Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File: 58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier: +ZFpIRV60HvM23dmGE03SCdyV/wEn+ivQdKWmwv992E=
Subject key identifier: A2:1F:57:A0:8C:17:91:91:35:18:34:B0:BB:53:6D:EC:A9:BC:33:BB
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial: 0194BCAA297A2B94602885EF3E52D2DC00C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: r85TWvPTzmZkrYI7Eef0LWZa9d4p9IjjSFHZ4YmGmp8=)
2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:7a:2b:94:60:28:85:ef:3e:52:d2:dc:00:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=a21f57a08c179191351834b0bb536deca9bc33bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:9a:6a:0c:21:d4:04:c1:fe:c5:ac:9d:d7:
4d:24:87:a4:45:0e:4c:e7:05:d4:55:8e:c3:78:e0:
23:3e:a8:9f:49:b0:4f:25:16:8c:fb:4a:f6:d4:c8:
51:7c:c3:64:c5:48:62:9c:7d:d8:bc:ed:1c:1d:ea:
bc:81:f9:df:0c:ef:9d:a9:b8:9b:51:26:2c:60:1c:
7d:cc:5d:00:66:0c:8a:d8:87:73:44:92:01:4a:e0:
26:46:fe:13:77:22:0f:b7:1b:75:91:12:24:dc:0a:
92:32:52:6b:cc:a9:a7:87:09:09:6f:d6:3e:88:a8:
22:d6:30:8e:a7:b6:7b:47:9a:1d:90:8e:80:c6:4c:
5f:70:0f:db:e7:7b:16:05:0c:fb:85:18:37:6c:72:
5b:66:d2:f0:fa:5d:81:09:d9:ad:18:3a:b1:ce:92:
12:85:1f:80:da:07:06:9b:ed:cc:5e:eb:43:05:c6:
eb:48:2d:76:4a:26:32:3c:c0:fc:c3:d4:d0:ff:af:
32:6e:25:67:b5:c8:85:7d:19:b5:da:8b:08:03:25:
78:e5:8b:90:1d:95:aa:3f:49:0e:56:d7:bd:ca:00:
23:03:16:69:d4:d5:31:15:37:f1:60:e0:b1:60:34:
99:85:07:19:d2:82:3b:97:06:a5:52:f9:ce:35:be:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:57:A0:8C:17:91:91:35:18:34:B0:BB:53:6D:EC:A9:BC:33:BB
X509v3 Authority Key Identifier:
keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:18:5d:44:33:f5:1d:13:db:8c:a2:e3:35:e9:14:ab:39:
0a:51:41:44:9d:29:88:7e:3e:b8:c3:e1:47:2f:d5:27:12:19:
6d:1a:c6:51:cf:9b:8f:81:2b:62:0f:6a:05:92:45:3f:c5:c9:
55:53:99:0f:96:71:3b:fd:f6:13:60:e4:4c:ea:f9:24:52:e7:
e8:e5:75:db:3a:b4:c6:37:5d:0e:52:31:8e:12:44:f4:6f:74:
ae:41:dc:66:4e:65:b4:8a:83:f9:92:fc:b4:32:46:8a:8c:41:
cf:5d:66:39:16:2c:eb:f9:e6:3e:e4:bd:e3:14:d9:cf:cc:ff:
26:8e:04:41:42:fe:d0:3a:bc:40:90:b4:98:f8:ca:88:44:75:
7f:ed:ac:a1:66:cb:b9:7d:1f:ca:a0:16:39:41:7c:ac:20:5b:
f5:01:d5:21:48:2c:17:16:f8:8e:53:c0:6b:55:2d:34:2e:b4:
30:01:24:cb:d9:a5:5f:29:af:4d:2c:b5:06:33:15:db:e1:a7:
25:1b:63:f9:db:98:19:0d:bc:52:9a:d6:ed:48:2c:06:45:cc:
93:62:e8:16:78:1b:43:0f:5c:63:c7:77:d6:4d:45:6d:00:4b:
05:06:3f:10:fb:b5:1c:00:04:c8:64:e0:82:33:82:2a:7f:01:
c6:25:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:42 2025 by rpki-client