Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: UMjloyjMfiGF2Bi5jfeWOnnRoPbqaRY9nE2f/fRoJyA=
Subject key identifier: F2:4A:B9:61:AF:46:C8:F1:40:E1:0D:90:7B:0D:F8:38:4B:75:03:A0
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 0195E07D801CD0A8EBE9A2DA4DE8A95B317E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 11DB
Signing time: Sat 29 Mar 2025 06:01:15 +0000
Manifest this update: Sat 29 Mar 2025 06:01:15 +0000
Manifest next update: Sun 30 Mar 2025 06:01:15 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: rxxGYGM4ddgSd/CJFxbrDxTCpE4yA/OV6V8aHfhynm8=)
2: qetS73-OE2CSttiMvug0TDfkr54.roa (hash: f7CQ5AXCS66V7YOxpVoih8o6XmqrwIeswAWr26eRNls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:80:1c:d0:a8:eb:e9:a2:da:4d:e8:a9:5b:31:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Mar 29 06:01:15 2025 GMT
Not After : Mar 30 06:01:15 2025 GMT
Subject: CN=f24ab961af46c8f140e10d907b0df8384b7503a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:2c:bb:a6:73:da:34:51:ba:11:7e:06:6c:
27:4c:fc:98:d9:9e:ea:f1:39:1d:78:04:cc:dc:80:
67:79:54:d9:a0:43:82:bc:ae:6c:b8:d3:79:04:93:
8a:66:6d:66:c9:6c:30:41:15:91:62:d7:60:4c:08:
ca:93:95:0c:04:10:d4:f4:68:7d:34:2d:1c:8a:38:
b1:dc:d0:85:a3:6a:f8:36:af:ca:c8:e3:6f:a8:58:
45:63:f8:6b:fa:11:93:b3:8c:14:6a:28:f6:da:f3:
a4:c9:60:ed:4f:8f:e6:90:6f:be:b1:21:6d:0c:7b:
5e:bf:5a:0a:a2:c5:f5:86:8d:55:a7:77:d6:43:e0:
91:9d:b4:5c:05:ae:1d:36:92:45:85:dd:ed:30:d0:
f6:07:9c:c8:d9:ee:44:01:eb:b3:b9:4e:f9:9b:73:
1d:7f:69:95:a4:97:cc:30:af:7b:0e:8c:e7:c9:b6:
4d:60:87:f0:d3:13:d8:f2:83:c2:44:40:45:00:e6:
77:5d:33:95:86:12:6d:cc:1e:cb:85:70:c7:b8:3c:
e8:a2:e2:45:fc:20:96:68:20:ff:7e:58:31:3e:6f:
5d:81:ef:a1:e6:33:8c:69:a9:07:f0:68:fd:a7:28:
d2:ff:ca:47:22:32:14:ba:e1:c2:eb:53:d6:ec:cd:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4A:B9:61:AF:46:C8:F1:40:E1:0D:90:7B:0D:F8:38:4B:75:03:A0
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:ac:aa:04:a9:eb:b2:2a:75:9b:33:d4:5d:be:80:84:82:
a9:97:9b:b1:7f:9a:c6:f8:7a:ec:7c:f8:91:32:c6:2f:51:fe:
29:6d:8a:52:8c:41:62:bc:b2:b5:a5:ca:7e:ce:23:29:07:61:
42:a8:3f:41:21:22:f0:e1:5d:ed:9b:02:d5:56:c7:4a:16:41:
1c:6f:d6:04:04:88:92:82:2f:d3:53:fe:d0:9d:ab:f7:1d:12:
b2:f3:74:c3:62:d5:01:41:73:8e:6d:a0:b8:2d:ac:c5:67:e1:
d6:30:d4:64:43:07:b7:0a:a3:1a:ab:27:1e:3b:98:fc:30:98:
e3:2f:69:c8:02:b5:1d:8d:fb:08:3e:75:2e:37:45:ae:0d:1d:
b3:87:b9:ec:3b:c6:30:a5:f0:62:d0:fd:bc:35:84:f6:ad:ad:
ea:7b:ad:48:56:7c:e8:c6:1d:d3:91:3c:ce:70:3d:06:21:99:
7b:f3:9b:24:c9:88:6a:06:9f:2b:b7:fc:16:8a:e4:72:4e:7f:
4d:e5:93:a8:70:8f:36:97:0b:4c:94:d1:cd:72:e1:72:cc:6b:
5f:22:7c:c7:f7:27:d7:a2:67:09:95:b2:04:67:ca:88:e8:de:
70:8b:50:af:eb:56:58:c9:ea:6f:b5:8e:6f:a2:e2:de:b4:69:
70:fa:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:44 2025 by rpki-client