Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/58hKSL4W_A3rT94RhpI35klUh00.mft
File: 58hKSL4W_A3rT94RhpI35klUh00.mft (raw, json)
Hash identifier: TObVKR5tbO9k64L9Z6hQ/nzaY8VrOr8JJld8sFb9wMc=
Subject key identifier: 63:47:B7:B7:E0:11:92:70:CE:E5:14:05:52:35:1B:74:BF:DC:76:57
Authority key identifier: E7:C8:4A:48:BE:16:FC:0D:EB:4F:DE:11:86:92:37:E6:49:54:87:4D
Certificate issuer: /CN=e7c84a48be16fc0deb4fde11869237e64954874d
Certificate serial: 01892A96D368E002AE87817478A673599B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58hKSL4W_A3rT94RhpI35klUh00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/58hKSL4W_A3rT94RhpI35klUh00.mft
Manifest number: 0878
Signing time: Thu 06 Jul 2023 09:44:34 +0000
Manifest this update: Thu 06 Jul 2023 09:44:34 +0000
Manifest next update: Fri 07 Jul 2023 09:44:34 +0000
Files and hashes: 1: 58hKSL4W_A3rT94RhpI35klUh00.crl (hash: agkQHh2bsqdu4XXXoGHgdfW7oQZPNAVUylEG8hWwdEk=)
2: cZpoktWLrijz92kow9ppR_cypGY.roa (hash: 6GSluqzZubt03jm6Wal+0rj/5/LkJxP88xi9abtZNZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:96:d3:68:e0:02:ae:87:81:74:78:a6:73:59:9b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c84a48be16fc0deb4fde11869237e64954874d
Validity
Not Before: Jul 6 09:44:34 2023 GMT
Not After : Jul 7 09:44:34 2023 GMT
Subject: CN=6347b7b7e0119270cee5140552351b74bfdc7657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:34:f9:94:e7:7c:cb:22:11:85:63:11:57:
93:bb:0c:63:67:7d:26:b9:a5:6e:89:33:3f:a4:46:
06:18:09:8d:e1:15:b6:ea:29:c5:d3:7d:8d:39:21:
26:eb:d7:bf:e7:f5:e6:0d:8b:28:cd:2c:b1:2d:a8:
34:ad:cb:ec:c7:a8:09:f9:ae:aa:61:02:11:3c:6e:
7e:59:70:9e:42:a4:51:73:e1:49:83:9e:70:4f:54:
97:e3:50:58:7b:eb:54:28:cd:a3:b3:d7:b6:af:b7:
17:85:ba:88:e4:f3:4d:14:30:a9:03:03:95:fa:53:
84:80:10:91:f6:2d:90:1e:66:4c:4c:d1:4c:66:aa:
10:f4:9f:38:8c:2c:fc:80:56:dd:44:cf:38:87:f9:
af:09:f4:16:46:26:43:ff:0f:3a:86:49:09:b4:d6:
dc:1c:7f:7e:a1:44:3e:73:ba:61:d5:b4:07:d1:70:
ad:4b:44:1a:de:35:72:d8:9f:e2:35:2d:bf:db:b2:
a2:a1:24:29:42:7b:ec:c4:b7:2e:99:83:bf:29:3a:
dd:64:ec:81:fa:f7:74:36:2e:5d:cc:f3:70:79:bd:
b3:37:07:2c:b7:44:c0:60:76:ba:90:7e:ec:3c:f0:
b1:9d:e7:72:74:3d:db:0f:85:1c:de:bb:36:2a:25:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:47:B7:B7:E0:11:92:70:CE:E5:14:05:52:35:1B:74:BF:DC:76:57
X509v3 Authority Key Identifier:
keyid:E7:C8:4A:48:BE:16:FC:0D:EB:4F:DE:11:86:92:37:E6:49:54:87:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58hKSL4W_A3rT94RhpI35klUh00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/58hKSL4W_A3rT94RhpI35klUh00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/58hKSL4W_A3rT94RhpI35klUh00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:25:b5:dd:9a:cd:3b:fb:f9:2d:6d:04:9f:a1:01:29:53:31:
85:a8:76:15:75:a5:01:be:5b:59:13:88:4a:9f:d7:ee:d1:51:
38:5c:e5:83:cc:8b:71:0f:0d:04:6c:50:87:6f:74:94:0f:4d:
6f:51:33:b1:42:9a:13:d2:0a:94:1f:55:e3:ac:7d:51:c5:4e:
50:43:e2:18:9b:55:cb:f1:f1:6a:4c:85:53:71:de:5f:5b:c5:
4a:d0:5b:b9:50:1d:d8:b3:bb:46:65:38:05:5e:5d:0d:b9:9c:
6a:1c:7b:e0:25:07:f2:a6:7d:5c:40:24:14:14:5a:f4:b6:c5:
58:b6:4a:fa:a4:b2:3f:dd:1b:ab:52:05:34:06:c6:f6:67:16:
f8:b2:5d:e6:80:1e:ca:24:11:1f:8f:c5:52:ff:83:9e:f8:02:
1d:a3:8f:48:9b:cc:4d:0c:9c:03:c4:df:7c:b6:39:e5:93:80:
8d:40:a2:69:81:9e:af:cb:9d:ca:c8:55:61:b9:98:4a:38:81:
3c:93:af:14:2a:a7:ec:fa:72:95:58:3c:96:71:8a:25:a6:3b:
f2:8d:ef:67:b2:3a:25:ce:89:0d:c1:ab:84:d2:79:43:32:5e:
cc:01:3f:ab:b1:41:31:ce:c5:c7:b9:0f:fb:da:28:78:62:79:
9d:77:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:14 2025 by rpki-client