Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: Dht7G33o8H74QkOzw03yIcOEV6dnjixRPHUzhOJG90c=
Subject key identifier: EA:26:6D:79:29:C6:86:E3:62:89:DE:F9:A9:95:EC:B8:18:03:6A:4F
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 0194BD1778D6398C2CCD63036D5E5190A1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 011D
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=)
2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: PJgXMrfBTZMXgR0SpTu0MyRhpK/8URfr/XEjIuHQd60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:78:d6:39:8c:2c:cd:63:03:6d:5e:51:90:a1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=ea266d7929c686e36289def9a995ecb818036a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:ba:06:5d:e8:d8:40:d7:d5:d8:42:00:66:
a4:4b:a7:70:2e:17:bc:e5:e5:d5:44:49:41:c2:e3:
a1:69:26:bf:58:c6:f9:5d:8a:d8:c2:af:0c:ba:40:
05:77:3c:50:5d:32:8b:4c:c4:a1:4a:ae:60:98:cc:
53:0e:ed:62:7e:50:68:1b:20:e4:08:a8:5f:f8:8f:
2f:99:c8:30:c8:f1:f9:72:6c:37:31:1d:1d:e6:66:
87:e2:37:fe:4a:da:ba:a7:3d:f6:b7:8a:53:e9:e2:
fa:d7:a4:e2:bd:29:95:97:b2:ad:2e:bb:ae:49:f0:
42:74:c2:cd:e3:5f:bf:3d:e0:b7:91:cf:9d:fc:cf:
bd:6e:e8:cb:ff:59:45:66:21:3c:6a:c6:ef:78:fe:
6d:74:23:ca:aa:e2:c5:15:4c:a4:4b:26:fb:f3:ed:
ae:16:3c:57:29:ba:20:d1:ad:a2:eb:ea:19:4c:ce:
28:2c:04:8b:93:52:5c:4a:35:f4:54:35:7b:37:76:
25:85:4e:bb:36:a4:0e:3e:29:cc:9e:ff:2e:b0:1f:
b0:26:b0:f6:32:2b:1e:9f:dd:09:05:6e:85:5e:b4:
98:02:91:ed:f2:8d:bd:85:c5:30:b3:76:5e:0f:d9:
7f:31:64:10:0f:9f:18:fc:d5:41:fa:99:f9:2e:42:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:6D:79:29:C6:86:E3:62:89:DE:F9:A9:95:EC:B8:18:03:6A:4F
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2b:ed:90:64:a5:5d:33:b1:6a:09:f5:b5:de:d4:b7:77:11:
b8:ac:80:13:2c:14:19:5f:6a:fb:01:f2:8f:ec:2b:52:cc:5f:
4e:f5:3c:5c:65:69:f3:28:a2:3c:12:20:30:0f:63:26:48:29:
c6:3f:cf:7e:b1:f4:25:39:2e:6c:bf:8b:b2:a5:ee:9d:a9:63:
af:e0:24:35:62:13:a3:37:b6:3a:5b:db:be:85:88:44:d4:e7:
1d:38:14:98:f5:9e:18:de:20:9d:af:95:e8:ff:73:e8:97:a3:
99:03:13:3f:57:aa:e4:2b:c6:9e:a5:f9:d1:2f:af:dc:b7:4d:
ff:0a:b5:0b:2c:bd:8e:66:11:45:34:a2:73:f1:62:8a:ca:b8:
dd:c6:1c:8c:a1:3f:bf:3e:63:8f:76:1f:63:78:50:07:9f:91:
7c:64:bc:b7:c2:75:e5:4f:cb:93:19:b1:94:db:23:fd:9f:69:
bc:65:fb:c3:bc:aa:36:5c:43:fc:ba:5a:e4:82:32:92:03:60:
56:b5:da:2b:3b:26:86:fb:d6:1f:a7:17:bd:be:8e:77:2b:89:
be:64:90:46:2f:54:e0:a5:98:db:c1:cd:5a:ea:54:99:37:a2:
d3:74:2b:ae:e6:e5:5e:6d:d5:ed:f0:9b:e4:b1:ae:64:fc:70:
bb:cc:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:35 2025 by rpki-client