Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: c59YYgTIheyk482thRF1eiCQehdypDqD2OMDsTsWD8A=
Subject key identifier: 4E:B0:5F:2F:AB:60:DA:3B:C2:17:BB:5A:01:7A:D5:9E:42:3B:3E:3D
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 0194BD4EC1F8A5C56AB44B839DDAA7C64A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: imMUcQyEAHcBTRapG7iUcHrCwxfHkcQRZzViR9Qwvno=)
2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:f8:a5:c5:6a:b4:4b:83:9d:da:a7:c6:4a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=4eb05f2fab60da3bc217bb5a017ad59e423b3e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:66:c6:c1:e8:43:13:82:ba:b2:77:f8:af:
87:fb:ef:0b:0d:a2:88:8e:d7:10:ad:32:1b:12:5f:
f7:17:8e:f8:7c:8b:c5:21:ab:09:30:85:63:f0:96:
2c:99:86:c0:f5:1f:06:c1:31:30:24:4a:6c:8f:0a:
9c:bc:be:c2:b7:e9:ef:aa:31:da:a9:b9:4a:6c:b3:
f7:39:40:50:40:a8:3c:92:ad:aa:e2:de:dc:fe:96:
f4:b1:fd:90:94:0d:7d:ba:9a:35:83:ee:fc:73:43:
f2:3f:2c:57:6c:49:45:99:6b:0c:b0:5a:c3:9d:4b:
3f:e7:b6:67:36:9d:4c:44:a2:f5:7e:46:40:5e:d9:
bd:ba:4b:6e:23:a9:b9:81:12:87:11:b4:d6:8a:ea:
d0:0f:86:b9:28:ce:bc:e6:94:90:b2:56:8d:1d:b0:
33:a4:6d:a7:5c:02:6d:81:8d:5d:14:6d:41:35:44:
d1:89:94:69:07:ce:83:1a:51:4a:7c:fd:d2:36:07:
71:5a:9f:03:4b:8d:00:1a:36:76:dc:49:a0:e4:e0:
32:ef:48:00:02:31:a2:17:94:0c:37:b7:ff:8e:52:
13:b7:c6:be:49:1a:bc:fa:29:6b:04:a2:6b:b6:4d:
62:d9:f2:4b:d3:b3:ef:f8:d4:91:33:5b:db:ae:31:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B0:5F:2F:AB:60:DA:3B:C2:17:BB:5A:01:7A:D5:9E:42:3B:3E:3D
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d5:08:5c:7f:fe:a4:81:4d:8e:14:40:f5:cc:50:d5:dd:4f:
9d:95:ab:3f:78:db:a5:bd:c7:5c:fe:b8:1d:fc:cb:ea:af:9b:
77:e4:9c:26:a2:b6:35:4e:15:af:a8:b8:c9:03:ba:d4:14:c8:
f6:58:ef:a0:30:3c:84:c0:21:39:3c:0a:d0:e8:12:8a:c9:dc:
30:2f:06:13:4b:4a:c9:53:c2:ad:31:cf:bb:96:38:2a:89:59:
58:c8:2b:ba:7e:8c:8d:d6:1a:f0:b1:58:59:39:20:6b:88:85:
cc:0e:82:b5:b7:df:a1:15:f4:dc:73:94:c5:14:0d:4c:a3:24:
3e:ce:2b:a1:c7:0a:62:8d:d1:e6:6f:dd:10:d5:d7:fd:72:4d:
78:49:f8:a1:ef:bb:9b:94:77:56:04:f9:43:23:9b:59:cc:ff:
87:f5:38:c0:b2:14:c9:0e:ad:46:18:f5:5e:e3:bf:e5:cf:f2:
a7:c6:10:1b:93:bc:0f:65:f8:89:5b:10:dd:a6:3a:e3:61:78:
05:61:ab:83:c6:fd:32:4f:60:b5:8f:d3:29:b6:9d:4b:f9:6d:
e9:c4:5a:4c:e8:9c:4a:e6:f1:e2:f0:37:fa:25:7a:26:78:56:
a1:8e:99:7b:7e:10:3f:50:45:4b:da:f6:84:79:3c:b0:bb:d8:
c4:1e:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:56 2025 by rpki-client