Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: 4QpkmcxHXqHmab/6d+dTb67yxMSTK2eWl6Bse/mniwI=
Subject key identifier: B5:E9:E4:D9:03:D0:B4:16:8A:D6:7E:20:08:16:BA:71:31:85:16:9B
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 0194BD17CCDCCD7CC428650EA4CC91CC3ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0CDD
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: VFcnclomlS321MIC3xNjQnTIzgQN3EHOg3Ix+S0dUe4=)
3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cc:dc:cd:7c:c4:28:65:0e:a4:cc:91:cc:3e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=b5e9e4d903d0b4168ad67e200816ba713185169b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:37:95:e4:22:f2:a9:bd:13:cc:ea:89:fb:
ca:6e:79:80:62:68:a6:4d:dd:6e:88:a1:f8:1f:7a:
9d:7c:19:8c:1c:19:99:ef:2c:57:92:c8:b4:c9:16:
29:9b:50:e9:d5:fd:04:86:f0:f0:33:80:f3:62:0c:
4d:29:84:c1:f3:8b:88:4d:af:8a:36:5e:67:91:0d:
7b:c3:f9:8a:9d:80:f9:03:e9:b5:e5:24:6c:1a:72:
b3:88:09:eb:59:95:66:79:fe:0b:2d:25:66:a5:96:
70:7d:c2:c4:3c:0f:ac:64:45:21:a3:9b:39:b0:86:
fb:58:35:c0:20:ea:26:dd:37:6d:ea:41:3f:b2:0f:
fb:c0:30:1f:d2:4e:b0:d7:ab:77:b8:77:60:e1:6e:
78:ec:06:9e:12:75:ef:a7:bb:d4:77:33:fc:54:73:
7b:a0:27:d1:32:f9:71:d7:ec:ed:7c:5c:59:94:d8:
fc:1a:c6:29:9d:61:c4:41:96:0c:78:b3:02:c0:9f:
23:6e:47:46:cc:ef:47:ce:36:74:49:d5:d9:ab:02:
3e:a9:25:80:bb:6c:0c:59:1f:2e:30:34:de:2b:e1:
a3:aa:cb:d1:ce:d7:94:00:95:84:22:db:98:35:b5:
71:f2:b9:43:a7:ab:56:87:6e:29:1f:a1:c1:9a:89:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E9:E4:D9:03:D0:B4:16:8A:D6:7E:20:08:16:BA:71:31:85:16:9B
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5c:8a:f4:b6:46:e7:4d:d2:53:0d:da:cc:0e:70:c1:00:44:
a5:ee:31:b9:d4:47:27:3c:0e:30:3b:55:84:45:a3:c0:b1:21:
87:e9:84:1c:4f:fb:ca:2c:a5:40:f9:5a:21:74:23:a9:3c:8f:
3d:b1:ea:b1:f7:a2:1d:bb:16:39:1b:49:66:5e:2e:8d:27:c0:
2a:90:b6:0f:77:96:7c:d0:92:1d:6a:44:7a:67:96:c1:b6:37:
1c:73:c1:cb:28:fa:cb:eb:8f:cc:c6:d8:a2:35:75:23:06:af:
05:83:54:40:93:7b:ec:be:5d:d8:5c:04:23:3d:87:64:1a:6f:
4c:49:20:df:a2:8e:97:25:af:de:54:5f:c0:6c:60:3a:6a:56:
c8:16:7b:a9:36:eb:4b:bf:eb:cf:7a:6f:ae:20:7e:b8:72:0d:
b1:ff:d7:2a:4c:3b:46:90:9b:68:75:ad:75:db:23:de:66:3d:
8d:da:ff:4e:29:5f:e0:47:4b:16:c4:92:2a:90:39:59:ec:96:
4d:a2:6e:d0:a9:26:f4:fc:c5:5a:81:eb:2e:05:a0:65:2e:01:
74:1e:fd:05:bf:3b:80:1a:d2:47:90:70:9d:8c:8e:56:ee:d0:
84:f0:f6:a1:e2:af:77:1f:33:a6:85:65:18:67:b7:86:4e:bb:
54:88:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:49 2025 by rpki-client