Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
File: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft (raw, json)
Hash identifier: HvdgABSr+t6k0DkM718fLjUBqsJR3f49vdkCHP7oQWo=
Subject key identifier: 83:3A:A3:39:AE:1D:66:2A:46:A1:34:63:5A:05:9A:26:0A:48:43:F8
Authority key identifier: 58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
Certificate issuer: /CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
Certificate serial: 64610E0D23FA32BC63212AB6D85A082C35F81CC4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
Manifest number: 023A
Signing time: Thu 01 May 2025 11:32:06 +0000
Manifest this update: Thu 01 May 2025 11:27:06 +0000
Manifest next update: Fri 02 May 2025 11:51:06 +0000
Files and hashes: 1: 326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa (hash: 69RcUidZnQ+LqgABsH+Kh3UWsC9vqAhVCCjeesgrVBw=)
2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl (hash: s3XCqafNonh8TVjl/j/XA0ueXWpbccvyz0SKpKzIW3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:61:0e:0d:23:fa:32:bc:63:21:2a:b6:d8:5a:08:2c:35:f8:1c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
Validity
Not Before: May 1 11:27:06 2025 GMT
Not After : May 2 11:51:06 2025 GMT
Subject: CN=833AA339AE1D662A46A134635A059A260A4843F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:10:af:32:fa:eb:6c:93:a4:6e:0a:be:db:
89:c4:75:f4:6a:d0:41:b2:66:4b:87:7b:05:e7:6a:
8a:bf:e4:54:a4:e1:ef:a5:99:7a:39:93:ec:40:29:
12:b4:ef:c5:a6:af:9e:09:96:70:2c:28:0e:cc:9b:
39:19:54:be:d0:bc:ff:fb:11:d2:3a:6b:e7:19:3a:
5b:14:6d:ac:e2:e6:e2:02:c6:4a:ca:e2:9c:c1:01:
47:a5:0b:3b:a2:9d:ac:e8:20:23:3c:c8:ab:f0:68:
9e:a8:90:b1:f7:08:22:c2:0c:fd:36:be:70:b4:39:
2b:4a:d7:57:78:37:4b:62:7a:38:ed:81:fe:c4:f0:
84:71:44:b4:3b:b1:ca:c7:af:10:ba:85:5b:33:b9:
0d:79:8e:14:b0:0f:87:2f:90:37:c1:93:4c:cd:44:
ab:90:1e:80:60:c5:43:f7:d4:69:44:03:ac:ce:0f:
bf:d8:a7:3e:fc:5b:98:e8:1a:83:2b:de:65:46:5a:
b3:a9:4b:9b:0d:f1:0e:98:15:11:f3:f1:21:47:3b:
04:4c:b5:f1:76:33:05:ff:29:e3:cf:de:8b:5b:7c:
c3:38:cf:66:74:d5:51:1a:07:7f:1a:d0:60:f4:4f:
e2:13:15:f9:87:1e:3e:e2:d9:0f:49:69:7e:b8:ba:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3A:A3:39:AE:1D:66:2A:46:A1:34:63:5A:05:9A:26:0A:48:43:F8
X509v3 Authority Key Identifier:
keyid:58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f6:6a:f7:c0:83:f0:84:0f:54:44:af:72:66:8c:01:ab:56:
35:22:76:f4:3c:7d:cb:69:c6:a4:d5:6e:a7:60:47:34:47:9b:
b7:44:8b:c6:da:9e:d9:92:43:cd:51:60:8e:30:86:cd:d4:4f:
c2:8f:11:26:eb:0c:21:53:dc:49:2c:28:63:b5:9c:f7:2a:77:
85:a6:4d:d6:56:d0:f5:ea:a6:f0:9e:c4:dc:27:73:b4:76:7f:
e3:68:af:c3:88:7b:ff:12:8c:9b:29:5c:cf:df:eb:d0:c6:4c:
c1:59:a7:2f:e1:93:d4:60:70:ba:7f:a9:a6:a1:c6:65:fc:cf:
f8:10:7d:8a:00:3c:42:e6:46:23:a8:82:e6:ad:a9:9b:32:97:
64:42:95:2b:54:59:65:69:d6:81:03:b5:04:dd:da:f0:33:e8:
14:75:f6:17:56:ec:b9:e4:b2:87:9b:bd:6d:f6:ac:7f:9f:bc:
51:2b:7b:4d:a7:11:7a:03:93:14:ff:5e:57:ee:94:6a:f0:80:
2f:22:96:80:6a:56:89:34:c5:2e:c7:af:45:ed:d7:a9:ec:28:
3d:0d:67:02:01:51:ab:de:b8:1d:6a:2d:37:12:51:21:77:7b:
e1:31:a4:a1:d4:a7:46:85:f2:44:cc:6d:b7:64:b1:a0:03:a4:
55:d8:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:23:57 2025 by rpki-client