Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
File: MklHwK7O_of525bltFvrEK65h6Y.mft (raw, json)
Hash identifier: viN0Tlbxb26EkSfdFjZCn8eYLFHrtP1g8Ii9xD2nRdQ=
Subject key identifier: EE:B7:27:9D:E9:DB:06:2C:5D:69:84:CB:37:2F:9C:91:87:FD:0D:BC
Authority key identifier: 32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
Certificate issuer: /CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Certificate serial: 0194BD4EAA39C68EC444A2729D7C90AF683E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
Manifest number: 093F
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: MklHwK7O_of525bltFvrEK65h6Y.crl (hash: AyQjQsHsUA9OQ/PiP9I3KOtCLzBygwZsEtsL32Mbc2A=)
2: TnUa9Ik5MIEZFyAPb51t3lEzTlw.roa (hash: VAA3uHujk9bmdBTaro78iFRxhf25M26lepAeKhwVT4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:39:c6:8e:c4:44:a2:72:9d:7c:90:af:68:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=eeb7279de9db062c5d6984cb372f9c9187fd0dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:0b:58:83:86:4e:3b:82:a4:4f:30:73:4b:
48:ca:0d:37:ed:0e:67:10:3d:e0:1f:38:6a:0f:2e:
40:c4:c1:43:10:63:a9:f0:98:f5:5f:c7:38:b6:d0:
03:3e:6e:b4:c0:cd:0e:9f:49:65:8d:ad:f0:25:68:
e9:83:0a:02:b5:d2:db:17:70:44:15:fc:50:48:ca:
e0:55:aa:c4:05:da:5c:22:ce:a2:86:8d:4e:72:7d:
8c:35:de:28:7d:7d:77:ce:0f:12:48:75:3a:54:de:
8f:6f:5b:d5:c2:0e:a5:94:61:68:56:0e:27:89:91:
b2:b2:3d:87:fb:06:6e:39:c0:52:ba:b7:98:64:67:
a4:5d:59:ae:3c:a1:d4:a1:d5:b8:e5:89:c1:58:bf:
b0:8b:23:33:4c:4b:00:58:49:e5:f5:6b:49:11:3e:
95:9a:f2:26:f0:ac:02:7c:22:52:6d:22:3b:9b:90:
fb:4b:2f:18:02:2a:46:3d:06:6d:c1:8e:45:87:41:
21:1f:82:ee:0f:31:51:b5:de:e9:a1:5e:67:ed:61:
4c:79:5f:fc:d2:f5:7c:a0:f1:f8:61:95:bd:9b:7b:
87:9f:90:57:2f:21:dd:5b:67:29:24:ab:8f:66:9b:
26:e5:9d:86:b2:ee:63:e6:ad:de:12:d2:a1:31:79:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B7:27:9D:E9:DB:06:2C:5D:69:84:CB:37:2F:9C:91:87:FD:0D:BC
X509v3 Authority Key Identifier:
keyid:32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9f:93:fb:b9:c4:2a:c6:9e:e3:3a:32:35:72:98:06:2c:36:
bf:83:3d:39:2b:88:d1:cf:a7:56:92:94:9b:78:d1:d2:14:bb:
b0:9c:67:28:5e:07:13:14:aa:fd:0b:11:f7:f5:fb:2e:36:5f:
4f:33:ef:81:b7:7b:c3:5a:e6:a4:3a:ed:1a:aa:4d:14:69:7d:
c3:02:fc:d6:91:9e:15:5d:94:27:e6:a2:65:29:92:16:8f:b9:
84:9a:c9:ee:a0:7f:13:eb:7f:d2:5e:5d:b0:32:2f:75:ca:e5:
dc:bf:bb:22:d4:c4:1f:d7:3e:80:f3:e7:32:4a:e1:95:45:9d:
6c:21:e6:2d:46:25:1d:20:c5:0a:f5:4f:14:42:1c:e2:b2:1c:
9b:88:1c:31:fc:ad:2d:e0:00:cc:15:94:a3:8b:17:22:4a:d9:
5d:6e:c2:cf:fe:6a:e4:9d:9a:8b:e5:92:0e:a0:57:f6:c3:ba:
52:a4:73:ea:6c:3c:44:b0:b2:47:b4:5f:02:26:04:d9:00:06:
70:f8:ab:71:f2:4c:81:4b:f7:d4:42:ae:df:e5:ad:9b:49:29:
51:a4:e3:1f:84:f0:15:20:ec:58:fd:9e:75:f6:06:94:0d:bc:
ef:db:5d:f3:3f:4f:6d:7c:42:70:31:58:3f:a3:44:da:f6:4c:
5f:ad:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:33 2025 by rpki-client