Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: QTwQnDTgr4c7hqgn3ki6HelvXuHGqzWqjtVw1Xs3W1E=
Subject key identifier: 56:3E:76:C5:FB:11:EF:70:E7:81:E6:06:75:D1:3B:CD:B8:00:E5:C1
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 0194BBCE406678D5E206834DFA32F16BDF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 090E
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (hash: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: FUDvEI1J4R2ixq52Y4tFBOOCSfC5u5crCSmZpy2wLXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:66:78:d5:e2:06:83:4d:fa:32:f1:6b:df:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=563e76c5fb11ef70e781e60675d13bcdb800e5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:7a:59:a4:9a:c0:8f:79:0c:0d:1e:cb:fe:
0f:b9:d1:23:86:c6:0a:26:d8:c0:8d:52:9c:d5:77:
1e:f2:fd:8c:6e:68:fe:9c:84:5b:98:7d:67:37:e4:
16:b7:4e:39:9f:ac:22:0e:84:0d:29:7f:da:8d:bc:
7a:9d:ea:59:3f:e7:cb:ee:5a:f4:ce:bf:41:51:8d:
f9:16:27:9c:a2:99:e8:96:9e:7d:16:9d:f5:f0:a5:
73:c9:52:a9:e7:a3:40:57:53:02:ca:c3:3d:46:58:
d5:a6:40:77:2b:cf:98:60:20:50:e7:27:9e:4f:2a:
95:72:a5:7f:e2:8f:ff:72:ee:84:e7:b1:4f:c8:b3:
90:7c:7d:56:22:2a:32:fd:c6:d7:a8:d5:e1:46:8b:
c8:42:76:c1:04:6b:c9:c9:bc:e4:c9:42:11:6d:d9:
24:c6:0c:d8:f3:ee:6e:87:c6:41:2e:13:da:b5:4a:
08:9b:7e:c1:6a:79:d7:c4:cb:93:3f:cf:dc:16:ec:
95:09:58:c9:62:27:8a:f5:e0:b3:3e:c4:fb:35:44:
af:32:8e:57:06:80:73:0d:e6:79:ec:27:5f:85:a8:
ea:2d:4f:16:70:18:31:7a:f2:18:fc:b7:5b:c7:6e:
dd:47:ed:4c:3b:69:1c:2c:07:01:1e:b8:24:c1:bb:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:76:C5:FB:11:EF:70:E7:81:E6:06:75:D1:3B:CD:B8:00:E5:C1
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d4:fe:21:78:a9:22:62:d4:e7:06:49:3e:0b:53:6a:78:1c:
86:ca:88:05:fd:43:7e:c6:67:ea:4f:4c:76:86:0d:84:f2:d2:
31:a6:6d:3e:c7:5e:17:2d:66:98:8e:e6:1b:70:9c:aa:3c:bb:
f4:d0:3d:82:d6:a8:26:ac:6b:6e:da:f2:97:41:96:51:89:db:
98:60:cd:51:ab:96:f1:b7:81:81:f4:e0:f0:52:84:82:ac:a6:
a3:3f:2a:43:48:eb:10:47:42:ce:88:46:ec:6f:05:c1:6c:87:
47:15:c8:39:f7:57:8f:43:52:fe:1d:e2:c9:1b:88:e0:0f:28:
86:03:7a:87:46:f0:cd:00:6a:f2:36:ea:e9:f9:b4:d5:3a:1b:
10:94:2e:6e:6b:48:11:38:b6:71:f0:33:ae:cd:fe:2c:15:6f:
6c:0f:5f:dc:f6:cb:e9:5d:60:34:4b:b4:39:41:ef:e8:55:68:
63:25:c8:bd:d0:42:18:bf:00:fa:46:a8:77:3b:e8:82:ba:dd:
70:d3:e0:ec:a3:7a:b0:69:3d:22:f5:41:27:28:6b:b9:f9:c7:
52:e4:5c:cd:94:65:7d:b2:41:2d:21:d3:40:69:7e:38:75:9b:
84:e2:76:80:6c:48:3a:33:49:5c:a5:39:13:f0:90:ce:94:8e:
0d:05:98:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkBmeNXiBoNN+jLxa99rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGNmOWY2ZDAzNGY0Njc2MGY0ZjU5YjE3MzlkZTEyN2I4
YWRmZjMwHhcNMjUwMTMxMTAwMDQzWhcNMjUwMjAxMTAwMDQzWjAzMTEwLwYDVQQD
Eyg1NjNlNzZjNWZiMTFlZjcwZTc4MWU2MDY3NWQxM2JjZGI4MDBlNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp96WaSawI95DA0ey/4PudEjhsYK
JtjAjVKc1Xce8v2Mbmj+nIRbmH1nN+QWt045n6wiDoQNKX/ajbx6nepZP+fL7lr0
zr9BUY35Fiecopnolp59Fp318KVzyVKp56NAV1MCysM9RljVpkB3K8+YYCBQ5yee
TyqVcqV/4o//cu6E57FPyLOQfH1WIioy/cbXqNXhRovIQnbBBGvJybzkyUIRbdkk
xgzY8+5uh8ZBLhPatUoIm37BannXxMuTP8/cFuyVCVjJYieK9eCzPsT7NUSvMo5X
BoBzDeZ57CdfhajqLU8WcBgxevIY/Ldbx27dR+1MO2kcLAcBHrgkwbtkBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY+dsX7Ee9w54HmBnXRO824AOXBMB8GA1UdIwQY
MBaAFLJM+fbQNPRnYPT1mxc53hJ7it/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMt
OTk1YzM2OWRhNjcyLzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMtOTk1YzM2OWRhNjcy
LzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodT+IXip
ImLU5wZJPgtTangchsqIBf1DfsZn6k9MdoYNhPLSMaZtPsdeFy1mmI7mG3Ccqjy7
9NA9gtaoJqxrbtryl0GWUYnbmGDNUauW8beBgfTg8FKEgqymoz8qQ0jrEEdCzohG
7G8FwWyHRxXIOfdXj0NS/h3iyRuI4A8ohgN6h0bwzQBq8jbq6fm01TobEJQubmtI
ETi2cfAzrs3+LBVvbA9f3PbL6V1gNEu0OUHv6FVoYyXIvdBCGL8A+kaodzvogrrd
cNPg7KN6sGk9IvVBJyhrufnHUuRczZRlfbJBLSHTQGl+OHWbhOJ2gGxIOjNJXKU5
E/CQzpSODQWYGA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:04:32 2025 by rpki-client