Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1e00c6-46fb-499d-bff3-09874befd4bb/1/Ml1_VrcXpYFHobuq3vC7b0V9NdY.mft
File: Ml1_VrcXpYFHobuq3vC7b0V9NdY.mft (raw, json)
Hash identifier: g/KpeI+hBC4uSvjoiVvCWEyCawc1Odu8vM8Lxy3sjOo=
Subject key identifier: D2:BD:36:0A:12:03:3B:B9:83:96:66:96:CC:5A:85:CF:CD:3F:24:50
Authority key identifier: 32:5D:7F:56:B7:17:A5:81:47:A1:BB:AA:DE:F0:BB:6F:45:7D:35:D6
Certificate issuer: /CN=325d7f56b717a58147a1bbaadef0bb6f457d35d6
Certificate serial: 018DC59B95A01F4A41EE17926ABB93D27660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml1_VrcXpYFHobuq3vC7b0V9NdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1e00c6-46fb-499d-bff3-09874befd4bb/1/Ml1_VrcXpYFHobuq3vC7b0V9NdY.mft
Manifest number: 0E
Signing time: Tue 20 Feb 2024 08:22:04 +0000
Manifest this update: Tue 20 Feb 2024 08:22:04 +0000
Manifest next update: Wed 21 Feb 2024 08:22:04 +0000
Files and hashes: 1: Ml1_VrcXpYFHobuq3vC7b0V9NdY.crl (hash: eUvfWN/CCutj2lMHGhhQCbOPUykRar9SS3Gw+er9F1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:9b:95:a0:1f:4a:41:ee:17:92:6a:bb:93:d2:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325d7f56b717a58147a1bbaadef0bb6f457d35d6
Validity
Not Before: Feb 20 08:22:04 2024 GMT
Not After : Feb 21 08:22:04 2024 GMT
Subject: CN=d2bd360a12033bb983966696cc5a85cfcd3f2450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:83:91:6a:04:eb:db:4a:9a:89:ee:d7:04:
b4:d0:1b:d0:94:e7:91:b4:61:58:7b:8d:1e:d6:86:
fa:70:4e:01:7e:37:6c:a8:1f:26:23:8a:74:ea:e1:
42:d3:e1:05:e6:b5:26:81:09:9b:c7:80:00:7b:55:
8b:a9:80:22:6e:70:b4:15:52:8b:5f:59:35:db:6d:
23:fb:98:92:9e:89:2f:51:1c:b6:6f:ce:84:bb:3c:
90:ed:a0:c6:fb:27:f5:97:65:2c:dd:86:cc:a9:d1:
72:54:82:48:cb:84:88:45:cd:f3:2c:66:be:2d:b2:
07:1a:cf:69:07:8c:60:c6:09:1c:a0:14:0a:fe:5b:
0f:89:ba:24:a3:52:99:53:b6:72:62:47:ba:f3:4a:
2c:10:02:5d:d8:fb:63:35:73:d6:5d:85:7f:29:1a:
53:ae:fe:fb:09:04:a2:93:d6:2a:13:72:ae:81:76:
a7:d0:67:09:39:e7:2e:02:44:bc:8e:6c:1f:7d:1d:
97:17:d9:5d:70:04:b1:ca:27:d5:9b:36:13:ae:99:
ef:f7:f8:f8:62:82:6f:93:4c:43:27:9a:2a:a3:72:
1d:be:10:5b:2a:c7:6a:17:c0:c8:76:00:d9:e5:77:
51:9a:62:2d:64:c7:71:10:71:40:d4:6a:4c:0d:91:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:36:0A:12:03:3B:B9:83:96:66:96:CC:5A:85:CF:CD:3F:24:50
X509v3 Authority Key Identifier:
keyid:32:5D:7F:56:B7:17:A5:81:47:A1:BB:AA:DE:F0:BB:6F:45:7D:35:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml1_VrcXpYFHobuq3vC7b0V9NdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1e00c6-46fb-499d-bff3-09874befd4bb/1/Ml1_VrcXpYFHobuq3vC7b0V9NdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1e00c6-46fb-499d-bff3-09874befd4bb/1/Ml1_VrcXpYFHobuq3vC7b0V9NdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9c:c7:a5:f4:ae:9d:56:a4:23:ee:1c:7c:a5:91:09:dd:63:
55:a0:c9:c1:48:72:46:d7:a4:6b:26:82:a8:dc:2c:64:0d:8c:
79:52:61:ae:1e:e9:f8:ee:44:3f:bb:a0:80:c5:a0:c7:2f:8c:
10:b4:d5:eb:69:1d:d2:5a:c8:6f:95:59:d6:cc:f6:35:64:c9:
3b:a3:ee:35:99:e5:21:9b:5d:ae:83:de:36:a6:ba:a0:b6:3d:
7f:aa:13:cf:af:7d:62:aa:95:3b:a1:5f:a4:64:b9:b6:ce:5b:
92:89:64:12:b5:3b:88:e8:e0:21:21:07:8f:a6:0d:7b:34:94:
b3:06:9b:b8:40:58:71:fd:dd:c5:2c:c7:f8:8f:99:ce:b8:5c:
a5:d6:b4:23:7a:01:76:8a:a1:ca:f3:cb:40:c0:be:20:d8:c5:
02:37:5d:05:23:c5:4a:57:df:3b:8a:32:40:6f:1d:5f:ba:9b:
63:89:81:fd:f9:d7:a6:08:d0:9d:d2:04:8b:b7:e6:13:ef:86:
f1:02:1a:fe:b5:10:24:33:32:1b:2d:28:4c:d1:5b:5d:f1:cf:
90:2d:96:65:fd:6a:90:a0:e6:5f:31:dc:d4:e2:06:56:a4:33:
53:69:f4:ff:de:66:9c:37:90:32:2d:25:1d:c0:92:7b:5d:ee:
71:93:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:36 2025 by rpki-client