Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
File: Sqk04w2mkOdRcTO30hJjJlWnS4c.mft (raw, json)
Hash identifier: NDLp50bTmbxPB6ffOT0cjvO4p+hay6joaaDLGlIN4xk=
Subject key identifier: BA:E9:53:E8:68:D6:43:20:CF:EE:B2:46:DF:E2:C4:F2:4E:24:25:BC
Authority key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Certificate issuer: /CN=4aa934e30da690e7517133b7d212632655a74b87
Certificate serial: 0194BBCDD0BA1BE3C029DCA8FF5A7B667B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
Manifest number: 0D26
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: Sqk04w2mkOdRcTO30hJjJlWnS4c.crl (hash: O+apsUGSM6ecraZeNJ8dOPdYfIfZ3/lkLtiozYephGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:ba:1b:e3:c0:29:dc:a8:ff:5a:7b:66:7b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa934e30da690e7517133b7d212632655a74b87
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=bae953e868d64320cfeeb246dfe2c4f24e2425bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:b1:d8:95:9a:19:1f:9f:6b:e0:69:d0:97:
1a:e3:f6:78:e1:1f:ff:f9:ec:c2:63:c6:52:83:c8:
20:c8:16:02:ba:17:10:b3:19:d6:df:d1:56:54:41:
04:9f:4f:90:16:fd:6c:3b:08:b4:f7:85:93:d9:47:
68:81:06:f5:a7:78:7d:58:98:72:e6:f4:dd:a5:c7:
07:57:ec:c3:dd:b7:a6:f2:4c:29:a2:ab:a8:4d:f2:
3f:b9:8d:6d:4b:ba:1e:0e:7f:b2:39:ab:b3:6a:01:
81:00:f9:e4:36:16:78:d2:5c:7f:72:0a:da:f7:5d:
e9:f8:9b:cb:31:11:f1:7c:98:d6:cc:3f:c0:ab:61:
66:f2:93:b7:b0:d6:76:67:af:57:11:15:db:2d:16:
cd:97:bc:1a:08:77:61:1b:57:eb:72:48:b6:79:c2:
f1:97:15:1e:8f:22:2a:54:b5:0e:94:1a:90:ca:78:
11:ae:20:20:8e:b1:43:e0:bf:df:d8:20:d0:64:31:
6c:c7:76:ab:84:84:80:cd:1c:c8:59:08:ce:92:c7:
4d:e9:56:8f:80:80:81:d9:61:5d:50:d8:b4:ec:ba:
e4:10:2b:02:68:02:cc:29:e9:3d:8f:8e:52:cd:20:
d9:95:c1:4e:aa:90:6e:ae:69:22:14:da:7a:be:e6:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:53:E8:68:D6:43:20:CF:EE:B2:46:DF:E2:C4:F2:4E:24:25:BC
X509v3 Authority Key Identifier:
keyid:4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5d:6c:ff:ba:07:17:32:29:56:22:d6:af:3b:f0:b6:85:6c:
c4:4a:b1:ed:61:7d:fd:ea:02:d7:4b:a5:7f:7a:14:b5:4f:c3:
a2:f2:3b:67:fd:75:45:7c:2f:14:63:53:80:2e:32:1c:b7:f2:
bf:7c:f5:e5:23:f0:00:a6:e3:e1:fa:ad:59:2f:56:94:e6:ad:
a3:55:e0:9d:f5:7d:d7:34:8a:83:29:34:da:1c:a1:ce:cd:82:
82:73:f4:5f:99:17:d0:0e:64:6d:0e:e3:41:17:e9:d6:61:b6:
a3:83:31:f2:b0:00:cf:be:0f:1d:f6:5c:6c:26:54:97:b2:9b:
49:31:48:fb:4b:79:c7:2b:a7:73:79:53:8c:46:8e:ad:8d:2b:
7e:e8:b0:b0:c2:b7:e9:f7:a3:eb:3c:b8:7a:25:98:d2:ad:9f:
74:bf:26:0f:58:27:77:4e:7d:32:ae:05:f2:fe:e5:e4:14:c2:
a1:02:e9:89:67:c5:94:43:68:3d:78:e5:16:d9:bd:b5:cc:b5:
a8:79:8a:5d:05:d6:23:ab:0f:98:9c:a1:5d:e0:07:e3:b0:6d:
ff:18:b9:3b:10:b1:9e:ee:77:0a:4b:dc:c0:dd:cc:27:1c:18:
be:1a:ca:7c:41:21:9a:35:0c:0d:cb:f7:e5:60:82:46:01:69:
17:15:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:54 2025 by rpki-client