Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: yjtZJDRFOMat3V7BWzvcVCN2/Y4oSeJAYr4/GZgduKw=
Subject key identifier: 3E:B3:04:F7:59:5B:EF:CA:72:71:5C:48:09:68:85:47:7E:87:6E:43
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 0194BBCE7B5431FB08FACFDA794B0B4CFACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 11E9
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: irNHGdF+OX4OB+eVozjPuxe5fEniNO8iYZPNXr+uELo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:54:31:fb:08:fa:cf:da:79:4b:0b:4c:fa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=3eb304f7595befca72715c48096885477e876e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:c9:40:c9:09:2d:b7:31:be:11:d1:7b:cb:
82:8d:88:26:47:f1:5b:cc:9d:94:28:72:09:07:c0:
38:90:58:a0:de:a9:6b:0d:5a:59:30:bf:a9:45:15:
74:dd:bf:66:ca:5b:71:b3:ff:99:55:ba:6b:b6:6f:
34:00:10:28:60:ef:62:ad:93:72:dc:fe:e4:a6:81:
d7:07:af:8e:fb:25:7b:90:39:10:b8:6a:aa:f5:75:
48:e2:70:13:5f:ee:61:4a:6f:79:22:62:ce:a2:58:
9c:bc:b4:ac:c0:d1:6f:77:24:26:c6:8d:d5:68:9c:
c8:d0:6f:4e:47:88:47:22:72:15:a1:b0:bb:47:12:
d5:1f:fc:56:73:9a:d9:42:e8:43:1b:b9:ea:9a:43:
dd:ff:4e:57:06:29:cc:47:3f:81:6a:01:ca:4f:45:
a7:d0:25:38:e7:49:48:79:f7:d7:11:05:62:d0:1d:
42:6f:92:71:29:6c:f4:6a:ae:e5:a4:88:76:0d:e6:
7f:23:42:fa:32:04:64:be:20:9f:f2:58:44:0e:77:
b3:d1:66:22:7e:99:0c:3e:19:17:e3:b7:88:e8:6d:
14:af:b8:d9:e1:d7:95:ed:90:7c:f8:a9:b6:d0:b8:
96:aa:e7:d5:dd:83:c3:6a:68:d2:73:24:7e:47:59:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:04:F7:59:5B:EF:CA:72:71:5C:48:09:68:85:47:7E:87:6E:43
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:af:3d:a0:5a:72:ba:d4:7c:48:27:23:5a:cd:99:ea:f1:f3:
fb:16:9c:06:c8:fc:99:6d:d0:ca:da:f5:58:3e:78:03:3c:79:
b3:6d:a4:b9:c9:c8:b8:8d:1f:f2:17:02:10:c2:c8:d5:90:ac:
db:b3:d3:3e:48:ec:25:4e:4b:39:ee:52:de:dd:bc:b7:35:7e:
e9:db:d2:a3:a2:01:dc:45:96:9e:17:1d:be:07:49:6c:5e:e0:
f5:47:00:83:d0:47:ff:d2:00:3e:af:89:66:aa:85:24:e8:45:
70:4e:ce:be:b8:59:e3:b4:8f:e4:8d:e8:d4:34:8f:91:72:9f:
fc:75:b9:c8:7a:4e:4d:80:c7:06:cf:bc:f4:36:f1:98:e1:4b:
fc:cd:a0:dc:7c:e0:79:0e:34:0a:1b:a8:f7:7d:f4:c5:83:fb:
ef:83:b6:dc:81:9a:1f:98:d8:c6:bf:1c:fd:95:17:9e:13:59:
f6:79:f3:09:ec:c2:60:9e:7b:5c:25:bf:4c:03:62:9f:fa:9b:
a9:35:14:30:5f:14:38:b5:b4:99:9a:be:16:ff:1c:8c:bd:74:
fe:19:e0:50:db:55:3f:0d:69:25:de:df:63:21:94:f4:ed:69:
15:40:e5:f7:66:cf:ac:f9:b4:bb:d9:c3:5e:fd:af:3d:1d:ab:
81:80:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:10 2025 by rpki-client