd:2d:
46:26:7d:24:dc:1a:3c:5d:9d:3e:62:5b:dd:17:af:c2:32:4f:
39:c3:8e:4f:89:5f:d5:43:8e:1c:68:54:0a:de:e8:8a:4d:8e:
f5:a3:03:c1:ff:6c:d1:fa:1d:ef:ca:04:ce:a7:da:21:9f:df:
b8:3f:68:0a:2f:bf:93:c8:0e:62:4c:15:43:24:2a:96:c5:7a:
53:91:e6:9b:7c:66:fa:90:79:09:e4:a3:f4:43:6d:de:8c:61:
8b:d8:02:8c:b3:65:3a:67:8a:40:6a:b8:00:4d:6a:40:5c:85:
5c:4f:99:0a:81:bc:9b:01:b6:c5:01:57:47:ff:14:1b:02:86:
04:44:54:64:d7:0f:15:74:29:2f:79:96:79:7e:ae:fa:8d:2d:
18:7f:65:f9:d4:5b:a5:d0:14:62:8d:72:4d:04:a7:cf:70:c8:
56:76:63:7b:19:7e:81:f1:d1:10:91:3d:48:bf:9c:a2:fa:d0:
46:37:c8:0f:4c:ec:5a:fa:0a:e1:35:bf:1a:1d:20:bb:b5:19:
08:36:1e:c8:37:f2:ed:5a:01:c3:30:10:f9:9e:6e:a3:44:9b:
1b:df:bc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:33 2025 by rpki-client