Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier: khxylXeIst8eyfFt0GD6Y5NurtPPdljTIV5fiknBSi0=
Subject key identifier: 61:C7:5C:8A:CF:16:07:52:EE:6A:8C:05:F1:61:CA:D5:40:40:90:4D
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 0194BC7315E6F41DECC4214642CB9EE354DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number: 0C29
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: QsvqFu1hxQx9cy4oNW8QrRbwy3Q6Y5w5K6fnRYmqcpQ=)
2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:15:e6:f4:1d:ec:c4:21:46:42:cb:9e:e3:54:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=61c75c8acf160752ee6a8c05f161cad54040904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:08:2f:71:f8:a5:7f:da:bc:15:f6:3f:d7:
d6:90:57:bb:f1:db:b8:12:f2:12:9d:d5:6c:b1:b8:
3e:42:3d:96:34:39:d9:c0:be:f4:a1:e7:1e:c5:89:
a2:17:c4:0f:db:b0:8a:cd:a1:ef:bd:4d:88:5b:fb:
2c:ab:72:30:aa:08:31:92:12:bc:49:78:34:67:6c:
f7:57:38:88:f0:b1:83:7f:07:4c:d9:6f:54:f2:8e:
57:6d:98:47:75:b4:f4:fb:a7:03:8c:ce:55:ae:2f:
75:bd:9b:4d:6b:8f:11:be:8a:3d:00:a0:64:6e:a6:
d9:9a:7a:c9:28:b1:f0:62:38:c4:cd:38:77:99:0b:
47:38:aa:3f:fe:24:5c:69:46:14:d9:03:65:07:77:
fb:e5:18:64:bc:4b:a2:87:47:48:d8:2f:7b:a1:5e:
b3:ed:fa:58:c2:d7:ed:6d:5a:c6:0e:11:e5:08:24:
54:12:d7:9d:8e:a3:b9:49:d9:78:cf:c2:a5:72:92:
d8:46:72:84:19:ba:84:73:cd:b3:30:23:1e:25:e6:
96:1b:ef:c2:91:dc:9a:71:63:98:2b:a2:38:14:9e:
71:ff:86:c6:92:21:f9:5d:a9:fd:19:d8:ba:ff:81:
b0:d7:25:e8:7a:53:fc:05:e8:7f:3a:62:fd:08:53:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:5C:8A:CF:16:07:52:EE:6A:8C:05:F1:61:CA:D5:40:40:90:4D
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2a:9c:f9:0d:4e:d1:11:1f:4f:9d:61:f6:e0:9e:99:09:43:
0c:d9:f8:b2:b3:82:80:27:6e:1d:4d:fb:d7:a3:38:bd:be:4d:
3d:cf:29:0b:e6:f3:60:15:9f:ba:85:44:e6:7f:4f:ff:a1:a6:
07:ec:b9:4e:25:38:99:4a:d8:89:0f:2d:6a:30:53:0e:9e:23:
78:13:da:5d:a4:6e:02:70:69:19:88:d9:40:0b:14:7e:18:b4:
4f:43:5b:3f:8e:6b:f2:7f:bb:4f:cb:39:ef:dc:2f:78:b8:e2:
21:16:67:cf:3f:9f:67:ea:4c:87:ad:44:f2:be:e6:68:fd:b7:
35:66:34:1d:40:be:0a:45:89:88:36:34:ae:98:c4:b5:91:e8:
ae:57:3a:76:c2:30:2c:07:42:ee:19:4c:91:8d:fc:71:a5:bd:
05:5c:ee:76:3f:90:a1:58:f7:d8:e9:d5:b7:88:9f:58:66:a1:
41:fd:36:c5:8d:81:e1:b2:f5:bd:27:4d:16:27:b2:5e:70:b7:
02:9c:ec:85:38:e2:a2:43:a7:2a:89:f4:02:d3:ab:12:80:38:
5a:a1:32:1d:c6:1c:94:2c:20:06:1c:88:b4:6f:d1:21:ac:92:
87:d9:d8:de:c6:0c:42:5c:5e:a9:3c:33:ec:a1:d3:e0:72:51:
2c:27:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:12 2025 by rpki-client