Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft
File: Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft (raw, json)
Hash identifier: tuCNsCl2xHF1RQXHlrmEOI7FqCZU0YzNd8qfwo5Z4vo=
Subject key identifier: DD:4D:B9:98:8B:0E:4B:99:04:CB:68:88:70:B6:3D:21:BF:71:A3:86
Authority key identifier: 32:69:7C:BD:22:1C:CF:61:EC:34:FD:06:27:B2:BF:EB:E3:B4:1A:CB
Certificate issuer: /CN=32697cbd221ccf61ec34fd0627b2bfebe3b41acb
Certificate serial: 019583CAB5FA6BBD3D24DC8F342B5F04B851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft
Manifest number: 07D8
Signing time: Tue 11 Mar 2025 06:00:54 +0000
Manifest this update: Tue 11 Mar 2025 06:00:54 +0000
Manifest next update: Wed 12 Mar 2025 06:00:54 +0000
Files and hashes: 1: 1hyld3O7OS-EMCOeBm6GjG-9ffU.roa (hash: yFGM9QizRMVTdDFt/BHrOnn73I0y7gBXUCht79YZQaE=)
2: Mml8vSIcz2HsNP0GJ7K_6-O0Gss.crl (hash: Ntyjpe/FQA0Yhdru1+GByP/N0zjkIG3AjjR6C2mprJ8=)
3: R4eUqOncKtq54T9DdHF5GejdBHE.roa (hash: tC9oLJU3NKN83YtbNZIAJD3IETS+fvlLYBmiYHfzImg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:83:ca:b5:fa:6b:bd:3d:24:dc:8f:34:2b:5f:04:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32697cbd221ccf61ec34fd0627b2bfebe3b41acb
Validity
Not Before: Mar 11 06:00:54 2025 GMT
Not After : Mar 12 06:00:54 2025 GMT
Subject: CN=dd4db9988b0e4b9904cb688870b63d21bf71a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:76:6d:da:4f:aa:cd:8a:1a:45:16:79:18:
58:ff:03:12:b6:aa:1d:3b:a0:cc:92:cf:08:f2:ce:
e0:47:19:f2:08:dc:14:38:63:10:37:fd:16:75:ff:
8c:44:10:cf:50:ac:35:51:82:69:57:c8:8a:a1:2b:
a8:1e:68:70:ad:b7:6a:c8:a4:15:53:0e:8c:25:ac:
f6:23:60:d5:35:2d:7a:66:21:70:08:4a:9a:e8:ce:
9a:03:08:38:d4:82:fe:f6:ae:45:42:34:b3:f7:1a:
d1:e7:87:b3:cc:c2:5e:df:f4:db:99:2e:5e:de:7a:
57:66:18:4a:50:37:25:1b:06:7f:c7:06:2e:3f:2d:
61:f4:0a:22:a1:4b:1b:7d:24:a3:3a:8e:3c:d3:28:
e9:69:20:d0:80:dc:63:2d:80:85:c4:e5:7f:40:1b:
b7:01:2a:b1:61:e6:f4:d7:27:d3:bb:66:a5:e1:1b:
57:d9:34:85:81:ad:47:ec:ba:39:13:bd:5e:4c:31:
68:ce:83:b7:23:1c:30:27:85:9b:5a:14:0a:2e:2c:
90:3b:90:e1:6b:02:cf:4a:5b:6c:2d:85:9a:e4:e6:
49:88:e1:12:29:bd:a3:7a:36:95:51:08:81:d7:e5:
80:ff:62:80:98:cb:9c:9e:d3:03:a4:0b:eb:f3:70:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:B9:98:8B:0E:4B:99:04:CB:68:88:70:B6:3D:21:BF:71:A3:86
X509v3 Authority Key Identifier:
keyid:32:69:7C:BD:22:1C:CF:61:EC:34:FD:06:27:B2:BF:EB:E3:B4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d8:31:6a:da:33:2a:0e:4c:15:dd:bc:fb:b7:99:a9:03:a7:
ba:c8:ae:78:ed:66:ad:3b:0a:0d:f0:74:a3:07:34:54:0d:3e:
79:22:c0:0f:29:b3:59:09:bb:ee:ef:47:3d:c9:c7:b0:5f:d2:
98:29:d4:1d:e7:71:8d:3d:eb:c1:0d:20:60:81:aa:0f:7c:cf:
b6:35:99:62:d1:c6:b0:96:db:5c:f6:a4:62:e9:fa:99:6a:4f:
8b:83:8a:1d:c4:31:eb:0d:9e:86:25:ce:20:97:2a:2d:15:2d:
d1:79:b1:48:e3:45:21:ec:19:07:e9:3f:92:11:61:84:09:17:
87:6e:57:b7:89:92:26:89:58:af:be:21:d1:64:12:78:b9:bb:
bb:34:c7:b8:e5:16:7d:37:8f:3f:34:19:5e:0a:68:65:0d:ba:
6a:c7:2b:fb:fe:1a:16:83:ea:6e:33:5a:f0:20:a5:6a:93:81:
95:35:ee:a8:48:d4:99:13:4d:a7:38:48:9f:87:5b:76:7e:5c:
da:0e:7a:aa:2c:e4:b8:63:2c:45:fb:5a:88:4f:ea:0b:9e:cf:
92:2c:e2:12:ba:f4:3c:2f:b4:11:96:43:8c:2b:00:82:a1:7f:
f0:1d:33:bb:c5:49:ea:00:a6:97:29:ab:90:a5:8c:6f:68:73:
e0:46:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:38 2025 by rpki-client