Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json)
Hash identifier: H4yntHUHcvU6bIf9NglVxV7LMcAv4IqegmDKmn0vF4w=
Subject key identifier: 4C:63:0A:6F:04:2E:FC:2A:98:B9:3B:F7:80:7D:69:5A:26:A3:4A:7E
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 0194BD178B8B8BEA002E341064C4F0E1E330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=)
2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: DyQOcd60dGuVzapbi+z7ScsT98IabYOYAfJwnDRiD6A=)
3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=)
4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=)
5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=)
6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=)
7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=)
8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=)
9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=)
10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:8b:8b:ea:00:2e:34:10:64:c4:f0:e1:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=4c630a6f042efc2a98b93bf7807d695a26a34a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:c9:b0:92:b1:30:88:39:c4:98:3e:8e:d1:
dd:f0:13:05:35:7b:25:c3:13:51:8b:69:8c:33:ff:
c8:ec:1b:0b:b1:99:99:83:3a:f9:10:6a:ee:26:32:
93:5e:58:0d:89:96:5c:0c:9c:b8:c4:80:82:3d:98:
50:0c:f5:66:80:64:ac:c4:34:58:c8:a7:b3:03:29:
b7:53:f4:1f:c0:41:8e:bc:b2:2f:eb:4d:d6:c4:f4:
8d:9e:47:5a:e5:35:8d:09:22:23:5f:45:2f:53:0f:
25:3a:40:e3:02:8f:15:14:c8:69:28:0f:82:4a:6f:
4a:71:a3:6d:5e:60:9b:5a:fd:01:5e:6a:00:43:49:
d3:58:f9:44:44:9b:d9:b8:bc:6a:8e:47:68:11:8e:
21:c2:9d:a1:4f:2a:89:de:fd:db:4a:7b:36:41:f5:
16:b4:e0:98:40:94:68:08:73:62:e4:7d:dd:ed:2a:
04:ee:de:da:56:20:ca:7d:05:9b:79:2d:b7:bd:20:
87:3d:72:ab:bd:5d:4c:1c:5d:d4:7a:bd:fb:09:cf:
48:5c:8c:30:04:c8:1a:07:b9:ef:3b:a9:a6:b8:e3:
a9:a1:70:c8:01:6c:f0:27:b3:7a:6d:5e:0e:45:47:
4e:42:e3:fd:3c:d3:ab:70:5b:3f:23:be:a6:2e:5c:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:63:0A:6F:04:2E:FC:2A:98:B9:3B:F7:80:7D:69:5A:26:A3:4A:7E
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c1:d8:7d:c4:81:e3:35:cc:ec:5d:d2:f3:3d:56:59:67:d8:
72:50:98:3e:1b:fd:05:b3:1e:a2:c5:90:e7:1d:42:d0:ee:9d:
42:b8:ea:ac:15:b4:b7:b0:37:64:c3:8e:e3:6c:74:4a:40:36:
6f:28:f1:7a:4a:3f:04:28:af:e9:1f:38:0e:03:8c:4a:af:eb:
ea:29:1f:3d:d4:d1:9d:10:7d:ad:ce:d5:7d:70:10:ac:76:66:
67:92:56:0c:99:3a:9a:36:b6:93:c6:58:53:00:38:73:9f:43:
0e:78:eb:1d:de:41:7b:f6:4b:53:37:6f:57:78:fb:67:95:64:
c4:db:63:dc:c1:89:e3:86:9f:6a:c6:e9:72:9c:07:a4:cf:4d:
94:d9:6b:d8:28:26:3b:31:23:e0:0d:e7:fc:29:8d:34:79:30:
e5:04:79:24:6f:36:79:fb:cd:d2:2d:22:fb:bf:85:37:32:45:
ac:50:e1:6c:45:f5:7e:00:08:58:28:2a:95:a3:9d:dc:b9:c6:
81:4c:22:0f:b0:5f:af:19:cb:45:c5:db:3a:77:b6:80:13:c8:
cd:84:0e:7c:62:7a:4a:1c:e2:c4:cf:45:a7:1f:26:67:5b:3c:
3f:bc:67:86:03:20:7d:b0:1a:28:bc:79:ab:f1:48:4a:89:bb:
e9:01:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:24 2025 by rpki-client