Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: fpKNh9WV3OKCj6FPog9n8gw1Y53fqQ5grLBKFvMEJTo=
Subject key identifier: 29:8F:F2:B7:70:78:35:40:81:D2:44:EB:10:5F:B0:A4:70:DC:C3:8D
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 0194BCE075E1AA8E84A25D1CE24BCF7E6AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: FMBsd665mkW877Lm7mjOcBolr5g.roa (hash: 3614fl/uw1OiBqiLqW5MtPTJk1bhJcyOd8R/vQp2zPM=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: WKk5KrAcQXPDeH8wgwxOV7w5PmRfYTvKahR+056pVqo=)
3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:75:e1:aa:8e:84:a2:5d:1c:e2:4b:cf:7e:6a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=298ff2b77078354081d244eb105fb0a470dcc38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:12:f3:1f:cf:2d:9d:ad:57:c6:e1:dc:d3:
3a:4e:19:50:a1:a8:52:59:1f:0e:3a:31:e3:e1:8c:
f4:62:cd:3b:9c:b5:dc:16:d5:aa:ba:a2:72:81:2c:
81:09:0f:b9:9a:b7:63:7d:51:4d:fc:66:e4:3b:14:
b5:9b:aa:21:55:00:60:c4:f8:dd:9a:f5:63:4b:a4:
11:a1:1a:12:3b:cd:5a:9d:83:71:28:46:c8:e3:87:
28:11:b2:73:b0:e4:9a:56:98:f7:36:b9:36:86:51:
e8:14:1b:82:65:27:5d:ec:73:9d:65:ed:97:04:af:
17:53:9c:31:7a:2c:35:52:25:97:bf:cf:2b:5c:e5:
9a:e1:ee:31:b8:4e:22:c6:f1:c6:33:bf:50:6e:0c:
65:4f:28:91:37:73:4e:b2:83:80:e4:b7:0b:bc:6c:
7b:32:08:5e:77:2b:a4:48:65:7b:56:b1:06:05:50:
61:a7:3e:26:3d:92:f9:05:66:5c:2d:49:2b:e4:77:
61:e5:72:13:b8:56:f5:3f:51:89:23:1d:49:15:39:
92:df:49:54:46:ef:34:c6:a5:13:e3:04:e6:ec:7e:
91:98:a8:72:a9:9c:60:c9:18:19:f8:ee:8e:2a:c6:
06:d9:ed:30:cf:2d:3a:23:7c:f7:c8:7e:0d:ff:8b:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:F2:B7:70:78:35:40:81:D2:44:EB:10:5F:B0:A4:70:DC:C3:8D
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:ca:7e:32:f4:e4:17:a1:2e:c6:bf:9b:ef:14:57:bb:dd:
62:fb:0a:6f:1c:90:41:fb:09:d4:d4:a7:1a:7e:3b:d1:6e:ac:
cb:3a:63:17:6c:99:5d:5f:33:ee:b6:5f:53:90:fe:09:97:cd:
a5:e4:f6:9c:9e:50:30:c1:5f:3e:08:7a:64:55:9e:7b:5c:13:
bf:d9:dd:b0:a8:79:8d:f0:8f:3a:b5:c7:e9:60:af:a5:04:86:
03:16:f7:06:3f:ce:1f:52:52:3f:58:00:1d:b9:b7:43:fa:57:
c0:56:56:23:5a:44:94:9d:75:43:a6:87:a6:90:e2:e9:79:c6:
98:d6:d5:1b:67:78:f4:b2:13:56:0d:2b:50:ce:84:50:34:47:
b8:a2:b6:5f:41:d0:03:f6:d1:c5:db:04:cc:8d:b0:bf:02:33:
cd:67:9d:1b:88:22:30:54:5a:23:e9:5f:08:17:e9:c7:6d:cc:
e8:80:dd:cc:11:5a:93:42:d6:7b:ae:ea:3c:b1:c0:eb:26:80:
fc:2b:11:93:2f:a9:ef:b8:29:d6:36:78:1b:57:5f:74:3f:36:
c4:d2:13:00:0d:48:ae:18:93:63:d0:df:f5:be:18:1c:63:50:
b6:99:ab:f3:be:43:67:5d:13:4d:08:63:80:02:69:1f:a5:54:
36:ec:73:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HXhqo6Eol0c4kvPfmq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2
NDE1YTQwHhcNMjUwMTMxMTUwMDE0WhcNMjUwMjAxMTUwMDE0WjAzMTEwLwYDVQQD
EygyOThmZjJiNzcwNzgzNTQwODFkMjQ0ZWIxMDVmYjBhNDcwZGNjMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3QS8x/PLZ2tV8bh3NM6ThlQoahS
WR8OOjHj4Yz0Ys07nLXcFtWquqJygSyBCQ+5mrdjfVFN/GbkOxS1m6ohVQBgxPjd
mvVjS6QRoRoSO81anYNxKEbI44coEbJzsOSaVpj3Nrk2hlHoFBuCZSdd7HOdZe2X
BK8XU5wxeiw1UiWXv88rXOWa4e4xuE4ixvHGM79QbgxlTyiRN3NOsoOA5LcLvGx7
MghedyukSGV7VrEGBVBhpz4mPZL5BWZcLUkr5Hdh5XITuFb1P1GJIx1JFTmS30lU
Ru80xqUT4wTm7H6RmKhyqZxgyRgZ+O6OKsYG2e0wzy06I3z3yH4N/4vJVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmP8rdweDVAgdJE6xBfsKRw3MONMB8GA1UdIwQY
MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt
YTlhYzY2YmU0OGY3LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3
LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5jKfjL0
5BehLsa/m+8UV7vdYvsKbxyQQfsJ1NSnGn470W6syzpjF2yZXV8z7rZfU5D+CZfN
peT2nJ5QMMFfPgh6ZFWee1wTv9ndsKh5jfCPOrXH6WCvpQSGAxb3Bj/OH1JSP1gA
Hbm3Q/pXwFZWI1pElJ11Q6aHppDi6XnGmNbVG2d49LITVg0rUM6EUDRHuKK2X0HQ
A/bRxdsEzI2wvwIzzWedG4giMFRaI+lfCBfpx23M6IDdzBFak0LWe67qPLHA6yaA
/CsRky+p77gp1jZ4G1dfdD82xNITAA1IrhiTY9Df9b4YHGNQtpmr875DZ10TTQhj
gAJpH6VUNuxzIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:26 2025 by rpki-client