Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: KSf6SyWudFAUSZ50XmRcVdP/7mTdAuRYcc6T7GKq2DU=
Subject key identifier: 09:DB:59:C2:E9:04:BD:20:15:44:0D:E1:27:8B:BF:85:A3:0A:60:AF
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 0194BCAA234081E98B347AEC7CC1C84DE6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0B8B
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: ZMXuK6HOy6JWtR3raAv3P5Sq+J0CEvWaExPc6IcPaHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:40:81:e9:8b:34:7a:ec:7c:c1:c8:4d:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=09db59c2e904bd2015440de1278bbf85a30a60af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:0f:68:85:7b:f4:5b:0c:68:1e:14:40:a5:
ee:f2:7d:d5:79:2b:d8:bc:1a:b9:98:20:25:56:d1:
2c:64:69:ad:93:65:9f:54:ab:c5:88:54:58:5e:87:
db:3c:98:ee:0f:f5:6a:b1:6b:2f:9f:13:88:c9:76:
62:7c:a3:22:1b:54:36:24:36:63:09:e1:a7:cf:43:
7a:00:e2:1b:6b:a9:61:6f:1c:6f:f5:3f:8f:a6:6a:
5e:55:be:45:8a:20:0f:a4:ce:e6:85:22:b5:b0:4b:
92:8f:57:12:cf:69:5e:60:b6:29:20:b1:f3:64:02:
63:53:a0:9a:82:2d:4a:9f:8c:26:61:4f:db:d5:8a:
ba:1d:e6:d9:cd:73:dc:43:7a:6b:8f:65:4b:05:31:
f8:4b:22:07:a3:38:8b:52:51:88:07:a5:81:a8:7d:
27:6c:7f:cf:70:9c:00:12:69:10:51:fd:17:02:99:
ae:c9:9c:7b:30:cf:de:ac:33:49:2b:6a:8c:0e:31:
c0:8f:2c:bc:c8:18:b9:ad:4d:f4:bf:d2:92:03:be:
9d:3f:14:f7:f6:8b:75:2c:26:d9:11:7c:1e:a1:d9:
99:65:7e:ba:e1:7a:a0:30:94:70:1b:e7:f5:67:3f:
17:a3:f0:d1:78:62:4b:cc:20:e4:06:2a:90:a5:31:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:59:C2:E9:04:BD:20:15:44:0D:E1:27:8B:BF:85:A3:0A:60:AF
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:6d:3c:13:b5:b0:1e:7c:cf:6b:a9:22:69:9b:62:58:5e:
7a:48:29:67:4e:51:09:1d:f3:fc:f9:71:d6:5b:8e:c8:35:d7:
43:c5:1b:01:93:73:1f:8b:9f:61:c3:c6:d3:72:98:a1:aa:d1:
09:86:ed:70:81:d9:73:5b:83:1f:4b:3d:9f:d2:75:cb:1e:20:
e2:00:d6:a6:f0:92:64:f5:b5:e0:7a:49:c4:76:5b:f2:6a:e3:
2d:4c:b2:49:bf:0a:e6:14:71:2e:45:af:35:9c:7b:e9:99:e0:
dd:ed:ac:67:76:c0:21:dc:26:42:24:fb:74:be:66:a2:34:37:
90:93:19:6f:5f:9b:be:ac:a0:32:1e:ae:b9:dd:3e:49:a6:a1:
72:a4:ff:59:9c:94:1d:83:c8:3f:2a:8e:be:3f:3f:5e:ec:4e:
76:75:52:2d:36:bd:ef:51:96:d9:37:74:7e:12:55:30:fa:fd:
70:a4:1d:0d:d8:f1:3e:f5:b4:ae:c5:b2:50:da:ad:bd:2d:4f:
2d:6c:96:46:72:1f:8e:00:70:96:28:cf:ce:89:cf:d9:0c:a1:
74:c8:39:41:12:6b:c7:c3:9d:34:06:60:cf:97:0d:92:c5:18:
ac:63:18:e1:cf:b2:41:f2:91:85:3b:08:de:a2:fb:4b:e5:d1:
a6:c0:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:51 2025 by rpki-client