Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: QM94ebbOFDyTPPcd3Cg4+ARtgOBZkGGV/vRgXrO1QPI=
Subject key identifier: 10:5F:F8:4D:5D:D7:3C:5B:3F:EE:AD:58:51:A1:61:87:D1:75:ED:93
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 0194BC04C3AE80169CE7A523ECB6BD1E03D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 1347
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: TTPZlKorKTN4Z9au5/jckd56uhskhWVjbMnU+EB5JpM=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:ae:80:16:9c:e7:a5:23:ec:b6:bd:1e:03:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=105ff84d5dd73c5b3feead5851a16187d175ed93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:52:b3:ce:83:25:ed:91:08:78:0e:a8:82:
11:55:49:21:41:41:d5:c4:67:3c:d7:a8:33:49:f0:
3c:c2:c5:12:c2:f2:8b:c7:36:27:e4:64:ef:51:6f:
af:1a:42:19:0e:64:4f:f8:3e:e5:d5:29:33:0d:3b:
96:c3:91:a0:b9:95:c2:29:55:2b:40:aa:56:24:53:
08:26:31:e9:c4:9d:65:74:42:ca:6c:14:84:f1:5e:
54:91:2d:da:9f:e5:d2:0e:0a:cb:2d:26:57:19:0b:
32:be:5a:a4:56:88:a9:6a:66:66:bb:07:58:51:63:
0c:6b:3f:86:6d:20:04:18:c8:a1:3d:ae:f2:24:40:
f8:76:07:ac:4e:eb:53:c2:8f:fe:29:c4:84:da:17:
47:2a:0c:df:29:33:fb:fc:f8:c1:e7:37:1e:18:94:
32:f8:bc:3e:30:da:e8:ca:a5:21:95:c8:e5:10:6c:
39:02:73:0e:12:eb:4d:52:17:0b:84:46:e6:33:94:
25:2e:88:07:d5:fc:6b:99:de:63:f7:fb:b0:64:c2:
f4:9f:a4:14:17:66:53:cb:21:3f:c2:c2:5f:82:4a:
23:32:64:69:58:aa:c1:9f:2f:09:88:65:6e:12:50:
0c:b0:5e:8f:91:6e:94:d3:75:f9:42:8e:2d:08:7d:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:F8:4D:5D:D7:3C:5B:3F:EE:AD:58:51:A1:61:87:D1:75:ED:93
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ac:88:d8:d8:4e:c2:83:0d:23:58:f9:8f:8e:2c:44:76:a9:
88:17:5b:92:ba:dc:58:2c:0b:fa:b6:84:ff:da:62:af:85:66:
a4:cf:9b:e3:4e:92:b8:4f:2f:8d:93:07:eb:53:80:ac:3e:3d:
57:d4:77:4f:7d:e3:a1:33:b3:5c:56:99:cc:4a:2c:13:e5:0f:
bc:c0:4a:81:53:48:01:f5:f3:0e:44:ff:25:12:54:44:a9:d3:
0f:d7:00:f0:91:6d:5e:11:b9:69:25:3b:56:fd:b5:b0:09:50:
46:a0:6d:3d:f2:f0:91:6a:76:24:87:a9:73:0f:6d:f1:ad:dc:
7e:28:ac:59:20:25:c4:48:f1:27:d8:1f:a6:29:7c:28:9a:78:
c3:d2:b9:a5:36:dc:97:ac:c3:c1:49:bf:fe:48:66:af:f9:2c:
48:bc:b9:a9:1d:23:8d:4e:74:ef:85:1e:6d:47:eb:a4:a7:ff:
19:8b:c6:ab:d9:88:d9:39:c1:f9:e7:fb:31:c8:63:3d:41:5d:
b6:25:f9:5d:b2:b6:69:2f:fe:16:91:8f:96:1d:00:ba:ed:f3:
d3:c9:b1:57:94:9c:36:aa:b5:7b:ed:26:2d:77:a5:e2:3f:5c:
ff:eb:7b:53:0b:9c:0e:87:28:e7:a6:de:ba:3a:cf:a1:00:64:
61:96:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:03 2025 by rpki-client