Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: Dcn2Z+2bT4FAaWyP1yYS33MZcXhaTrrv6lZMlkPsC6w=
Subject key identifier: 66:CA:4B:42:CE:DE:F7:92:6F:C5:5C:79:29:D0:C5:E6:63:08:18:0B
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 0194BC3BEE8D4A8AF46485D1BEA5533D34F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0B53
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: eSS3W51dEuSfAzW9tX09CffrCSVsx7J232nRt3BUvkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:8d:4a:8a:f4:64:85:d1:be:a5:53:3d:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=66ca4b42cedef7926fc55c7929d0c5e66308180b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:81:54:6d:be:01:07:95:46:2c:50:92:6e:
f3:9a:8a:30:45:53:de:49:09:33:17:19:ad:ad:f4:
0d:43:12:08:70:78:bb:14:36:9e:17:62:5b:4d:96:
92:3e:a0:43:87:5e:f2:44:1e:63:62:3b:1d:5f:58:
8a:90:ee:0d:0d:48:51:f6:64:e8:52:d8:a0:78:29:
af:5d:4c:88:65:03:97:7b:05:39:10:62:5a:ab:a3:
da:33:54:02:97:e5:0c:84:0a:cd:58:be:ce:b3:92:
70:bf:bb:7c:58:9f:2d:5b:4e:94:9d:61:cd:ef:80:
23:e6:35:05:64:67:16:ac:ee:7b:18:85:26:5f:9c:
0f:c9:e6:b0:21:01:88:44:0d:ff:2d:d5:4b:bf:e5:
3c:31:d7:c5:ff:e2:c2:1a:02:44:b6:75:a1:1b:ea:
a2:12:f6:8d:df:a0:7a:fc:da:93:3f:9c:da:71:0e:
98:27:82:4a:c2:d4:3e:cd:47:37:ea:b6:ac:43:f2:
9d:5f:0c:6d:77:2b:1e:87:88:fc:26:b2:a7:78:a1:
ca:42:a0:18:8f:8a:3a:2a:24:2a:9a:b2:79:73:13:
a2:67:68:ca:e6:8f:36:53:0a:8c:ac:19:1f:75:34:
4e:35:a7:b1:8a:77:23:6e:08:31:6a:9c:ec:42:61:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:4B:42:CE:DE:F7:92:6F:C5:5C:79:29:D0:C5:E6:63:08:18:0B
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:96:00:03:41:f6:53:d4:56:63:f6:5c:fa:ea:ff:b9:1d:54:
11:04:15:e0:93:de:81:8c:6f:03:82:44:2f:77:ec:31:d8:a7:
11:e6:c2:a1:3a:f2:da:09:90:4f:54:f8:61:45:e4:12:43:86:
6d:ed:37:a9:42:30:ae:fd:7d:b0:55:90:b6:dc:dc:be:54:83:
00:5d:b6:f6:73:40:4e:1d:b7:af:b3:17:87:ee:ce:58:37:75:
87:3c:09:f1:d4:fa:a1:b4:22:ba:1a:d8:66:1d:be:8a:d3:88:
5d:62:90:67:00:d2:2e:a3:c2:bd:43:9b:c2:0b:ba:63:01:c5:
09:88:f4:10:b4:7b:02:78:83:3b:f2:9b:03:dc:7c:96:d1:41:
d3:25:7c:20:ed:ce:72:c7:dd:d9:21:a6:0e:59:c2:5b:85:77:
4c:5b:99:04:f6:d4:c5:e3:79:94:35:f9:75:52:64:52:71:f9:
32:a4:85:a2:ce:8b:ff:11:14:7d:87:ee:93:43:6a:88:2c:5e:
55:43:b0:50:b7:ee:32:e7:1b:b1:6a:92:e5:28:86:5d:45:bb:
11:c1:ab:f5:9e:ca:ab:30:9c:7a:10:41:9e:e1:24:8d:4f:e6:
23:f4:71:19:e3:a7:90:e9:91:7b:3e:57:61:da:0f:54:76:03:
84:35:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:33 2025 by rpki-client