Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: K//cffN0xVoG+g13aPZAsOCHkYgRiaV7Ue1dj0st0uk=
Subject key identifier: A5:E7:9D:7A:50:0C:20:9B:69:88:C9:37:8E:8E:E7:74:3F:4D:AB:84
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 0194BBCE87AAC3FB7874F1AD63D7D1236132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 09EF
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: pBiHGtinxkemeQ0uZ3N/mUrTh5Alb7XySMrjkg920cs=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:87:aa:c3:fb:78:74:f1:ad:63:d7:d1:23:61:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=a5e79d7a500c209b6988c9378e8ee7743f4dab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:c9:d3:57:4b:3f:8f:20:79:54:b3:61:fa:
18:b0:b8:44:14:5e:ef:24:58:77:30:09:92:2b:18:
b6:9a:f8:a8:a5:48:ea:8f:6d:cb:39:e7:17:ed:9a:
20:f2:6d:ef:4a:30:c5:53:1f:1c:ef:38:1a:75:f0:
d9:6a:2d:da:aa:c2:b6:97:75:ba:27:7d:52:2d:80:
9f:05:6e:3f:c8:52:d9:d6:ba:0f:ad:f1:48:c0:73:
f4:ae:89:fe:bb:10:56:b3:14:e6:c0:e3:23:68:bc:
46:3d:5f:72:51:51:77:35:2b:70:66:fa:09:77:b7:
31:4b:b9:d6:f3:46:31:3d:74:a9:e8:5a:5f:48:c2:
06:53:86:f4:e1:82:6f:f1:97:5e:c5:5e:ca:e6:c2:
2a:cb:9c:71:49:12:ed:b6:ab:0c:64:28:f5:40:5f:
37:6e:35:46:6c:ff:73:01:30:33:e6:fb:62:73:11:
8d:2e:78:15:64:f2:0b:ff:64:be:cb:22:74:20:ab:
e2:94:9e:07:57:92:89:76:46:47:ba:3b:58:ef:5f:
17:20:87:a5:1c:df:57:d7:c9:9c:f7:de:9f:4a:1a:
47:af:c8:fc:d9:b4:fe:2e:f3:e6:ae:c6:5e:38:42:
db:3f:ff:f1:f9:d1:63:73:39:a1:3d:48:1a:ee:12:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:9D:7A:50:0C:20:9B:69:88:C9:37:8E:8E:E7:74:3F:4D:AB:84
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:47:04:a7:6e:2a:4b:56:c7:4c:e8:7e:b8:6e:ae:94:17:33:
da:d2:05:b9:d7:5c:3a:9f:14:1e:22:b7:09:9e:04:13:e4:40:
c3:6a:4c:40:cf:36:d3:e5:87:b5:bd:ed:d6:b9:a4:6d:ed:6b:
f3:7f:f0:9a:26:7f:80:03:dd:8b:6e:8d:69:a6:e4:31:82:f9:
ca:cd:a3:2f:61:41:7c:31:7c:d4:d4:95:7e:ec:a8:71:15:6f:
77:4f:3e:e2:37:f3:1a:48:10:ca:3f:d3:1d:c8:2f:ae:cf:68:
61:7a:bf:0d:09:7e:9b:ca:35:28:df:05:1c:45:40:fa:b3:7e:
8f:78:a4:ee:c3:79:f0:97:17:f4:a9:29:e9:79:10:47:63:52:
9f:27:ae:5b:40:17:ea:98:99:e5:a3:4b:b8:74:0d:eb:f9:30:
a9:3f:ea:50:a7:55:f2:9c:92:05:2f:89:9d:13:9e:09:79:19:
0f:ed:d6:d0:4f:e3:11:51:55:68:09:72:d9:17:c5:86:cf:c0:
16:a1:13:2b:9b:ef:6b:ca:b9:09:1b:16:bd:29:a7:ce:4b:dc:
47:ea:da:8e:dd:6e:0a:42:5f:7f:fa:a6:31:6e:ca:db:12:67:
66:a4:98:d4:f8:1d:86:34:db:72:2a:e4:05:64:71:df:81:f5:
f0:d0:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:22 2025 by rpki-client