Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: UufRuO4Wwa7zeRDAo++7OxUBa+GhWmIdLk6Io3mt8hk=
Subject key identifier: CD:67:69:1C:75:82:B2:97:44:10:B6:F6:70:45:28:27:26:DB:04:D8
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 0194BD855A77550EC9F574BB1C171BE14277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 1319
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: w/NRo01nJPXN+hGSSGADfZvrY+v5f47xt3dUySSaggw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5a:77:55:0e:c9:f5:74:bb:1c:17:1b:e1:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=cd67691c7582b2974410b6f67045282726db04d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:cf:08:1b:db:a6:85:84:bd:01:c5:80:e1:
c7:90:01:ac:58:b6:6c:69:42:6c:ae:55:c0:eb:29:
5f:dd:aa:d9:22:f1:32:ab:80:5d:1f:7b:3a:23:a2:
3d:28:ef:ce:e1:01:f2:81:5b:58:07:c8:71:39:04:
20:e6:c6:ea:f2:d2:ef:a2:d2:8e:ec:93:d0:99:ec:
60:97:48:71:40:7a:ba:bb:d3:7a:40:d5:75:bf:94:
ce:ea:13:bb:d3:6e:3c:c3:76:92:2d:ab:16:28:90:
e8:e1:50:ef:68:93:4a:b4:f9:48:ef:5d:30:a4:ea:
a6:92:b5:d3:e3:f4:04:6f:67:d2:a3:4d:40:00:96:
83:18:70:ad:bd:71:05:7e:51:80:e6:a5:e9:34:1a:
6a:2d:8c:05:9d:ac:48:7b:96:dc:53:77:28:de:4f:
5d:2d:79:78:37:89:6d:6f:2c:60:6a:94:07:d5:04:
67:1c:cf:e3:97:dd:c3:15:7f:7d:90:91:56:71:93:
2f:dd:f5:3c:dc:53:05:a3:ec:73:34:67:1e:b4:c1:
4f:c8:c0:e1:3c:c7:ef:20:f4:44:a1:3f:47:e8:77:
67:46:13:c6:96:e9:14:bb:f3:90:b0:c1:d2:32:3e:
95:85:74:02:9b:ab:f0:7e:2a:e7:09:55:76:bf:3e:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:69:1C:75:82:B2:97:44:10:B6:F6:70:45:28:27:26:DB:04:D8
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f3:ac:4c:4a:58:60:12:32:2a:93:aa:31:a3:e3:be:40:90:
d5:f4:0f:44:14:3b:f0:11:60:b8:b1:d7:3c:b6:b4:c0:35:b5:
3e:91:51:c6:ad:6b:29:76:98:35:e8:fd:1f:58:2f:66:b3:e0:
4c:56:1c:61:08:0b:24:4b:b9:e2:7a:78:01:a3:93:ea:de:7b:
d3:b2:36:14:e2:f2:45:fb:30:2e:c5:94:47:59:44:ad:65:2c:
0c:05:78:31:83:88:b7:69:ad:d6:ea:b4:57:f6:28:b1:60:9a:
a8:cf:8a:77:6d:79:bf:9c:dd:f4:51:72:ca:23:c6:39:7b:8d:
a8:9a:f2:3b:b2:51:df:03:12:ea:43:48:90:66:11:eb:d3:ad:
a5:20:bf:24:28:b2:6e:aa:d7:f1:6d:da:df:00:90:2d:29:a1:
2f:53:8f:fa:06:7f:3d:84:c1:fb:19:73:14:a3:94:67:22:d7:
5b:85:19:14:8c:b7:c2:36:78:eb:ae:1a:3b:87:76:7d:28:f9:
c1:be:1a:46:77:31:8d:9b:f0:3a:75:26:ce:fb:e0:d9:66:fa:
45:78:92:38:33:27:0b:75:a3:6e:b5:da:97:98:6e:cd:a7:4a:
7f:17:15:04:53:8d:7d:8f:3b:49:0e:02:5f:3c:50:47:65:a8:
0a:11:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:40 2025 by rpki-client