Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: DycveW+kzAuwZvKhFchGsZntq3YOja2A7t2eCQJG6Ng=
Subject key identifier: 24:3F:71:4D:1D:16:9F:4B:2F:FC:12:B0:E8:33:20:49:0A:B1:35:6A
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 0194BD85A40CC5ECCEB67EB481C366C0F2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: k+jMQo+Iqc2gMSmUTCXP4whu+bfpOTcfjBHhrQBJVj4=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a4:0c:c5:ec:ce:b6:7e:b4:81:c3:66:c0:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=243f714d1d169f4b2ffc12b0e83320490ab1356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:9a:6a:e9:71:b8:a9:c3:81:3d:2e:cc:7a:
a2:1d:a4:9e:79:9f:ca:69:15:e6:43:b1:eb:d8:89:
8d:9f:70:6a:db:da:83:c7:b5:30:10:55:7f:4d:a2:
48:a3:fd:8a:10:45:e8:36:3c:d6:bd:73:e6:89:6e:
dd:81:00:61:d0:e8:9b:6e:ba:ea:58:b1:b9:93:2e:
c1:e7:3a:00:eb:41:07:35:5f:38:a4:2f:37:51:af:
71:a2:f3:8d:ef:7b:11:b2:94:06:88:fe:d2:44:8e:
b1:f9:61:86:67:94:e7:3c:94:5e:57:a5:de:c9:ff:
27:40:a5:92:8f:1d:e4:57:9c:ac:e3:a2:1b:ea:b4:
b6:c5:3b:ac:1d:01:01:63:bf:00:93:37:84:e3:7f:
f8:38:ca:d3:86:9d:ce:cf:41:6f:cd:83:82:57:77:
02:6c:07:d3:68:fd:38:dd:ca:75:d6:eb:a2:07:6b:
2a:bb:ec:fe:51:cd:7f:64:5d:52:d8:9e:39:6c:ac:
9a:3a:94:46:79:3e:a0:42:3f:39:07:08:d8:12:d8:
a4:1a:d6:b6:bd:43:31:f0:41:83:0b:48:b8:17:eb:
29:7c:7c:2c:d6:ca:15:ae:3e:53:0f:15:50:0a:0d:
7a:08:4e:9d:7c:e8:cf:2c:b1:48:45:c4:21:6e:d6:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3F:71:4D:1D:16:9F:4B:2F:FC:12:B0:E8:33:20:49:0A:B1:35:6A
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2b:3d:9e:92:e6:fb:18:10:22:69:55:64:a3:7c:04:3d:51:
7a:2b:1a:28:4b:8a:9d:ed:7f:49:4d:41:9a:9d:c1:92:61:90:
fb:2f:65:42:4e:c5:11:78:93:ce:e3:b9:fd:56:46:c8:dd:f3:
bf:a8:7d:41:d0:34:72:59:5b:0d:c5:20:4b:e5:7f:d6:95:9f:
f0:09:ea:34:b0:14:38:62:00:a8:58:5f:32:aa:73:e8:c3:5c:
d8:a2:e1:a4:b5:f0:09:49:cd:a9:bc:d2:26:29:c8:0b:f0:c0:
77:d4:cf:c8:06:0c:e6:0f:99:d5:90:14:74:37:7e:8e:62:72:
df:06:25:3a:27:39:62:a2:76:99:be:84:5f:28:cc:90:c7:20:
38:5f:de:f9:42:bc:3c:6d:5b:d9:95:96:81:63:e0:ae:44:04:
1e:1f:ab:88:08:ba:bd:01:3a:f4:90:f0:65:8b:76:dd:9e:10:
83:4d:38:0f:82:6b:1c:19:83:13:34:2e:86:cb:2c:61:c8:19:
23:a8:30:6f:79:18:9c:45:f7:26:62:78:fa:e4:f6:61:67:2b:
75:74:9f:05:47:2d:45:db:ae:43:b6:fe:2b:b3:15:4f:f4:1c:
f9:74:4c:2a:1e:16:1c:c9:67:f5:fb:f2:19:89:89:cb:c2:df:
91:84:98:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haQMxezOtn60gcNmwPLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTBkNThkNzdiMGZhNWRjZWM0ZjQyYWU5NmYzNDdiYzgw
ZGFhM2UwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
EygyNDNmNzE0ZDFkMTY5ZjRiMmZmYzEyYjBlODMzMjA0OTBhYjEzNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojWaaulxuKnDgT0uzHqiHaSeeZ/K
aRXmQ7Hr2ImNn3Bq29qDx7UwEFV/TaJIo/2KEEXoNjzWvXPmiW7dgQBh0Oibbrrq
WLG5ky7B5zoA60EHNV84pC83Ua9xovON73sRspQGiP7SRI6x+WGGZ5TnPJReV6Xe
yf8nQKWSjx3kV5ys46Ib6rS2xTusHQEBY78AkzeE43/4OMrThp3Oz0FvzYOCV3cC
bAfTaP043cp11uuiB2squ+z+Uc1/ZF1S2J45bKyaOpRGeT6gQj85BwjYEtikGta2
vUMx8EGDC0i4F+spfHws1soVrj5TDxVQCg16CE6dfOjPLLFIRcQhbtaKYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ/cU0dFp9LL/wSsOgzIEkKsTVqMB8GA1UdIwQY
MBaAFDJQ1Y13sPpdzsT0KulvNHvIDao+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUt
M2UzMGE0YzRiODI2LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUtM2UzMGE0YzRiODI2
LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSs9npLm
+xgQImlVZKN8BD1ReisaKEuKne1/SU1Bmp3BkmGQ+y9lQk7FEXiTzuO5/VZGyN3z
v6h9QdA0cllbDcUgS+V/1pWf8AnqNLAUOGIAqFhfMqpz6MNc2KLhpLXwCUnNqbzS
JinIC/DAd9TPyAYM5g+Z1ZAUdDd+jmJy3wYlOic5YqJ2mb6EXyjMkMcgOF/e+UK8
PG1b2ZWWgWPgrkQEHh+riAi6vQE69JDwZYt23Z4Qg004D4JrHBmDEzQuhsssYcgZ
I6gwb3kYnEX3JmJ4+uT2YWcrdXSfBUctRduuQ7b+K7MVT/Qc+XRMKh4WHMln9fvy
GYmJy8LfkYSYZA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:13 2025 by rpki-client