Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
File: 58OrlrdMKsTwSuYqt-gs3xmI7UA.mft (raw, json)
Hash identifier: 2vt0VKzVaBpKJZwdMqvvHi67ewCMzJX1OSb536Wdq9I=
Subject key identifier: 1D:87:D4:1F:62:27:53:C1:0D:C7:30:22:FC:39:CA:B1:D4:9B:1D:E6
Authority key identifier: E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
Certificate issuer: /CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Certificate serial: 0194BCE08246C72B0295A2F61936E0D35A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
Manifest number: 05AC
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 58OrlrdMKsTwSuYqt-gs3xmI7UA.crl (hash: M3P6TUIhjlglQ4pbhFnwgPf3ELCKRJplIcy6V3fnRL8=)
2: tRQVAZPhSI7yY2YBf58wHloNtVk.roa (hash: x6U/gqCwfyDYCGrA4HX4YKbEtJbHihcQ4Z9Ks5Bgn58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:82:46:c7:2b:02:95:a2:f6:19:36:e0:d3:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=1d87d41f622753c10dc73022fc39cab1d49b1de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:a1:08:69:1f:e2:2e:2e:8c:40:8a:91:76:
c9:27:7d:c5:8e:ec:1b:84:94:c2:f9:d4:b3:20:53:
5f:ef:de:49:cc:57:5a:1a:85:80:f7:5e:18:90:be:
ba:57:be:be:dc:5f:e3:51:06:49:85:04:d8:78:00:
3d:bc:58:fb:55:49:4a:a1:02:6d:0c:c9:80:7b:59:
65:6c:19:67:1e:9a:43:42:a4:24:1c:2e:0b:27:0f:
36:d7:26:5f:93:2c:94:98:36:24:8d:15:bc:4a:1a:
b8:a8:36:fa:7d:2d:ca:86:7d:2a:d0:63:c7:82:7c:
ea:52:1a:02:06:62:6a:b5:75:fc:04:e4:32:a9:1f:
3e:52:5c:ab:c8:1b:01:e4:2f:f8:cf:06:eb:0f:aa:
1c:46:f1:27:cd:4f:c6:44:9c:05:7b:4c:2b:18:72:
a1:26:d5:c5:e6:40:73:dd:f3:62:fb:5a:d9:2e:2f:
53:8d:7d:56:72:77:f7:17:d0:7a:26:26:c7:0b:74:
fb:c6:33:2f:1d:ed:03:ff:f0:ad:12:3f:a1:86:b8:
a6:b7:43:da:10:9b:6c:65:85:67:5d:c3:07:52:1b:
de:94:1f:f6:fe:69:b8:1d:03:79:2a:17:6e:b8:68:
52:a9:0c:c2:c7:78:f7:d5:63:36:74:bc:2e:2b:07:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:87:D4:1F:62:27:53:C1:0D:C7:30:22:FC:39:CA:B1:D4:9B:1D:E6
X509v3 Authority Key Identifier:
keyid:E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:62:75:c5:99:29:5e:cb:c5:d1:b8:83:df:8b:d3:a8:b2:34:
10:a1:fd:d4:54:53:00:18:c9:58:4e:61:ba:66:56:30:08:90:
ee:71:e2:6e:b7:a2:aa:97:26:c9:4d:14:5c:78:72:42:4e:57:
38:f2:ae:b9:80:b4:60:83:56:96:be:af:6d:8a:86:e4:c8:dd:
10:cc:e7:b5:40:c7:83:7d:eb:3c:6a:8a:55:38:8c:40:59:e7:
df:d5:25:4e:03:e4:50:e8:60:81:47:7f:69:97:61:17:b1:df:
91:9d:84:f5:62:aa:29:45:97:0d:7e:56:0c:75:2f:e5:01:61:
17:1a:77:77:14:d4:cb:7f:4c:13:6b:63:b8:51:6e:6c:99:47:
7d:62:df:f2:c8:07:e8:12:d8:b5:e0:80:f4:e2:91:9d:77:53:
5f:34:f1:3b:6a:1f:83:38:86:ea:a6:ab:7d:73:d3:24:81:40:
7a:cb:7e:96:6e:e7:45:bd:9e:39:de:9d:6a:00:8f:fd:82:f0:
a0:c3:17:97:8c:ce:aa:9e:67:79:f0:f0:db:ef:1f:db:bb:1e:
94:ab:6b:8d:9e:c5:8e:90:7e:03:e0:8a:07:8e:4f:d8:88:d5:
88:2a:02:5a:93:69:80:18:2f:fb:52:f5:26:bb:32:51:84:3e:
5f:c6:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:45 2025 by rpki-client