Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: ywk1dWI81NHAX8l340HRn1YfjJIgRh4moN36aXjEE6M=
Subject key identifier: 4E:01:C0:96:CF:11:33:23:08:56:98:F9:51:83:1C:A7:AB:C7:3D:A0
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 0194BD177CE75F422C3612F0C1C1461819D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 0339
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: B+h2denSV0+p1dSFnhpiVBI2NZgjS74W85KuKX3VxjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7c:e7:5f:42:2c:36:12:f0:c1:c1:46:18:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=4e01c096cf113323085698f951831ca7abc73da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:b1:58:40:e3:49:84:de:1d:f2:16:0d:91:
88:ae:72:79:20:b9:31:80:37:82:5d:a6:43:f6:96:
67:9e:b3:2c:72:51:38:4a:24:dc:12:8d:86:ad:be:
fa:c3:a2:29:14:75:a7:43:08:4b:86:63:d2:bc:c5:
62:e1:09:9b:54:a6:79:58:51:e2:dd:bf:6d:a6:e7:
d2:6f:06:fb:cd:e5:99:f2:76:6b:a1:36:02:57:17:
a5:88:8b:c1:f9:9f:ba:b8:c6:ec:7e:60:1a:dc:ea:
c1:87:69:3a:60:95:83:6a:1d:b8:f0:a1:bc:4a:c7:
41:fb:1e:ad:24:dd:b0:cb:68:65:45:df:a9:b9:ff:
36:04:34:0e:1b:44:12:73:1c:07:70:97:c0:f8:dd:
6e:8f:dc:7d:65:dd:06:a9:41:1a:b4:ef:82:ac:d9:
0a:ec:1e:0a:38:16:09:9f:4a:56:6c:54:cf:df:06:
07:a1:e0:67:2c:37:ba:56:f2:06:45:92:72:3a:1b:
8b:8f:8a:3e:92:37:15:c9:ca:d7:56:73:d4:3a:66:
b2:7b:2a:33:c7:29:12:64:1d:30:6d:13:f1:fa:41:
72:d9:ba:7d:d5:19:71:95:53:d3:fd:ed:74:55:3f:
b6:84:d3:41:bb:d6:b0:58:45:10:d0:e6:66:e2:e2:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:C0:96:CF:11:33:23:08:56:98:F9:51:83:1C:A7:AB:C7:3D:A0
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ba:28:61:79:44:d0:c2:b2:68:ad:cc:80:c4:f1:41:db:e9:
d9:b6:28:05:39:7f:31:e7:50:74:50:e7:4b:c5:7c:92:b6:02:
13:81:54:5c:81:cd:85:d0:d4:d7:8c:68:92:3a:19:db:d5:af:
f2:95:3a:0b:b6:90:df:7e:b5:58:8f:7c:95:a1:69:29:20:9b:
3d:34:b5:63:3c:d3:d3:c9:98:ab:ca:2e:da:d5:9e:17:84:52:
8f:b1:08:73:c3:88:e3:86:fa:a9:2b:b5:26:2f:65:14:01:4d:
23:3c:f6:b0:45:12:a8:c8:4e:d5:33:db:0d:7e:75:d1:ee:fb:
de:da:2b:27:b6:aa:08:0b:29:3c:ce:6c:83:e9:ff:4a:d5:95:
b5:24:73:19:26:11:17:6e:d4:8b:dc:38:15:b3:ed:b0:ae:ac:
8a:02:db:d3:84:ec:0c:2f:1e:03:ee:89:a8:02:a5:4b:d4:aa:
f2:d2:24:c1:7d:8a:f6:a7:a6:92:b6:2f:55:b8:00:0f:b3:41:
a4:ec:2e:d7:44:e3:b2:ac:9f:d3:95:23:71:38:3c:bd:cf:a0:
a4:0b:ae:41:7b:85:e3:6a:5f:6c:17:00:13:e7:34:1f:4c:5c:
3a:c8:27:eb:4b:7f:13:c6:24:93:87:a7:d6:b1:ba:1d:3e:70:
3a:ad:8c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3znX0IsNhLwwcFGGBnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWM4MDZiNWJjYTRjN2Q5MTZkNTAzZDVjNzkzYzhkZjQ0
ZWU2ZDMwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
Eyg0ZTAxYzA5NmNmMTEzMzIzMDg1Njk4Zjk1MTgzMWNhN2FiYzczZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjqxWEDjSYTeHfIWDZGIrnJ5ILkx
gDeCXaZD9pZnnrMsclE4SiTcEo2Grb76w6IpFHWnQwhLhmPSvMVi4QmbVKZ5WFHi
3b9tpufSbwb7zeWZ8nZroTYCVxeliIvB+Z+6uMbsfmAa3OrBh2k6YJWDah248KG8
SsdB+x6tJN2wy2hlRd+puf82BDQOG0QScxwHcJfA+N1uj9x9Zd0GqUEatO+CrNkK
7B4KOBYJn0pWbFTP3wYHoeBnLDe6VvIGRZJyOhuLj4o+kjcVycrXVnPUOmayeyoz
xykSZB0wbRPx+kFy2bp91RlxlVPT/e10VT+2hNNBu9awWEUQ0OZm4uLliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4BwJbPETMjCFaY+VGDHKerxz2gMB8GA1UdIwQY
MBaAFEisgGtbykx9kW1QPVx5PI30TubTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzIt
NzIzYmFhOGU2ODhhLzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzItNzIzYmFhOGU2ODhh
LzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprooYXlE
0MKyaK3MgMTxQdvp2bYoBTl/MedQdFDnS8V8krYCE4FUXIHNhdDU14xokjoZ29Wv
8pU6C7aQ3361WI98laFpKSCbPTS1YzzT08mYq8ou2tWeF4RSj7EIc8OI44b6qSu1
Ji9lFAFNIzz2sEUSqMhO1TPbDX510e773torJ7aqCAspPM5sg+n/StWVtSRzGSYR
F27Ui9w4FbPtsK6sigLb04TsDC8eA+6JqAKlS9Sq8tIkwX2K9qemkrYvVbgAD7NB
pOwu10Tjsqyf05UjcTg8vc+gpAuuQXuF42pfbBcAE+c0H0xcOsgn60t/E8Ykk4en
1rG6HT5wOq2MtQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:20 2025 by rpki-client