Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: 4nDjY8AbqyEinBOKTKPxtD2GfC5U22VIf7HvlV1P2vg=
Subject key identifier: D7:C1:E7:1C:DF:9B:5A:FF:A3:26:AA:41:B8:08:AE:0A:EB:E4:E3:2B
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 0194BD4EA2123CA70FE823D8640B3D49965F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: LgelsY-16hZE8VmZ4UWScnrAkQA.roa (hash: 5MPF2K6ZagDsXMwY0mVJRSAJCcCewM4ZcbU+TqCGJzs=)
2: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: 72INZwjETdyTG9YRGHU/5m+/o8tiKYyB4s8gwIsnmo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a2:12:3c:a7:0f:e8:23:d8:64:0b:3d:49:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=d7c1e71cdf9b5affa326aa41b808ae0aebe4e32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:fd:fc:5c:46:fb:59:e9:20:8a:5d:e0:b9:
34:9a:08:be:35:06:d9:3b:99:e6:88:c1:5a:99:f1:
54:d3:e3:35:6c:33:4b:29:1e:f5:31:20:a5:0b:6a:
70:30:7d:1f:b4:12:08:2d:19:2b:3a:66:83:98:c9:
59:54:25:78:05:bb:32:2f:60:6e:74:0d:43:59:d0:
63:ee:f8:be:6e:78:f8:02:5e:0b:a4:65:36:7d:ee:
1d:b5:19:62:68:f9:48:ad:94:a7:7f:1b:9c:6b:96:
ae:38:47:74:d4:b6:b4:3b:d5:3d:d3:fe:8a:10:a4:
6d:00:3e:a9:81:60:29:ad:88:75:0b:df:f2:ec:94:
e3:b1:d0:de:ff:df:15:56:20:03:b7:34:e0:2a:c5:
04:a2:e5:77:37:ef:a6:15:9b:40:21:3e:e2:09:90:
61:5e:48:08:45:94:08:e8:08:9d:02:9a:38:d2:db:
9d:7e:11:20:2a:28:50:70:8e:49:40:34:f5:78:07:
47:51:94:14:6e:8a:6f:22:56:83:4e:be:78:48:79:
fa:c8:3e:b0:d8:d8:bb:34:d3:cc:cf:36:87:21:86:
63:b0:f5:3f:0c:f2:f4:f9:cb:bf:ee:dd:30:b2:69:
3f:d5:ce:72:cc:df:a2:a1:5b:f7:f1:ca:cf:40:86:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:E7:1C:DF:9B:5A:FF:A3:26:AA:41:B8:08:AE:0A:EB:E4:E3:2B
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a0:81:f2:32:77:36:f1:ff:4f:6c:c6:9a:a5:ea:36:1e:2c:
21:b6:7e:7a:7c:d8:85:e4:c7:e0:8f:b7:82:dc:a2:f8:a9:ce:
4c:31:0b:37:a4:f2:a2:5e:a4:8e:53:79:e0:cd:d3:19:04:7a:
dd:1e:9b:f1:7c:45:09:81:8d:2c:d0:9a:d0:c2:e7:97:51:4e:
69:99:7c:4a:29:25:d6:81:48:f3:78:fb:27:6d:97:a3:20:85:
22:ca:2d:96:30:77:c6:8e:24:60:c0:1a:97:c6:d6:b7:70:3a:
ad:dc:0b:e0:d2:ce:55:09:63:2d:ec:7d:9d:c8:8c:30:6e:70:
70:72:34:a4:7f:bb:95:a6:02:2b:e9:83:97:c7:08:cc:6c:6c:
83:20:e3:e2:f0:bc:a8:2a:97:dc:06:c1:31:25:39:9b:43:c7:
29:2f:06:02:6d:65:99:f4:4e:a1:29:93:ec:a8:52:c2:e2:9e:
92:3f:2b:12:3f:f4:7b:68:25:66:bd:ac:c5:8c:39:cf:c3:89:
31:dc:b8:38:fe:a5:0c:72:06:60:f4:7e:65:48:25:c5:c5:5b:
c0:ef:33:87:23:c3:14:dd:83:d4:a6:df:16:58:e1:69:83:2a:
41:4c:20:0d:24:3d:24:43:06:73:d7:8e:5c:a0:64:d1:56:82:
6c:e1:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:07 2025 by rpki-client