Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
File: Mnib05LhxcabdCDMA2gDrxJYzvk.mft (raw, json)
Hash identifier: KclSwF/x0d8bCCDA4S3qgNwOulZkorZXDv35kwjy0nk=
Subject key identifier: 39:A3:E4:6B:24:D0:F5:FA:FC:F8:B0:73:70:AD:13:FC:AB:20:70:7C
Authority key identifier: 32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9
Certificate issuer: /CN=32789bd392e1c5c69b7420cc036803af1258cef9
Certificate serial: 0194BC3C7A195828583BB993286EB8507F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
Manifest number: 057C
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: Mnib05LhxcabdCDMA2gDrxJYzvk.crl (hash: QVTWlxBaNt4BAyhrEjgBFlnyyaJjhMjzKg6tPBB3RFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7a:19:58:28:58:3b:b9:93:28:6e:b8:50:7f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32789bd392e1c5c69b7420cc036803af1258cef9
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=39a3e46b24d0f5fafcf8b07370ad13fcab20707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:c4:8b:51:8d:ce:64:ec:a5:d3:22:88:9d:
72:62:42:2a:17:3f:54:cc:8e:41:4c:ec:bd:f1:07:
1f:54:72:eb:af:ea:fa:6e:58:1b:49:a6:e7:9c:54:
fd:44:8a:7a:5b:71:6d:30:fb:b9:7c:e4:67:7b:85:
6a:92:d5:3f:60:56:86:b1:4d:40:ec:ab:a1:fe:95:
f1:17:42:30:56:54:4f:2e:c1:86:68:c4:ba:ec:8f:
c1:9f:c5:13:37:80:5c:ce:ec:8d:28:e9:9e:32:1c:
64:07:1b:41:6e:aa:db:41:e2:51:14:55:96:c2:c1:
7e:db:3c:0f:91:73:0b:a2:5d:29:36:6e:27:6b:64:
81:87:e0:60:95:1f:94:bf:7b:68:48:e6:fd:3d:db:
f9:ed:eb:22:1e:55:13:65:39:3a:fe:1b:a8:a6:43:
00:e8:84:9b:f5:29:f2:d5:36:ae:0f:56:62:29:17:
87:a3:23:c0:c5:0e:9e:10:3c:de:06:6a:dd:00:7a:
05:b0:59:dc:7b:89:70:ed:d7:2a:1e:68:08:89:b7:
47:ce:99:c2:38:42:53:8d:26:ac:b2:97:76:8e:d9:
66:ef:50:8a:48:05:1f:ce:ef:6f:f1:d8:4d:77:64:
19:bd:24:9a:50:27:e8:6c:62:fb:ce:db:19:16:e0:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:E4:6B:24:D0:F5:FA:FC:F8:B0:73:70:AD:13:FC:AB:20:70:7C
X509v3 Authority Key Identifier:
keyid:32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ba:43:8b:1f:fc:46:32:1e:7e:50:20:a3:d3:cc:c9:55:ac:
fd:06:51:8a:2f:6f:8e:19:4d:dc:d0:ea:e5:08:b2:9c:9d:5f:
c9:37:2f:03:06:5b:35:f0:38:fe:4a:28:6d:6e:d1:03:33:31:
59:ee:69:3c:6c:0f:a4:57:14:23:ce:22:21:21:fd:1f:71:26:
17:5d:c0:d8:5e:7f:4d:f2:ae:2c:93:61:01:95:03:28:6e:5b:
3b:48:69:19:af:5c:26:68:d6:06:a0:8e:70:ca:73:4f:1d:22:
65:9d:2e:84:2e:4a:04:79:3b:e8:34:1a:83:fc:fc:8f:45:2f:
30:5f:4a:2e:b0:59:2f:40:73:e0:18:45:d0:6d:21:09:36:04:
bf:96:4f:88:0c:97:ff:5a:37:ce:51:42:68:97:57:0c:5f:0b:
b1:bf:53:6c:8d:f6:75:fc:c4:f2:f3:70:e7:92:b6:55:2d:bc:
51:f6:df:cc:b5:94:a2:49:17:21:34:c0:d2:4b:af:01:7b:3d:
dd:7d:96:12:be:f5:f1:3c:57:0d:ef:f7:06:e1:ff:c6:78:86:
63:da:3e:55:d1:47:26:b8:01:81:83:ab:64:d1:a7:1e:a5:70:
df:20:61:f0:0e:64:fd:4e:21:24:ec:3b:f1:21:34:a7:b9:c6:
a2:57:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:28 2025 by rpki-client