Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: Hn4MYLKFz6fpESpYvp537xEAfhgsfUXdX5/rB/E9IO8=
Subject key identifier: 50:1F:D7:CF:94:EA:CD:A3:9F:BA:AF:14:4C:19:46:E8:CA:8A:56:31
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 0195DFD8A3A9FE36820896B50225E6DC4082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0BEA
Signing time: Sat 29 Mar 2025 03:01:11 +0000
Manifest this update: Sat 29 Mar 2025 03:01:11 +0000
Manifest next update: Sun 30 Mar 2025 03:01:11 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: DTZ4HTdXdzGDtWRsIRdC6TOgwIkyVBuU6ocIB6rAioc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a3:a9:fe:36:82:08:96:b5:02:25:e6:dc:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Mar 29 03:01:11 2025 GMT
Not After : Mar 30 03:01:11 2025 GMT
Subject: CN=501fd7cf94eacda39fbaaf144c1946e8ca8a5631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:13:87:5c:46:12:33:1f:19:c6:58:f7:33:
f0:dd:94:49:20:03:fb:cf:cd:c0:83:be:4d:85:d5:
68:1c:96:63:8d:0c:93:f9:6b:d9:eb:4e:bc:67:48:
c0:d1:0f:ff:d6:9b:82:e7:a3:15:4c:90:eb:17:8b:
31:7e:5b:d5:03:41:f9:8e:3a:9d:f4:a9:7b:85:b5:
2c:3d:fa:cd:30:e9:69:c6:65:30:21:84:23:f7:91:
39:9a:98:9c:e8:91:bd:97:7b:d9:6f:8f:45:4f:d2:
a4:8c:23:15:86:e5:f7:4a:8c:70:25:1d:fa:63:9f:
e0:39:43:8c:7a:94:86:3a:ef:97:30:4d:87:17:66:
e7:bf:26:b5:de:68:e3:14:61:7a:45:97:93:00:5f:
ea:7f:eb:6d:75:17:79:1b:20:dc:0b:fe:6d:35:d1:
28:e6:91:34:23:b7:f3:b6:7e:f5:b2:35:93:fe:7a:
d3:69:26:8c:ee:f7:3f:bd:b8:41:99:aa:a0:83:3c:
69:33:40:2b:1b:19:d4:ea:a0:98:03:e0:e4:a0:5d:
94:b8:0b:3a:08:c4:9a:c0:f7:ef:cf:e4:13:17:e5:
02:91:00:48:c1:02:ba:08:e8:88:75:f4:7f:d9:7d:
f6:9d:e1:31:39:4e:bf:e7:cf:4f:5f:17:5b:30:36:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1F:D7:CF:94:EA:CD:A3:9F:BA:AF:14:4C:19:46:E8:CA:8A:56:31
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e3:64:fd:85:c0:c4:a4:d0:19:05:fe:1d:8a:c6:a9:08:a9:
2a:04:0e:78:6e:43:88:e6:bc:83:fe:25:6b:e5:58:2b:8f:f1:
22:e4:6c:9b:c5:43:9a:4a:aa:46:09:71:e8:43:39:49:31:1f:
2a:60:b4:b5:63:fa:0c:34:03:d9:bb:09:c4:f3:eb:48:d3:a2:
b0:36:e5:96:07:55:82:fe:11:4a:88:d9:f9:b8:7d:05:f3:f5:
52:d0:13:f0:2e:69:9e:ae:84:18:e9:d8:fc:e8:9d:74:ae:50:
82:ee:b4:34:14:fe:e6:30:ff:e7:5f:21:14:86:56:46:68:67:
63:e3:59:c3:dd:ed:03:2e:f8:4b:04:53:4d:bc:12:ee:bc:88:
a3:9f:74:3d:6f:53:16:de:2a:1f:73:69:8e:86:0e:52:ee:3e:
4e:7c:57:fb:fe:3a:b2:d6:36:3e:5b:87:1b:a0:3a:34:46:ac:
2b:f4:85:52:09:1d:b3:23:71:87:c0:9e:68:9e:3e:b4:b0:d5:
e7:77:ed:a1:41:26:c4:f7:d8:86:ba:01:72:10:d6:8e:0a:93:
b9:bf:a8:69:90:ab:d4:88:94:68:c0:34:39:f6:27:e3:65:9a:
b7:8b:26:79:24:d1:6b:57:28:d3:c5:88:39:0b:62:48:80:ad:
72:6f:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:44:13 2025 by rpki-client