Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier: 0I0JepITGNosEtWoU+pMpQBDyvrijtgQ0OyYYF9ung4=
Subject key identifier: D8:30:47:8A:B1:6F:31:92:3D:08:A9:23:09:3D:C5:9A:59:C8:6A:D5
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 0194BCE0AB9EA25D1AFA42DB10560F436CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: jXwKJaJmPk/tFX3RnxMP3BNKZOltaU5fqFpYs0CgUi8=)
2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:9e:a2:5d:1a:fa:42:db:10:56:0f:43:6c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=d830478ab16f31923d08a923093dc59a59c86ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:3d:60:db:b4:0c:f1:97:af:41:f7:a2:8a:
66:b1:32:3b:4f:0d:a6:78:a0:7d:04:7e:8a:d0:91:
e3:e5:32:bf:71:e3:0b:56:04:1b:c6:63:b4:8a:2a:
54:7c:31:9f:13:bb:cb:82:51:2c:b9:70:95:e1:61:
29:8b:15:d8:eb:b4:2b:a8:ff:87:f3:c3:6f:78:3a:
1e:5a:64:df:aa:3c:43:1d:9c:6b:b8:bd:79:48:a6:
bd:ae:01:e5:b4:38:ab:ad:1a:a6:40:47:15:92:28:
9d:d3:48:75:96:ba:d5:fc:ac:e8:df:e0:6c:d3:62:
03:47:27:bb:49:01:c6:00:18:69:5a:0d:9e:5b:e9:
ed:aa:41:a9:87:63:97:e3:b8:3c:69:fd:3e:5f:d9:
0e:b6:14:0c:91:ff:f2:f9:33:6d:49:24:36:09:47:
17:e6:ec:d1:80:9b:61:ed:c0:47:85:b9:ec:7c:a6:
e3:8e:f5:c1:3c:ec:1a:5c:5c:5c:f3:0e:e2:05:73:
98:06:e6:31:65:db:0c:65:56:80:15:07:79:96:c0:
86:21:4f:ac:9c:49:07:9f:1c:e6:dc:81:24:22:0d:
ec:9e:9a:61:32:06:39:59:de:f6:fc:28:1b:68:42:
11:20:87:8a:cf:92:71:13:00:59:05:08:46:b7:28:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:30:47:8A:B1:6F:31:92:3D:08:A9:23:09:3D:C5:9A:59:C8:6A:D5
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bf:e3:1a:53:03:88:a2:ad:c2:13:7b:30:9e:90:66:a2:3e:
75:3f:90:7b:0b:7f:e3:38:73:4f:18:bb:f1:8b:db:cc:7f:d0:
f3:9d:2b:59:9b:e4:b6:2f:f0:de:ab:29:ec:4e:91:a0:3e:44:
37:de:04:eb:fe:8a:69:98:e9:35:23:61:92:15:80:64:e0:d7:
b2:db:dd:25:f6:3f:97:9a:43:e0:62:ca:ad:17:af:3a:54:30:
fe:b3:9c:a0:90:7a:1a:0e:23:1d:32:d8:34:b3:b8:0c:b0:ce:
bc:8f:22:0d:35:76:bc:ac:09:0c:f6:d7:51:0a:53:d8:b2:fb:
7b:33:3e:0b:ad:ed:0e:48:cb:b7:95:b4:a6:e7:3c:3a:11:7e:
60:9f:36:f8:84:24:53:17:0e:6a:4b:92:f0:18:73:61:cf:b5:
56:09:91:36:dc:08:ca:56:7c:b1:77:34:37:ba:fc:29:9a:c9:
82:53:89:9a:8f:8d:9e:87:57:b1:a5:1f:b8:66:31:44:9a:aa:
01:0a:44:68:fc:2e:26:43:d2:99:c9:a1:d0:a1:8c:09:d4:23:
07:1f:e5:62:1c:88:96:d5:46:fb:47:bd:a2:0a:4f:a8:63:56:
8c:e0:7b:0f:5a:42:f3:f8:98:29:0c:78:f9:01:b9:31:07:58:
68:0e:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:05 2025 by rpki-client