Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: 1YHDOBBJlqhL67p+A8mY9PTE+LczDwIUdzySnc2KP10=
Subject key identifier: A6:27:6A:31:CB:55:1D:D1:C1:6C:65:67:78:2B:D2:D6:AC:DB:4B:3D
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 0195E0B4C700C54C2E5D36073ECC1A11FA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 01B4
Signing time: Sat 29 Mar 2025 07:01:38 +0000
Manifest this update: Sat 29 Mar 2025 07:01:38 +0000
Manifest next update: Sun 30 Mar 2025 07:01:38 +0000
Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=)
2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: 1FYRdeNmFFlYFngTJncx5ILvJn1sKdZy86cyCrfeDyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:c7:00:c5:4c:2e:5d:36:07:3e:cc:1a:11:fa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Mar 29 07:01:38 2025 GMT
Not After : Mar 30 07:01:38 2025 GMT
Subject: CN=a6276a31cb551dd1c16c6567782bd2d6acdb4b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:3c:ac:95:e4:46:e2:5e:2c:2d:ce:c0:02:
96:1f:29:9c:0e:ee:81:67:07:47:08:4f:c0:d3:ac:
9b:ed:b6:63:66:a4:e8:d8:63:26:d2:8e:bf:19:8e:
a1:05:65:fc:59:f0:e4:b0:f1:12:57:12:d7:92:8c:
df:f0:fe:32:9d:8d:2f:c1:f5:8a:00:fb:a1:03:ad:
e2:7e:a5:18:54:b5:62:92:81:ec:d3:a7:c3:67:d9:
c9:96:d3:a8:53:0a:25:83:4d:73:a2:bf:9e:9c:05:
37:a5:8b:f2:42:f7:e7:7c:7a:01:5d:40:91:a1:18:
a3:a0:03:9a:96:cd:12:99:45:86:43:22:2f:1f:b1:
5d:86:b7:e3:49:f6:30:d9:a1:db:68:45:16:44:3d:
7f:f2:4b:04:65:88:94:92:97:b4:e4:d5:d7:33:58:
9f:f3:bc:72:c8:5c:45:71:02:7a:3a:df:b5:d3:57:
a7:47:e2:80:11:d5:23:09:79:fb:e9:4a:5a:91:88:
30:8a:1a:89:5f:23:a8:dc:ae:9c:be:82:47:df:50:
f5:fb:78:79:d1:bd:a4:69:00:fe:58:72:2f:bd:88:
21:56:3b:a8:a6:7c:23:60:2e:74:73:76:da:d8:51:
ed:18:42:f0:a2:bf:c1:5c:25:78:9b:49:a7:22:11:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:27:6A:31:CB:55:1D:D1:C1:6C:65:67:78:2B:D2:D6:AC:DB:4B:3D
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:86:3b:ca:67:26:0d:2f:94:64:f1:20:29:f7:fa:78:90:59:
64:a5:82:5c:bd:88:36:72:a7:13:06:6f:cb:6a:71:8f:74:7b:
20:f6:41:7c:e7:5a:17:4f:58:93:52:4a:95:52:0a:5e:7b:e0:
c9:c8:3f:ee:db:e3:1d:ad:2e:f5:93:93:bd:50:95:de:6c:5b:
5f:80:bc:0e:87:f3:ff:72:20:ff:48:70:a1:85:2c:9d:c7:e2:
f3:ed:cd:d7:11:94:59:2c:54:d4:d3:58:e2:5d:15:4c:74:d7:
65:0e:9f:1a:37:50:0d:a1:14:9d:7e:3f:93:a0:6e:38:02:b9:
68:a9:1c:a3:36:a2:28:06:9c:a7:1b:57:f6:49:e0:b9:a8:f7:
2a:3c:46:ec:7a:10:d6:c7:dc:ce:78:36:43:7a:b2:71:c6:b7:
dd:2e:79:d7:7f:99:cf:01:d2:1a:29:64:4f:8c:62:d0:11:60:
2d:74:73:76:cf:e0:29:4b:30:df:87:47:de:88:cc:f6:c3:57:
3a:90:0d:bd:d6:14:b5:8e:79:c0:64:d9:6f:93:56:9d:4e:f8:
73:17:07:75:65:86:24:b2:e2:8b:28:29:fc:8f:35:60:99:7d:
14:cd:64:75:ad:c1:5c:cb:cb:3e:97:38:cb:83:ba:06:66:6c:
d4:8b:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:46:49 2025 by rpki-client