Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier: J9twFEa5YUGcxVkmP49LUlb5+cBVKzXCf8nPXy+fXTE=
Subject key identifier: 40:F6:32:5A:1C:A9:B3:21:89:6F:72:70:DF:7F:78:5B:18:E7:49:34
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 0194BC04BAABCE1B8DD6D49D0AE9D6479CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: A7Vt7kDMvkFnaSg3ok9fGIHjkU6VwVXtsi2hyb47gcI=)
2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:ab:ce:1b:8d:d6:d4:9d:0a:e9:d6:47:9c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=40f6325a1ca9b321896f7270df7f785b18e74934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:a4:f9:f3:5b:ef:33:5e:07:d3:a3:6a:da:
da:17:23:3e:65:d2:3c:f8:e7:44:bc:37:f5:92:52:
8d:85:b0:68:fd:f1:41:55:2a:d9:d1:f5:a3:ba:c1:
f9:cd:a6:79:9c:06:cd:e0:08:ff:10:21:f1:23:b5:
02:43:c0:0a:33:5f:3f:b9:51:90:ab:31:32:28:fe:
bf:fc:3f:11:17:b1:86:0e:73:dc:eb:b5:04:20:46:
3f:8e:48:1a:1f:d0:23:72:dc:7b:40:24:73:c2:29:
78:8f:08:30:5e:69:c8:e9:cf:d2:0f:09:9c:3d:31:
b6:62:da:cd:ec:84:71:32:01:e5:2e:ab:35:e1:ab:
81:31:d9:35:44:9b:94:c8:1f:a6:2d:41:da:d4:3e:
8a:b2:8a:08:06:89:6b:2a:e2:ac:2d:ac:97:ac:d8:
b3:87:f6:c6:f7:a4:0d:e4:0d:d1:6c:a4:b2:31:db:
7c:13:2c:3f:e5:a1:a4:d8:95:d0:53:3c:9c:43:0d:
08:c4:cd:2f:d7:c8:43:b9:e0:95:ba:16:8a:7c:6a:
a9:26:a6:ab:4b:66:2c:0d:60:ce:1b:67:e6:f2:4e:
2e:2a:6c:9a:7a:89:e3:50:e5:47:70:6c:d6:18:88:
01:55:93:82:32:47:ac:d9:22:07:95:c4:3f:53:d3:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F6:32:5A:1C:A9:B3:21:89:6F:72:70:DF:7F:78:5B:18:E7:49:34
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a2:2f:5a:39:81:09:0d:19:18:75:a0:2a:1b:3b:7a:a7:08:
44:73:15:ad:02:d0:3b:c3:15:46:37:4e:7a:03:92:b6:96:91:
71:e5:bc:43:0d:cf:da:d7:95:7b:40:97:10:40:fa:bb:9a:af:
5b:e9:c1:95:6b:fd:8d:f5:59:9b:ed:4f:27:53:6c:af:cb:c8:
d2:5d:76:bf:45:95:6e:6a:81:f4:f4:7e:dd:59:6d:a2:2e:84:
ad:c3:25:8a:af:4d:81:fd:5f:ba:6b:57:9c:bd:26:99:b3:93:
1b:b2:e6:62:48:98:a8:89:14:06:4b:10:88:a0:11:5b:c1:73:
16:13:f2:72:b7:f1:9f:44:3d:67:1c:c4:83:44:41:4f:51:a6:
d5:60:44:ee:96:5f:16:b1:1d:43:bd:56:a7:34:7c:d8:ed:54:
22:04:0a:fe:d6:b4:bc:14:27:df:2f:48:9e:38:93:f9:2e:d3:
33:7c:37:77:28:d1:86:13:71:bd:8c:33:ae:6f:9b:a8:75:4f:
75:6e:87:bf:71:0d:6c:e5:d2:a9:ea:34:4a:8b:f7:71:0a:b1:
52:fb:f9:6d:25:8c:ea:0e:b1:21:2f:27:16:68:eb:83:82:36:
60:9d:57:b9:56:8c:55:65:26:58:d7:ae:4c:61:dd:51:31:bf:
80:59:37:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:39 2025 by rpki-client