Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: 3RCVlMcRwZ+38kWOspJD0UpC8Nj5dWaMf+LBNOoaYI0=
Subject key identifier: 15:9E:21:A4:00:AE:C1:E8:54:4F:4E:CB:35:9D:EF:C9:D0:3A:70:E7
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 0195E0EB11D61B016D51F09E592EB7DD532E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 08:00:56 +0000
Manifest this update: Sat 29 Mar 2025 08:00:56 +0000
Manifest next update: Sun 30 Mar 2025 08:00:56 +0000
Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: gsJ75F3S4XTa3JcxV6kivD0b5dTvgjiXDvXe3X+g6F0=)
2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:11:d6:1b:01:6d:51:f0:9e:59:2e:b7:dd:53:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Mar 29 08:00:56 2025 GMT
Not After : Mar 30 08:00:56 2025 GMT
Subject: CN=159e21a400aec1e8544f4ecb359defc9d03a70e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:48:e0:c9:84:44:3b:08:30:9f:f6:28:d2:
4c:9c:92:8e:f0:2f:4b:0f:cd:c0:e5:05:b9:1d:52:
d9:43:9e:80:4c:b2:2b:b7:72:d6:75:07:44:7e:05:
2f:b0:70:81:b1:e4:35:af:41:60:0f:f7:d3:46:97:
25:39:67:76:5f:b0:50:7f:24:c8:79:16:ea:7b:45:
9f:75:6d:b0:03:c4:0e:5a:cd:59:5b:3d:2c:ee:08:
15:23:87:50:d8:66:c6:e4:de:b1:d6:53:00:ac:f0:
81:37:3e:dc:d3:f3:3a:57:3d:36:68:59:31:d2:c3:
a0:70:35:0d:fa:7f:d2:c5:c9:d0:e5:11:72:6b:ff:
98:37:bf:3d:a1:4b:ba:9f:c1:46:a8:83:eb:c1:37:
2b:14:e0:b4:e6:cc:58:1a:b7:f4:15:b8:be:76:79:
79:40:43:53:dd:39:a7:08:4d:aa:bb:a1:87:74:63:
d6:73:9f:c6:f6:d3:a9:f1:34:3d:63:fd:00:ee:5d:
7a:df:4c:19:b1:0b:98:de:21:67:04:9d:91:41:e4:
64:d5:94:5c:d2:2c:0c:92:20:de:36:59:84:28:5a:
8a:82:59:eb:d3:96:3f:96:aa:b6:ee:84:34:a1:4e:
8d:43:f5:e5:14:7c:bc:6b:9e:ba:5d:a1:e6:0a:05:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9E:21:A4:00:AE:C1:E8:54:4F:4E:CB:35:9D:EF:C9:D0:3A:70:E7
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:09:b2:d8:91:31:fe:58:df:ff:8a:3d:dd:f7:e0:68:a0:5f:
b0:f1:22:35:5e:3c:7a:46:0f:b4:6f:e0:2f:3a:04:e2:92:3d:
4c:08:68:25:b5:a3:30:41:40:b9:7e:d2:c8:a1:d2:87:14:d6:
45:d8:83:f7:47:ca:4e:2f:3b:cc:9b:1e:cc:e5:78:c0:11:54:
fc:a6:f7:d2:57:71:bb:e5:c9:6b:32:3a:92:4a:ef:98:78:eb:
0d:e1:83:41:a6:71:e0:55:f4:79:98:63:75:b6:d7:4a:3f:14:
52:cf:3c:18:6f:eb:f7:05:4b:8e:3b:de:6c:96:6b:17:6a:e1:
7f:53:f8:ce:25:59:9f:00:89:1d:1c:94:56:d7:05:6f:02:8a:
bb:b1:66:5a:b3:70:5e:92:7f:84:df:2d:98:14:49:35:ad:be:
7b:17:d3:3a:12:77:21:21:1f:23:d8:c1:a7:e0:3d:d1:b5:89:
71:1c:c9:c1:8e:88:c1:43:21:3b:05:b4:1c:fa:86:65:ec:1e:
2b:75:9f:bb:32:b0:8b:c9:5b:3f:6f:c5:35:5d:f0:f8:9f:38:
cb:4a:67:5a:22:4c:6c:70:76:1d:27:0b:af:fb:8c:26:17:c0:
f4:d7:bf:51:1f:0b:ec:22:33:a7:67:b6:76:c2:b3:eb:7f:4e:
a4:a8:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:20:40 2025 by rpki-client