Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: xXkYZmwAARVJDyCdu0iHsfBiuwZN021euj1yDbNiO30=
Subject key identifier: 66:FE:7C:F4:BD:D7:2A:8C:D4:2E:F7:83:D1:61:6E:43:B3:AE:4F:F3
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 0194BD178B0F8E446E71AF3D1ED5CF89CE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 06F4
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: 3XOcYH0lJW1kEg4xfa9T+tCIoRrimbFAVrje8Ngq0vE=)
2: y3LlHCcHKFo-BQ_p86jxyc013sQ.roa (hash: 70W6ragDKntXJcQVl89iuaUr+4h8ye/EbsXthKhbWqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:0f:8e:44:6e:71:af:3d:1e:d5:cf:89:ce:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=66fe7cf4bdd72a8cd42ef783d1616e43b3ae4ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:3a:10:ab:50:c3:ec:15:cf:1c:1f:e3:55:
ca:fd:83:8d:77:b5:63:06:1b:65:ee:de:4d:c0:ba:
25:68:4b:d9:8d:5c:84:25:7f:86:0a:ac:cf:2a:15:
c8:d8:11:fa:81:5c:c3:b3:9c:a8:0f:f1:df:10:dd:
65:19:f0:af:2a:50:66:ac:68:e7:d8:74:ff:df:2c:
f6:39:6c:c8:6e:e2:34:42:b1:18:fc:fd:6e:5f:94:
ec:d0:2c:a7:2e:51:7a:e4:c5:b9:34:4f:33:80:13:
d0:98:78:33:3b:0f:ae:34:2c:7f:de:89:04:92:78:
01:ba:11:79:41:c0:59:6f:e7:6e:fa:6f:27:37:00:
03:03:68:e3:ce:81:6c:67:cd:aa:e9:c7:3c:f0:61:
5b:6a:05:95:d0:74:49:58:ad:5f:56:6e:e6:c7:26:
aa:b6:e4:88:93:ff:75:64:fa:6b:a3:db:c5:a8:12:
78:ea:94:b2:bc:7a:27:fe:8a:ba:f1:1e:c9:72:0e:
32:ce:f7:6b:20:2d:f9:9b:a9:b0:a8:04:cc:e0:ba:
ce:3e:f1:09:d0:dd:6a:87:9c:cc:65:ca:ee:6c:07:
1d:b8:1d:ca:c7:ac:fa:94:ea:09:d9:b8:d3:63:be:
8c:6d:21:d9:31:ea:b9:23:12:ac:75:0d:21:45:0e:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:7C:F4:BD:D7:2A:8C:D4:2E:F7:83:D1:61:6E:43:B3:AE:4F:F3
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7e:38:59:1e:ce:c4:45:2f:e1:88:66:75:80:60:a0:66:e6:
00:1d:bd:5e:92:9d:08:48:67:03:79:94:e7:6b:ba:d9:46:75:
f9:ac:e9:4e:db:fc:20:b2:0e:f8:c5:c0:3a:33:83:47:0c:32:
17:57:7d:d3:1e:dc:fa:07:ec:41:fc:dd:7f:b5:ed:65:c0:d5:
9a:fa:43:da:22:99:71:35:17:d6:86:68:75:7e:29:ac:04:ab:
b3:f3:d3:83:64:81:78:9f:14:ca:11:17:cb:3b:31:e8:94:43:
3c:50:a1:a6:9b:45:51:18:50:cd:ab:80:07:3a:c1:de:e5:f7:
a5:9e:a7:38:1d:48:0c:f2:1e:cb:11:11:64:b1:5d:1d:73:86:
4a:67:fb:a6:ca:95:26:36:7a:67:7b:af:2c:2a:56:d8:4a:86:
8b:dc:58:81:9f:51:b8:83:ab:f5:be:f9:3b:df:67:6c:9d:8c:
86:a0:70:29:bf:27:22:c6:0f:68:22:50:14:1f:ce:10:d4:9a:
1b:58:ee:b2:7d:39:00:84:a6:27:b6:f4:92:6a:e2:59:9d:69:
bb:ce:62:42:5c:67:eb:81:e6:80:09:7f:13:30:8f:3f:3d:16:
30:35:29:93:4a:9d:16:4b:8a:b2:d3:0e:46:fa:1f:b2:6f:8c:
f8:bc:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:49 2025 by rpki-client