
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File: skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier: 7TfC6oaTUKG7JY00frQoqE7+E9wBJygJVcMYZAGE0U4=
Subject key identifier: 79:6C:36:A8:A4:D3:74:5A:5E:BE:3A:B7:F2:85:AC:B9:E5:DA:41:33
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer: /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial: 0194BC72950B3649320D9B0F01AC242B231A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number: 0324
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: GAkvte+wriTbTLTXvB6myVJnHdA91rGFiPo8Dht5oK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:95:0b:36:49:32:0d:9b:0f:01:ac:24:2b:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=796c36a8a4d3745a5ebe3ab7f285acb9e5da4133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:72:1e:27:a8:cf:12:e9:4d:44:ca:80:ee:
3d:03:34:f2:17:ed:83:58:c3:b9:2d:a1:00:b9:75:
5f:cb:7a:0b:c7:08:4f:5b:3e:7f:d1:4a:c8:b4:23:
98:bf:fc:b7:ab:64:30:13:31:1d:fe:e8:ef:aa:83:
af:5a:14:b2:fb:11:83:d9:20:f4:e8:2d:56:9a:07:
60:9d:55:48:e8:3f:05:b3:48:a7:18:22:f8:b2:50:
bc:2d:18:f2:61:86:fc:3a:d7:8a:7b:61:8c:02:18:
4f:32:dc:6f:00:4b:68:0c:6b:8d:34:51:94:f8:0c:
a2:2f:6f:6f:b5:c0:b7:5e:fd:ef:aa:b5:11:d8:c4:
e8:30:b8:50:48:b3:ea:a4:27:0d:14:c7:78:8b:e8:
3f:a8:7e:c3:17:d4:b4:be:14:88:5e:11:41:f5:5d:
ec:e7:06:01:34:00:45:83:7f:1d:8d:63:9f:66:5e:
9b:20:33:40:01:f6:1b:8a:9b:7b:1d:c9:9e:69:ca:
3a:18:26:d8:62:93:50:dc:2b:ef:82:e3:41:b4:3e:
98:25:3d:0f:53:0a:4f:4b:1a:c9:2c:d6:1e:e0:ad:
22:68:d8:cb:f5:7f:c2:c4:2f:66:07:1c:94:df:c4:
8c:69:47:b2:35:2c:77:b8:1b:0a:bf:41:f9:35:08:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6C:36:A8:A4:D3:74:5A:5E:BE:3A:B7:F2:85:AC:B9:E5:DA:41:33
X509v3 Authority Key Identifier:
keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bc:e1:64:e6:6e:28:3e:71:09:b5:7a:f9:6b:60:9b:41:0c:
ae:b9:5f:b4:2a:2a:c0:30:19:24:36:e3:31:83:f5:a5:c6:f1:
84:fa:cd:5b:72:2d:ab:b4:0a:c2:70:c2:fe:35:c1:db:c8:dc:
9e:6e:4f:79:06:72:ba:78:ec:cc:3d:40:d6:e0:76:70:7b:95:
56:39:6d:19:6e:61:cd:42:b2:e1:f2:67:e1:12:fc:39:43:ad:
cd:16:7a:b8:79:c3:1f:cb:c7:8a:91:7b:6d:b4:e5:84:de:34:
d4:2f:06:7d:84:e2:c8:42:0a:02:6f:07:b0:e8:b0:b7:6e:de:
ea:0e:48:e4:70:4c:bd:94:30:65:dc:94:e4:e6:01:b1:6a:9b:
d8:de:4c:5e:96:cf:7a:c9:49:7b:69:98:b3:9a:db:db:5a:cf:
f0:b8:70:84:a1:51:23:8d:c1:63:02:4d:36:e9:fc:f4:57:66:
2f:35:b8:73:58:4e:29:55:03:69:6d:77:52:13:06:db:81:64:
2b:bd:f2:4a:ae:f2:bc:24:de:ec:03:f2:a2:2e:06:12:35:93:
37:83:31:fb:e1:67:51:7d:77:50:18:cf:1a:01:52:64:08:29:
67:88:b1:07:bf:7a:81:13:57:92:8b:d8:06:16:a2:4d:b7:ee:
55:cb:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:43 2025 by rpki-client