Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: 1yy6uYiDPbu/E61EfnOKNxNCnQXVOdgGwxFxL7JABgc=
Subject key identifier: 76:0F:B4:69:4F:1C:27:2E:72:9E:CF:26:60:C2:1A:8E:AF:EF:CB:FD
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 0194BD8537FB206DFA24338F94A14F8C55F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0280
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: PH572oBJO12/44m6TJb+WIL6ZoZJaBAFBQkM966olMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:fb:20:6d:fa:24:33:8f:94:a1:4f:8c:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=760fb4694f1c272e729ecf2660c21a8eafefcbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:45:f8:65:41:6e:0e:71:46:24:4a:02:9f:
b4:25:7f:30:2a:7d:07:e0:e2:07:37:c0:8a:76:e6:
3f:69:7f:81:c7:83:30:c0:90:db:2d:ed:0d:9a:a5:
ce:36:cf:0e:00:0d:c6:63:c1:82:c2:24:89:7d:ed:
fe:b8:28:0f:1c:8c:9a:c1:90:16:16:00:ae:35:15:
f0:65:84:a7:d8:a8:3b:fb:95:d6:46:52:e2:69:21:
fd:da:fe:c6:f2:e2:0c:a3:f3:e5:96:7c:a1:51:b9:
8e:b6:9c:a9:a1:d0:2c:88:5d:58:87:f6:bc:aa:01:
62:c3:01:d8:8d:d3:15:8f:b1:3f:a8:5c:05:2f:ee:
d4:4e:63:8e:38:a8:14:4a:58:6b:48:6a:2a:c3:0f:
9d:1e:8a:19:8e:83:a1:9a:be:e1:90:a9:d7:9b:5e:
44:ef:b5:0d:d3:8d:08:1c:e5:42:9b:a4:0b:ea:2f:
fa:bc:59:3a:b9:ac:d3:55:32:18:33:e5:f7:77:5f:
ca:8a:60:ac:00:ea:0f:79:68:29:5c:58:50:e1:7e:
8c:45:1c:cf:d3:76:d9:46:38:e2:09:a5:b4:95:36:
38:1b:ff:f5:25:70:66:20:58:4d:a6:e4:6e:e7:a0:
55:12:9d:84:dd:72:55:e2:52:1e:9a:bd:2b:bd:d3:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0F:B4:69:4F:1C:27:2E:72:9E:CF:26:60:C2:1A:8E:AF:EF:CB:FD
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1e:d6:b1:bd:ec:59:db:3c:be:80:cd:6a:61:43:cb:23:3d:
cb:e1:47:37:18:a7:e3:e4:b9:38:c8:22:2c:70:30:ee:eb:56:
ea:94:4f:86:72:27:06:c7:c7:ab:ae:d2:88:fd:3c:58:fc:29:
c7:ab:c8:77:dd:8d:0c:99:85:85:da:16:0d:41:0e:e9:38:7d:
9a:ec:b2:dc:45:43:95:87:c1:f3:3c:4e:6d:5c:a2:1a:f3:ca:
14:b1:19:42:60:3a:01:12:4d:80:00:d5:b8:fc:11:9f:9d:2d:
dc:aa:0a:da:bd:c1:ca:9f:ca:18:35:56:90:b6:a9:e3:d1:e9:
a5:76:e8:10:79:2a:fb:7a:c8:e6:14:a4:6c:51:08:ef:30:a9:
c5:0d:80:32:f4:05:8e:4c:39:51:10:cf:6c:b2:9b:7f:d2:ff:
e0:a4:7f:35:d5:6d:3d:4e:dd:1f:9e:f2:38:b0:1b:c0:6f:4b:
a5:db:ce:74:a4:af:65:9b:fe:4f:a4:63:30:18:9c:3a:16:43:
29:55:20:64:7f:81:fe:89:09:70:71:87:88:3c:8f:7b:8c:7f:
eb:af:d0:58:45:e0:dd:fb:36:01:34:91:ea:94:d6:c8:f3:07:
6b:16:a5:e2:28:a7:3b:d8:6a:7b:6c:38:43:c7:21:ed:0b:67:
23:b3:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:23 2025 by rpki-client