Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: 6D/xh68E9SL6tlLpekk/tjimx3FnePMEvxFn26AW3Jk=
Subject key identifier: FD:57:A5:E7:C4:57:0C:21:7A:E1:4E:C5:6F:41:3F:E7:DE:72:8B:EF
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 01962E98682153B3B2767F698FBD335477FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0AAF
Signing time: Sun 13 Apr 2025 10:01:02 +0000
Manifest this update: Sun 13 Apr 2025 10:01:02 +0000
Manifest next update: Mon 14 Apr 2025 10:01:02 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: vl5+JwGz/AD2GfbOLg9vTevC3fmSPLJ4Pvt9/LglWog=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:68:21:53:b3:b2:76:7f:69:8f:bd:33:54:77:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Apr 13 10:01:02 2025 GMT
Not After : Apr 14 10:01:02 2025 GMT
Subject: CN=fd57a5e7c4570c217ae14ec56f413fe7de728bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:be:db:82:6e:27:6c:cc:2f:78:74:75:17:
2d:d8:77:e2:22:de:ea:a1:c9:b6:d2:fd:31:d0:d7:
f5:d8:6e:df:32:03:12:a5:f0:42:ae:37:41:04:3c:
34:d6:c6:e7:5b:2e:5c:2f:b1:25:4e:56:36:55:f3:
38:c3:3b:cf:a7:7b:d2:2e:b5:eb:9d:e2:6e:86:07:
42:88:02:cd:68:5e:7b:81:9a:6c:6a:50:ad:8e:70:
ea:fd:c0:8f:70:c4:40:fd:0c:ec:03:e5:9d:35:1f:
89:a2:11:ec:42:0c:67:04:ed:47:2c:76:58:05:48:
a0:f1:73:81:31:5b:a5:53:0c:28:3f:64:67:1e:a0:
28:d7:ea:7e:8f:75:0c:0d:e5:fc:3e:e0:a4:bc:5f:
cf:fa:79:46:2e:a0:99:29:53:ca:d8:0e:b0:0b:c5:
87:d6:45:df:ea:dc:3a:5f:57:6f:5a:80:10:d1:d1:
05:27:e4:a0:93:69:f2:01:20:68:a4:21:a4:ab:c1:
ed:17:aa:fd:fb:b7:34:64:23:96:20:7e:f2:e7:b1:
fb:35:1f:fb:db:dc:d9:e3:2e:5b:b8:09:c5:fe:7c:
d0:a2:7a:eb:63:af:8e:f3:c0:62:26:7d:4c:2d:87:
9d:b6:68:ff:4f:28:cb:df:0e:6f:d0:2a:02:7f:e5:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:57:A5:E7:C4:57:0C:21:7A:E1:4E:C5:6F:41:3F:E7:DE:72:8B:EF
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:54:51:87:07:1a:87:60:0c:98:d7:5a:67:91:73:c7:0a:1c:
20:ba:14:45:b0:62:01:c7:41:a4:0e:7a:a5:ef:13:16:78:b7:
e5:cf:a5:bf:70:86:a2:92:5d:8d:22:78:bf:92:5b:1d:95:81:
5e:89:c3:d8:a0:73:bb:88:32:f1:ef:7c:a4:ad:a9:9e:80:17:
a6:d1:62:9d:dc:9d:48:cc:eb:6b:6e:de:d5:98:37:77:2e:5d:
95:0e:68:d2:e1:9e:6b:fa:ac:67:ec:97:a7:d2:2a:8b:95:40:
d2:2f:34:3a:e1:fe:dc:cc:1f:2d:36:09:67:af:7f:e1:9a:39:
ac:27:6a:ba:be:c5:ae:7e:fb:90:2c:16:70:31:c1:35:2c:ed:
59:f5:3a:34:7c:a0:a7:9d:a3:fd:02:d1:7b:fe:85:aa:c7:30:
7d:4d:0e:e6:85:d5:42:a1:39:1c:74:5f:76:d6:b3:cf:7d:20:
be:ed:4a:96:bf:2b:7c:cf:15:b9:1f:03:4d:ce:81:bf:ca:e0:
af:8f:fa:15:a1:b4:78:06:52:f1:64:f2:ad:d4:de:8e:22:6b:
ff:b9:0c:47:01:f5:23:e7:ba:77:c6:20:d8:de:9a:47:3f:05:
54:d4:75:13:f5:23:fe:12:26:30:af:d9:b9:2c:93:66:ff:90:
d3:fd:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net