Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: kC6BT9IiK9NRiolMkq0uOldmLeNr2IMvtiUJgmT42nc=
Subject key identifier: F4:F9:CE:CB:4D:62:15:17:5C:93:40:AC:95:6C:2A:5E:08:33:F8:38
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 0194BD853AFD83F0F1892FD88E0218392050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 13A8
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: EUskpa1vwxAfuhdoCNIsLnCCFxSzxZdviBBj0BM6yQA=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3a:fd:83:f0:f1:89:2f:d8:8e:02:18:39:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=f4f9cecb4d6215175c9340ac956c2a5e0833f838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:3b:b3:27:08:39:15:a4:2b:27:3b:37:8f:
72:a6:5d:a2:f5:d2:c6:48:95:d6:3c:23:42:05:03:
8c:51:80:32:4f:c7:4a:96:7a:43:64:93:f2:21:a1:
2c:bf:46:56:ce:e8:2e:d8:de:20:2d:75:ee:47:41:
b1:27:6e:7c:bd:10:db:1c:7a:62:f6:f1:2d:e1:28:
33:9d:9a:03:7c:74:b7:85:93:82:68:ac:b7:5e:d4:
f8:16:93:ae:5d:24:5c:ae:d6:6b:af:b6:54:21:59:
c1:20:c2:1e:12:7e:65:94:77:7a:70:d4:3d:f6:db:
54:0a:18:83:91:cf:6d:1b:4e:b6:09:29:e5:2e:c5:
b7:05:ab:88:a6:09:b0:f4:96:c8:f5:79:74:76:d3:
63:34:74:87:05:49:94:29:75:9d:65:f4:56:6d:46:
06:a6:c1:c8:86:85:e6:d0:1b:54:51:b7:e9:7e:b6:
cf:70:09:ad:b5:19:19:9e:df:af:1d:a7:71:55:3d:
1f:03:f0:ab:94:34:20:b2:2c:ef:95:68:ab:fb:94:
a9:8c:bd:97:95:2a:41:27:dd:1a:5f:f8:65:94:5c:
1d:5a:81:84:cd:a9:11:d6:0a:8c:fd:6c:e8:db:e4:
28:2b:42:66:81:8c:4d:7c:19:e9:bb:3a:e2:1a:dd:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F9:CE:CB:4D:62:15:17:5C:93:40:AC:95:6C:2A:5E:08:33:F8:38
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:74:15:bf:80:01:f8:0f:0e:88:73:13:e0:70:6c:5b:77:1e:
31:5e:80:fe:e4:c5:64:42:91:80:17:fa:c1:37:f2:48:87:c6:
ce:10:87:5c:e5:4d:e7:56:ff:57:3f:82:3f:d4:55:2b:a0:2f:
b7:09:41:a8:75:8a:e3:18:c3:3d:aa:9f:a2:cb:7a:2d:af:c6:
9c:f8:1c:48:04:93:98:08:49:b9:1f:13:e6:2b:36:65:2c:0e:
76:05:47:3f:32:39:5b:cd:07:7f:fe:d9:54:94:33:1a:16:82:
7f:d0:72:5e:e4:b1:0d:5f:3b:ad:33:7a:04:41:cf:9f:87:75:
b7:3e:98:2f:38:0c:d2:9d:56:de:81:b0:eb:91:40:fe:ef:c5:
2e:50:85:da:58:dc:63:a8:a0:7d:81:9c:ee:75:b2:7c:ac:e6:
d9:71:36:7e:bf:7c:ca:24:b8:18:6a:d9:09:fe:8a:e8:c9:c1:
24:63:31:67:35:14:89:ca:ed:d7:17:07:36:7c:45:02:a0:93:
68:26:13:3d:c2:57:7c:b1:42:74:91:3e:ac:72:23:e7:78:73:
d4:b4:0b:3f:06:38:b2:26:12:85:c1:da:df:91:c4:8d:2f:5b:
b8:ee:0d:28:0d:49:7b:4e:38:bd:30:e2:85:66:32:6e:08:f8:
c7:1e:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:27 2025 by rpki-client