Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
File: 58NBW98cAUrhwY58_TPFbwGP7ug.mft (raw, json)
Hash identifier: 0P9M7hBuIOYWezu7lz1BpWoPCvEsgmDkJKHO9Do4zNI=
Subject key identifier: 66:2A:76:9F:3D:85:68:98:4D:3F:34:F2:BB:B4:D9:3E:A9:E4:6F:89
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial: 0194BBCED4A655EAEDB772D71AC440E1DDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: 58NBW98cAUrhwY58_TPFbwGP7ug.crl (hash: RSBCNR8yd2EqIi9bk+dNn80wWZx7W6+UtwLoHLDDnyQ=)
2: FiCeY_mBEBLBRbL14JMQjW_TEpQ.roa (hash: zmpLfs/691bdiYAVSZTFtEj2DvlsbiXT1z8hvns9wAo=)
3: k2bRbV7XqonRIs_2mgDBoumLm0U.roa (hash: qpwrCsvOi/cGB44FbKJwNJnBf33OxmuWQYiUCXxF50I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:a6:55:ea:ed:b7:72:d7:1a:c4:40:e1:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=662a769f3d8568984d3f34f2bbb4d93ea9e46f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:49:0c:b0:b5:b8:5f:df:96:e8:17:30:00:
90:68:c3:e4:e5:07:cd:cb:15:97:28:91:d7:9b:5e:
73:44:e1:60:94:3d:4e:38:b6:9d:3d:e3:6b:4d:02:
74:6a:6b:41:7d:ba:ab:8c:86:72:02:d6:f8:07:f1:
2c:7e:b0:77:2d:14:c5:d5:f1:5b:98:40:28:7b:54:
12:b2:1e:b0:02:a8:f4:28:36:47:4c:0b:a7:df:88:
e1:1a:e9:eb:5c:aa:2f:40:28:51:8d:8d:d9:9d:7e:
b1:16:85:f6:26:92:42:f8:64:bd:45:ee:0c:4f:b8:
1b:cd:08:42:c8:f0:03:cf:15:20:13:aa:b7:07:27:
66:20:24:e4:d2:d2:20:7e:a2:a4:78:9d:11:fd:c8:
72:f0:66:97:b8:c2:29:96:24:bf:13:c8:7d:b2:9e:
da:6f:51:a8:b5:49:a1:44:73:da:73:aa:c9:f3:23:
f3:66:b0:d4:7e:77:87:4f:60:fa:c7:77:8b:d3:b3:
b8:a0:e3:86:0f:c6:a9:18:81:1d:05:f2:45:2b:e9:
8d:c2:ff:76:78:88:80:a5:bb:d0:42:19:43:6f:c0:
f0:83:96:66:32:0c:3c:78:fc:d4:0a:eb:c9:74:70:
57:3d:9d:d4:dc:f0:9c:29:35:49:5d:da:42:2e:14:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:76:9F:3D:85:68:98:4D:3F:34:F2:BB:B4:D9:3E:A9:E4:6F:89
X509v3 Authority Key Identifier:
keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:8e:b7:c7:e3:ef:95:74:fb:10:14:79:86:de:77:aa:d1:
4c:89:d0:c8:15:f7:0c:d9:ec:89:66:31:04:9a:9c:5c:e9:a5:
bb:74:6c:a6:0d:17:fd:4f:2b:3e:eb:74:b0:ea:22:c6:99:45:
ee:d3:14:cc:f6:ac:54:96:31:e9:54:e2:7e:82:42:70:92:bc:
4b:03:84:ca:03:a6:8b:c0:b6:d9:a7:7f:4b:29:52:18:13:42:
a5:17:f7:e1:38:ae:e4:3c:00:ab:5b:e2:7e:ed:b3:ff:5b:80:
6d:40:3e:b1:81:04:44:a8:22:89:20:dd:8d:8a:88:93:d3:39:
3d:2c:fa:10:7c:c5:81:b6:a7:f7:26:f9:d9:b3:bd:95:b5:02:
25:bf:37:af:e1:a2:1f:b7:7f:13:a3:6f:8a:d5:47:2f:41:e2:
02:5e:b9:4c:c0:6a:99:12:32:6d:37:5b:f4:c9:db:75:15:cb:
23:5c:08:ff:5e:ff:10:8e:25:4d:ec:f7:ee:3c:22:8f:68:bc:
89:01:fc:3e:5a:b5:0a:a7:3e:cd:d2:84:0c:82:9c:71:ad:57:
88:b5:c6:8e:fa:c8:12:10:84:b5:53:aa:77:76:2a:8f:79:cb:
a7:cc:93:2f:6f:e5:9b:1c:94:bf:9c:4b:f2:5f:61:98:16:08:
4a:63:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:06 2025 by rpki-client