Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
File: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft (raw, json)
Hash identifier: QJU3D5/+uuSkG5QIYKKSlXVRrtWXK7GrfXakwbbVuYg=
Subject key identifier: DB:67:FA:A5:72:B2:5F:ED:1D:65:C0:63:AD:18:B3:42:35:C1:34:AE
Authority key identifier: 32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
Certificate issuer: /CN=325052b7a678faa097dcbe6547170c9152b46cf1
Certificate serial: 0194BC3BBF886E82B4DF0DE2A1F089D8A10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl (hash: 9HLe5DLLEDjexWCdznJY++YP80afwzXha5b0/R7aT04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:88:6e:82:b4:df:0d:e2:a1:f0:89:d8:a1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325052b7a678faa097dcbe6547170c9152b46cf1
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=db67faa572b25fed1d65c063ad18b34235c134ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:66:5e:07:ad:3a:10:be:cf:f3:0d:81:ae:b9:
7c:c7:12:7a:bf:0c:8b:fd:af:4a:8b:4c:e4:c5:cc:
0e:32:c3:7b:79:88:0f:b4:9e:11:74:be:12:fd:ce:
3c:04:fc:6b:9c:40:3b:33:e5:5f:ed:a8:72:0c:5c:
2a:5a:e4:15:0d:e2:6b:c7:6a:a6:97:aa:bb:5f:32:
fc:0a:9b:a8:d1:4b:0f:22:04:60:7b:e7:8f:94:70:
59:7c:c4:63:be:f9:23:2b:1e:2c:3f:2b:d1:cd:1e:
f7:82:70:94:41:c0:ca:26:bc:dd:8e:21:47:74:9f:
fb:f0:fb:43:59:98:1f:7c:61:a5:f3:8d:17:42:9e:
25:7b:1a:ce:77:19:a0:8a:cd:76:17:61:94:71:46:
e6:ab:85:4b:e0:6b:74:a2:1b:1e:97:71:ee:ba:06:
1e:1b:1b:94:ab:f2:36:66:66:ef:27:da:fd:25:e2:
4f:a8:16:af:fa:a9:fd:47:43:b4:43:1a:fe:16:7a:
d5:29:da:22:5f:c3:17:d0:1a:44:ac:a4:96:98:d7:
e5:e1:36:9e:43:81:39:f9:d7:54:92:94:89:a3:18:
b1:26:78:93:df:ce:ee:dc:09:20:c6:c3:5f:ff:52:
ff:0c:7d:36:f5:2c:2e:08:c8:1b:8c:88:9c:9a:03:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:67:FA:A5:72:B2:5F:ED:1D:65:C0:63:AD:18:B3:42:35:C1:34:AE
X509v3 Authority Key Identifier:
keyid:32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3f:9e:a5:5d:d0:db:90:5f:f6:97:96:6c:64:59:a2:3b:10:
c6:72:79:9b:00:10:0e:02:ea:f5:1c:35:17:aa:58:32:66:76:
b6:09:b1:f4:d6:9e:70:c4:ed:b5:20:55:ff:6a:04:fa:ad:5f:
fa:90:5d:13:49:47:31:d3:34:03:3f:89:da:49:4c:6a:8b:83:
71:3c:f7:f4:d6:b7:9c:10:71:e4:af:4f:e1:41:e8:87:a3:6c:
25:6d:2c:b2:44:e5:76:c9:64:8f:c8:34:27:82:d5:d2:ea:bc:
02:53:8b:8a:64:83:af:a3:ff:7e:e5:72:58:98:e6:dd:ea:0c:
ba:8c:29:59:1b:44:02:7e:ee:3a:e2:6a:87:7b:c1:ea:64:4f:
67:4b:7c:40:c5:b8:bf:ee:92:97:a8:2b:07:8f:8f:56:b0:96:
e9:47:2c:43:18:44:fa:09:af:8e:f0:5a:34:f9:80:87:ce:a6:
46:7f:d4:d5:9c:34:88:c3:e5:69:1f:e7:4c:2f:78:50:ea:ce:
34:4e:04:29:dc:2f:40:63:cf:c2:fc:2c:d2:6e:3a:65:8d:a9:
7b:09:56:81:fb:99:62:0e:91:b1:ac:c8:5a:84:50:72:8a:c2:
c1:21:97:f7:df:97:52:14:dd:03:c2:4f:63:60:b3:ed:b6:71:
b0:cd:26:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:19 2025 by rpki-client