Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File: skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier: lsb0dS6X2IJWSNgv+YzjCjY0Smfhr0wjOvt7Q2tscYs=
Subject key identifier: A9:9E:75:31:FC:54:4B:9C:3D:F3:8F:24:B8:9E:89:85:B5:07:3D:4D
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer: /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial: 0194BBCEF9C33ED64E414EDBF0550C65F356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number: 0836
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: aFQsXF0keCIEBLHL/0vxnVaAHsYGiJOMAXCcNcIfs3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f9:c3:3e:d6:4e:41:4e:db:f0:55:0c:65:f3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=a99e7531fc544b9c3df38f24b89e8985b5073d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:4b:62:e2:8c:89:41:93:3b:13:8d:4c:7d:
66:99:6e:7b:65:10:b3:f7:35:45:98:67:a2:71:f8:
74:47:ff:1e:80:54:4f:4d:ad:80:34:90:49:fb:9b:
ac:f8:69:32:c8:60:50:df:44:02:81:82:e9:29:68:
11:85:0c:1b:c9:91:73:ac:f4:d4:93:14:2f:a6:94:
68:03:e0:91:79:f1:8e:3f:e2:ab:e8:82:b8:b8:a1:
2d:f9:59:4a:a2:f4:ee:91:52:12:14:06:0b:a3:24:
e3:95:1b:8f:5e:f6:4e:15:3f:74:ff:c7:0e:20:43:
62:8b:ba:42:85:d6:6a:2f:54:f3:13:94:db:f7:ab:
1e:61:c1:5f:37:e7:f2:03:cd:dd:d4:f0:bb:b6:46:
d3:36:ce:e3:e1:1a:6d:9a:15:96:1a:b1:be:bc:ef:
dc:6b:cd:b7:25:01:b6:ac:64:b8:7b:c7:c5:4b:d5:
cb:91:55:62:73:c8:ff:0f:bc:9a:53:5c:ef:fa:fd:
1b:65:65:36:c1:90:e8:52:3c:ff:37:67:f3:e0:18:
83:9f:ef:4f:0e:25:dc:72:cc:a5:fd:ef:f8:cf:ee:
84:dc:80:c6:e6:c2:96:7a:db:2d:30:53:34:11:ec:
b2:3a:a1:b6:eb:c7:a7:27:c7:fd:81:92:0f:27:af:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:75:31:FC:54:4B:9C:3D:F3:8F:24:B8:9E:89:85:B5:07:3D:4D
X509v3 Authority Key Identifier:
keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:22:c3:d2:99:70:aa:96:da:7d:3c:f0:64:54:b2:38:1d:3d:
4b:f5:33:62:85:e2:f3:a2:64:48:06:3d:3d:27:91:13:a6:31:
64:1a:03:7d:39:bb:2c:35:0e:a2:5d:db:62:4a:85:73:ea:a1:
2b:eb:ca:26:b0:7a:6f:8f:30:af:10:88:ba:94:45:ed:53:91:
30:e8:85:f7:ac:c9:c1:17:49:19:c0:64:8e:34:b1:94:de:b3:
9d:76:a4:0a:4a:f2:3e:ee:81:fb:8e:28:07:3a:16:ae:b2:56:
13:cb:00:28:e5:cd:c0:e7:20:85:14:fb:25:45:2b:b9:ec:da:
28:65:47:be:76:77:a9:e5:ee:7f:b8:28:62:6b:7d:a0:16:94:
bd:e3:83:89:d3:a0:48:f9:87:9e:0a:3c:57:9d:33:be:8d:bf:
ce:bb:83:43:6c:ce:93:f5:a1:5e:09:ac:cb:9a:c5:b1:f3:6e:
a6:af:f2:72:c8:39:bc:f3:b5:4e:db:3a:f9:dc:46:c9:fc:d1:
75:77:bb:39:0c:f2:8b:47:b2:7c:03:38:ca:c8:86:4b:11:76:
7c:76:47:1d:d3:8d:77:21:0f:6d:2d:5c:00:39:b9:fc:e8:3a:
b2:d2:d5:4e:5b:e7:bd:02:28:77:50:28:09:82:2a:ea:c5:01:
be:78:8b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:30 2025 by rpki-client