Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: sOA1OtXDiKLSaKSENh31oJiN+3Jur7+9mPre+mTcHAE=
Subject key identifier: DC:D4:C0:77:4C:B8:F5:05:42:2B:48:FF:45:DE:FE:E4:E3:5A:DF:2F
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 0194BC3C331B413C23CFDD7C1899A35284FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 12FA
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: kcYQSPY4g21MWyP2qqYhHPoXE0TlXQICJ763673zIe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:33:1b:41:3c:23:cf:dd:7c:18:99:a3:52:84:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=dcd4c0774cb8f505422b48ff45defee4e35adf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:5f:33:f6:04:d3:34:1f:43:aa:45:e8:71:
26:7d:72:6f:42:b7:a9:15:78:f8:75:41:f1:c7:1e:
02:e8:66:08:b3:18:28:52:29:a4:56:25:ee:95:25:
25:0f:db:b8:79:44:e8:d6:1c:11:06:6d:ec:48:98:
f9:0b:81:b7:5c:97:ef:f0:ad:a4:a6:4c:ce:62:ef:
4f:86:1a:7b:f5:b8:31:4c:b5:5d:46:25:df:70:b5:
3c:d6:4e:1e:ad:9f:e5:76:93:5d:95:cd:76:83:d8:
2a:b2:6b:e0:df:9c:c2:1a:5d:0c:d9:b9:38:aa:2b:
3d:75:6b:f0:0b:01:81:6e:65:13:46:21:1d:64:76:
c7:90:42:75:d1:b7:0c:d0:d2:86:2c:1c:6d:87:d2:
ec:d0:5e:20:5f:f0:84:0a:90:ff:fd:4b:b0:e1:5a:
87:d2:ee:52:f6:a2:46:eb:c5:8d:83:9e:14:e0:06:
e9:15:d3:7f:4c:63:f0:0e:ce:f0:9f:37:82:3f:79:
96:ec:d1:3b:5c:c6:61:37:02:97:03:5d:49:e5:1c:
db:73:10:31:8b:67:59:d2:db:e6:d8:5f:96:1c:a5:
9a:f6:45:d6:2a:d9:b0:59:71:2c:ff:09:c6:0c:2d:
d9:8f:ea:1a:d2:b7:ad:81:63:6e:24:15:cc:ba:f7:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D4:C0:77:4C:B8:F5:05:42:2B:48:FF:45:DE:FE:E4:E3:5A:DF:2F
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:69:08:d5:f2:ef:f8:c6:6f:98:90:83:cf:e4:f2:46:9f:b6:
a4:10:bc:11:0e:1b:d4:ad:3f:de:32:dd:b3:a3:26:60:22:a1:
de:2c:ea:63:c9:69:5f:09:5c:97:d1:3f:16:5f:72:5c:4f:41:
db:6b:f6:95:c3:a0:8c:be:1c:6a:d0:dd:06:ab:73:82:b7:d0:
2a:e6:56:b1:23:22:38:d5:80:b3:5a:0c:8a:c4:0d:95:53:3a:
08:60:04:c4:20:4e:f2:f0:15:b1:6f:58:5e:2e:c2:c3:25:51:
59:dc:5f:de:6a:9a:b2:b5:ea:01:0d:a9:75:4b:bc:af:96:45:
02:b7:35:86:f9:e7:11:63:f7:65:dc:27:c0:5e:b1:d0:30:47:
b4:d0:cb:c2:25:f3:16:22:3e:0b:93:a4:c2:7f:5a:24:10:c1:
51:49:b1:73:b1:e7:69:44:71:21:2f:d7:93:c4:a1:37:1d:02:
15:06:42:3d:a8:ba:16:bf:a5:95:e6:f6:62:45:81:01:07:30:
81:ec:65:73:70:8e:be:04:d2:62:5d:26:96:6e:42:0d:5f:8f:
33:d9:02:03:0f:c5:64:a4:3b:12:f7:fd:02:79:0a:15:fd:5e:
72:75:e9:e3:4a:df:69:2a:eb:f6:63:6d:ee:86:3b:50:89:e5:
dc:38:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:53 2025 by rpki-client