Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
File: SkcTzDG36jiRvhRV3hHcwvMp1RU.mft (raw, json)
Hash identifier: sM/NvK+jndR/BC4eh3Ck1XTd87pZPT92MlPA50XgUmo=
Subject key identifier: 8F:67:86:C7:C5:D7:9F:CC:FD:55:7E:96:0A:16:20:B7:0B:BC:22:BC
Authority key identifier: 4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
Certificate issuer: /CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Certificate serial: 0194BD855575E705BD71106E687B8C125F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
Manifest number: 0AB5
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: SkcTzDG36jiRvhRV3hHcwvMp1RU.crl (hash: H1ZErAH4EWZVydDS4o+m0XHbrPUJbmOFu/DVAvm2hIA=)
2: gF8ZN3C0a45HX0BtFSTg6shwTi4.roa (hash: YzHFKuHmdK7saGrTnv4LM1NaquoFvehSW3aShl6a+YM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:55:75:e7:05:bd:71:10:6e:68:7b:8c:12:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=8f6786c7c5d79fccfd557e960a1620b70bbc22bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:f6:4e:56:81:4c:32:4b:53:0d:ae:49:a3:
cd:39:60:4d:ea:c3:4f:7e:4e:e3:e0:3f:b2:7f:c0:
ad:b6:ca:1b:c2:ef:45:7d:68:69:f3:97:fd:b1:fd:
e9:32:0e:4c:b9:cf:22:bc:4f:b7:b9:43:6f:bb:45:
8b:1a:a5:5e:63:c2:8d:9e:ee:c5:ec:3d:68:9f:eb:
5d:e5:00:0a:68:83:39:1c:19:99:73:c0:68:a0:1a:
42:1d:04:d7:67:7f:3d:0e:e1:36:57:90:88:20:c9:
1a:06:3f:17:83:45:b6:22:2b:52:f1:73:74:7f:f2:
73:8b:ab:61:92:c9:30:d9:9f:98:93:7e:d1:2a:e1:
92:50:c6:33:45:5f:d6:74:d9:29:75:f9:e9:c1:1d:
ee:4c:5e:f7:5a:62:28:46:d2:55:1a:92:57:50:24:
b7:8a:c0:b7:2c:d2:89:28:a2:d3:1f:0b:70:41:75:
25:23:84:ca:31:c8:70:9e:17:56:86:46:b3:c1:64:
1e:33:91:de:cd:25:4f:05:4e:be:16:a2:75:4c:c1:
08:1d:c9:82:dc:89:4b:3c:e1:8f:3c:27:f8:05:31:
17:13:82:28:67:31:84:84:06:d2:59:a5:a7:d6:39:
24:e7:8d:50:2f:28:f3:5f:17:31:fa:0d:90:b2:86:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:86:C7:C5:D7:9F:CC:FD:55:7E:96:0A:16:20:B7:0B:BC:22:BC
X509v3 Authority Key Identifier:
keyid:4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c5:48:51:5d:46:0b:b7:98:e1:5e:cc:81:36:a7:fd:c7:8d:
fb:6e:7a:73:4e:bb:18:3e:35:1e:45:12:de:3d:9c:d4:77:97:
fe:79:9e:8e:aa:82:b2:35:22:90:53:0a:ef:62:b3:b5:39:ad:
2a:f3:d9:9d:d7:ed:da:5f:d7:80:98:80:89:75:62:7b:a8:c3:
cb:6f:5e:2f:dd:51:86:7f:5b:06:a9:1a:14:b1:08:52:aa:ca:
ac:18:5a:e4:1a:3d:9e:24:c4:00:a9:87:19:dc:62:b8:17:c1:
71:db:3c:a5:85:da:45:66:1b:f7:29:62:04:51:d4:45:b8:c9:
b5:49:78:cb:20:ca:37:90:7a:be:00:af:a4:c9:c6:9d:5c:46:
2f:70:7b:95:c6:5e:26:81:a3:9c:20:62:f1:59:11:ec:cc:c0:
f3:fa:2f:57:d9:3e:5b:23:42:de:3f:2b:f8:9d:87:2f:fc:15:
01:15:8e:a2:23:34:01:d2:41:9f:c5:4f:15:71:aa:8b:59:d2:
75:bd:f8:aa:3d:28:dc:5a:85:0f:8b:26:ac:d1:84:fa:b7:02:
22:61:c9:18:aa:39:ee:74:6e:f8:e6:d5:a6:ef:1f:4e:ef:a9:
7a:a3:3a:ae:00:bf:76:bc:72:d6:e5:db:fd:5c:c5:9c:11:91:
da:e3:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:36 2025 by rpki-client