Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File: MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier: cAlaCkol4S4ShA7N0PGq4ljP0H1wGjkISLoUK1K79C8=
Subject key identifier: 89:72:8E:4D:77:CF:4A:5E:F8:43:AD:78:54:F9:F3:54:44:63:62:1F
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial: 01962F743D3C5A23CFDAFD0E589973F06EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number: 14ED
Signing time: Sun 13 Apr 2025 14:01:09 +0000
Manifest this update: Sun 13 Apr 2025 14:01:09 +0000
Manifest next update: Mon 14 Apr 2025 14:01:09 +0000
Files and hashes: 1: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: emGtc7i3l9/vS2Xb1z87cHBiiHseOKc8uE4NlzhDhYM=)
2: sQzmhjMqbnYxePAUvm9cNK1Tjw4.roa (hash: tJJ1LdtYmxN6Mm4HIKko/zr0MUnt+0ElprJSwioZ+lk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:3d:3c:5a:23:cf:da:fd:0e:58:99:73:f0:6e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Validity
Not Before: Apr 13 14:01:09 2025 GMT
Not After : Apr 14 14:01:09 2025 GMT
Subject: CN=89728e4d77cf4a5ef843ad7854f9f3544463621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:c4:01:b5:53:ab:76:41:8b:ae:31:84:cc:
8d:e1:8f:f5:16:23:1f:49:51:f7:67:fe:04:d2:43:
b4:8d:f3:bc:e7:2b:52:84:a6:1d:9c:a4:09:2c:ac:
a5:33:95:99:2c:c4:a8:1c:a1:95:f4:36:ee:70:42:
d4:3b:b1:03:03:57:66:a1:ec:61:f7:0e:0d:8e:c8:
7b:57:35:a9:35:31:5a:fb:72:11:a3:7c:de:12:ad:
2f:69:97:ff:3c:5d:fd:1e:76:d8:c1:69:fd:de:fd:
ad:2e:6a:13:6a:ae:49:ff:6d:ee:65:35:8d:00:c9:
38:84:9f:62:5a:18:04:1b:83:f9:86:48:3b:f8:90:
7f:a2:38:ff:89:d5:eb:39:da:ed:3b:2c:c4:89:2c:
ef:18:57:e0:bc:09:ff:17:a0:36:d1:7f:c6:03:8b:
b7:44:95:7c:c6:57:e2:8f:36:82:7c:3a:87:49:2c:
f3:60:ac:59:c7:d2:cb:ad:8a:18:bb:9d:29:95:42:
00:ef:e5:47:cd:9c:ba:09:eb:dd:f7:fc:47:95:8a:
06:f5:6a:61:4e:13:d3:c8:51:c4:86:e5:81:d5:1c:
c6:30:a5:7e:64:49:71:7f:e6:61:29:3a:d6:18:1a:
7f:89:48:b1:95:2e:a1:a5:16:4a:06:d3:13:c2:ce:
ab:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:72:8E:4D:77:CF:4A:5E:F8:43:AD:78:54:F9:F3:54:44:63:62:1F
X509v3 Authority Key Identifier:
keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:12:ce:7a:f4:aa:d1:ff:85:25:bf:d5:61:88:04:b1:a2:02:
6d:19:7c:72:27:0e:fa:ce:5d:bc:a6:99:07:2b:f4:52:6c:ca:
f6:67:cb:1f:e5:31:60:1b:7f:a0:a4:21:f9:aa:16:a9:9b:3a:
97:64:ae:14:93:34:67:b7:e2:1d:c9:54:9a:31:1c:92:e5:55:
5c:25:23:60:23:43:86:70:7b:bd:c6:9e:f3:ea:22:70:56:ce:
19:d9:11:2f:a5:2c:c7:53:2b:f2:37:e1:ea:c3:47:3f:b4:dc:
0a:1e:93:7d:90:27:fc:9b:15:32:e0:cb:57:b9:50:94:fd:40:
51:a5:1f:49:c9:98:04:46:23:80:75:ce:d0:89:e7:c9:31:18:
05:ce:3c:8b:61:d3:e8:59:41:70:3d:aa:ae:cb:04:da:b7:26:
7f:1e:37:61:b7:a3:97:a7:29:22:be:52:3f:08:68:30:d1:0a:
3b:83:ab:4b:2a:d5:0b:ab:b9:4a:28:a5:a9:bc:03:7a:c1:d2:
cc:ec:01:57:61:0a:b7:03:d4:4d:e4:30:d3:6d:c5:61:53:dd:
05:f0:2a:c0:fc:0e:98:16:0b:71:ee:61:16:40:f9:32:0b:23:
7b:a1:1d:f5:fc:85:3d:02:a6:87:df:d9:e4:f0:39:e6:1a:ac:
a9:16:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net