Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
File: mlTioC3EzxKTf8ybLqE7M0GggGE.mft (raw, json)
Hash identifier: e/kv4YAytF6aVLsrbSAyXmkzd/BVDYkbsLQsbszfYKA=
Subject key identifier: 5D:E8:38:DA:C2:F9:A3:91:70:5D:58:4C:90:EE:F7:5C:62:C2:14:32
Authority key identifier: 9A:54:E2:A0:2D:C4:CF:12:93:7F:CC:9B:2E:A1:3B:33:41:A0:80:61
Certificate issuer: /CN=9a54e2a02dc4cf12937fcc9b2ea13b3341a08061
Certificate serial: 01960DC3F4BDD66A5D8B4960FC776FF7A837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlTioC3EzxKTf8ybLqE7M0GggGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
Manifest number: 0B6B
Signing time: Mon 07 Apr 2025 01:01:08 +0000
Manifest this update: Mon 07 Apr 2025 01:01:08 +0000
Manifest next update: Tue 08 Apr 2025 01:01:08 +0000
Files and hashes: 1: mlTioC3EzxKTf8ybLqE7M0GggGE.crl (hash: HvgK5OT63e79zcVLxEH3esSU98pLuHBKLEoy03y4he0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c3:f4:bd:d6:6a:5d:8b:49:60:fc:77:6f:f7:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a54e2a02dc4cf12937fcc9b2ea13b3341a08061
Validity
Not Before: Apr 7 01:01:08 2025 GMT
Not After : Apr 8 01:01:08 2025 GMT
Subject: CN=5de838dac2f9a391705d584c90eef75c62c21432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:3b:0a:29:de:57:94:fb:38:dd:09:a1:43:
bf:6c:14:f9:ef:95:37:da:77:e2:e8:01:77:38:42:
85:a8:4c:17:f7:c2:90:9a:ff:7c:9a:43:42:30:79:
eb:80:72:b9:fb:f2:62:ce:fb:ce:cf:34:1d:a9:e5:
8f:f2:22:a8:79:49:5e:03:14:15:5a:54:bd:1d:c9:
24:d7:51:5c:31:e0:0c:c6:c5:44:df:55:61:bd:30:
9d:e2:42:a9:5b:89:3c:37:d5:bf:cb:2e:e8:b5:5b:
86:38:78:39:f6:b3:38:98:ac:be:54:0e:95:85:25:
d9:d8:34:65:08:d4:3d:d1:70:1b:ba:7d:16:ca:12:
6c:b7:41:3b:d1:54:91:b9:54:f8:ff:9a:fc:0c:c1:
55:14:92:7f:28:90:ed:ed:cc:97:4a:46:2e:ad:34:
8a:da:a3:f6:90:27:8c:17:94:ce:cd:c4:d8:7b:77:
8c:53:21:62:16:34:d0:4e:eb:07:cf:69:0c:44:98:
ea:e0:66:f2:7a:b6:ae:65:04:c9:df:db:94:f9:63:
dd:13:22:b5:c0:dc:af:13:0a:6c:60:67:77:64:6f:
06:05:d8:51:36:c9:5e:b6:6e:74:58:00:b5:e2:ce:
d0:b0:ef:7b:7d:19:f5:c6:7b:5f:42:85:b4:de:df:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:38:DA:C2:F9:A3:91:70:5D:58:4C:90:EE:F7:5C:62:C2:14:32
X509v3 Authority Key Identifier:
keyid:9A:54:E2:A0:2D:C4:CF:12:93:7F:CC:9B:2E:A1:3B:33:41:A0:80:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlTioC3EzxKTf8ybLqE7M0GggGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c5:a7:65:2c:e2:c3:16:54:74:ce:78:36:34:01:8f:9e:49:
2f:b1:5e:22:ed:2b:ee:64:1c:c6:eb:0f:03:13:c4:85:b4:db:
31:41:23:f3:ea:26:17:1c:d9:97:c1:8d:c1:92:69:d8:a4:50:
74:4c:bf:b1:82:0d:5b:1a:6b:0b:c3:eb:29:db:c2:23:c9:8a:
a7:7a:b1:ce:21:d7:43:90:62:fe:63:8f:4f:b3:c0:24:ff:e7:
c7:55:49:3f:02:20:bd:e7:d7:14:14:1f:00:b1:40:1d:c7:0d:
23:b6:8b:08:ed:b4:87:35:3a:d5:03:1d:ff:47:2f:42:59:7e:
bd:03:f2:ab:bf:bd:72:cf:a6:89:a1:79:71:09:ab:34:d2:7d:
5c:4e:7c:cd:74:30:1d:dc:1b:f6:55:f5:6e:53:58:bb:ee:35:
c1:8d:3a:73:df:65:6d:dd:bf:0e:28:d0:ee:0d:4f:74:3d:5a:
d9:65:d4:7e:c7:0e:b4:86:7d:bc:f7:f6:06:ec:06:30:50:e5:
48:6a:95:92:33:f3:51:73:a3:a5:64:22:5c:d4:a9:46:27:b0:
ba:77:f0:c5:5a:74:15:cb:6a:37:40:d1:79:db:9f:8b:c1:02:
15:80:39:25:58:6b:05:e7:ac:df:c9:21:67:22:0f:76:12:a4:
9b:18:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:46:58 2025 by rpki-client