Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File: Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier: wcHgPLO+SML2cG4lLKwJZLeJDBLGzHwt1w+C/ZsdiIw=
Subject key identifier: E9:B4:84:55:6E:47:31:58:86:C1:CC:EF:E6:3B:5B:24:21:50:6B:4D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0194BCAA25C760BCF0D74709CD84C4E4BE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number: 0A80
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 8a7Shw-C7t8tDg8xa-1FGikOXPc.roa (hash: 4edDmS0LETRqSpGQGFtoKLhIM6xiHOAiP43PkbiFy4g=)
2: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
3: Ec-3R5lSbUg4nkiWhBSyhOomcnQ.roa (hash: 62Xy6RK/IfEoVB5QCyI3LUCOJ3jLbPB31KKuSd8Y3RM=)
4: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
5: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
6: IPFcr3SVsMO45CcvgFBNdZXFKXs.roa (hash: /7VeIgyIKlw9hTj1q7qRAKWUwYWQVMZL16M4EWKXr70=)
7: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
8: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: cqAxeXfBhvITwyV8hk91dCd7At5J0OMHXU9tsj/p08w=)
9: ZDqlN2gopXGQsNEfQa6Tm1bBJHo.roa (hash: i+dladihq7o+wGzw1aMmCtGPh9clb+fe59JM2Ncm8BU=)
10: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
11: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
12: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
13: gDiAmuSfPQTuxCRIvggtH8HdjXc.roa (hash: 23oEz6Z3K/nAXex5gW0969mF1LlqvR3gx9pD3B260wk=)
14: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
16: tAny9vvVEhT9xMFk2SmCjJGJVB0.roa (hash: mxzzfBgP8JSJNod3kkY/f+M5oPmfH0h/rOigdt3Ljvw=)
17: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
18: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:25:c7:60:bc:f0:d7:47:09:cd:84:c4:e4:be:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=e9b484556e47315886c1ccefe63b5b2421506b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:d4:1f:37:c3:9d:02:c9:b2:aa:ef:35:86:
36:be:ed:12:fd:1a:78:72:52:e3:fd:4e:1b:37:21:
c2:15:79:89:36:40:53:3f:f9:a6:05:4e:02:22:ff:
6b:18:f6:21:ab:3f:0a:3d:99:08:72:fd:b5:0e:e2:
f7:67:cc:00:ca:e9:9b:f3:47:19:ed:3f:69:b2:4e:
76:a6:1c:9d:4b:20:3e:3b:b9:9b:3d:e2:16:33:2a:
01:31:74:18:a5:8e:12:6c:2a:bd:82:ce:99:7d:c6:
d5:d8:e9:1f:7f:5e:3c:f8:c4:f1:7f:07:3a:29:17:
22:d6:74:90:91:0f:d7:4c:00:62:af:08:94:90:46:
bc:c2:f4:5f:19:67:23:54:84:ad:e3:6c:c2:23:00:
c8:05:d3:81:bf:cf:3d:df:86:48:5b:1a:e0:ed:81:
59:ef:0b:b0:73:71:18:14:bd:b1:2b:16:93:42:9a:
7b:49:d9:e9:d0:c8:3f:94:f8:ce:93:d7:f2:58:a1:
9f:ea:25:93:f4:4c:5e:93:cd:ef:a4:e7:51:e1:ef:
ee:5d:c2:32:4d:48:22:20:64:8f:32:0e:5c:b2:8b:
af:f2:c9:0c:a4:e3:5b:78:0b:29:f2:f0:22:6b:17:
e8:2e:7d:93:b5:fb:3f:85:53:fe:99:25:f8:e5:c1:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:84:55:6E:47:31:58:86:C1:CC:EF:E6:3B:5B:24:21:50:6B:4D
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6e:7c:ed:5c:66:23:e9:5a:f1:6d:c2:d3:58:6a:61:fa:10:
31:6d:c5:be:27:e1:02:41:cd:ad:38:d0:48:ee:1a:45:54:f2:
44:dd:f7:bf:7f:6e:42:c0:52:40:81:88:ca:b0:6b:0c:11:70:
ad:ce:1c:25:fb:1d:00:25:ec:2c:c7:38:a8:bd:b5:09:c2:0f:
a6:b9:e8:57:ef:34:25:a7:87:72:e3:9e:3c:9a:fa:be:8e:25:
ba:f1:42:03:1a:a7:d0:80:46:aa:c2:68:b0:c6:8f:17:e6:0b:
e6:8c:df:07:38:f4:db:53:ee:fd:8f:db:10:21:11:4a:f6:23:
cf:f1:82:a1:e2:b6:19:00:6f:70:ad:97:99:fc:36:40:03:87:
7f:96:e9:7a:5d:09:c6:26:1d:7e:93:89:9b:79:74:a4:e7:5e:
02:ea:f9:ea:2a:8b:09:fc:15:d4:35:f9:d9:a6:70:50:80:e0:
e0:b5:1b:36:a3:04:c3:2f:fe:c4:e5:bf:85:6b:47:44:00:b1:
bf:19:89:7c:ea:99:d1:82:ba:3c:9b:6c:3c:a3:5c:f4:8e:f0:
87:05:1c:c5:b7:73:18:3b:f6:7f:95:b6:5c:74:d2:00:01:dc:
33:50:77:fa:cd:ba:cf:5a:0a:18:7f:90:8c:2e:97:e1:d1:37:
90:2a:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:06 2025 by rpki-client