Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
File: SkB8o6avRpoxu1IDD82RHJHmbBs.mft (raw, json)
Hash identifier: cEoIBbOzMT9UxK3WUoLvjjNNvQJy+qCoU8lLxCUuZ9s=
Subject key identifier: AF:E0:59:F7:B0:1E:C4:3D:D9:37:E4:6A:FB:39:4F:94:58:4D:95:7B
Authority key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Certificate issuer: /CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Certificate serial: 0194BD17AE3D4666E8F7E3FD41F9925A60B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
Manifest number: 101F
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: J61Fkm6j7PE3MBvtv4g6n6biSSo.roa (hash: 8K7fCj5TQmFNg/C8KSxNqmWTR8finmCcI4+gE6ORWAo=)
2: SkB8o6avRpoxu1IDD82RHJHmbBs.crl (hash: TJBbgz1253Ue5BgO6vMqcniUhAThzP3j0K0AhEp0Ny0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ae:3d:46:66:e8:f7:e3:fd:41:f9:92:5a:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=afe059f7b01ec43dd937e46afb394f94584d957b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:b2:66:2c:3f:96:e2:ae:52:e8:4e:fa:64:
87:af:67:75:b5:f3:57:88:5a:7f:27:20:85:d4:9c:
a4:63:43:8e:8e:91:70:91:41:c0:2f:2c:65:b9:e2:
c7:be:6e:67:3a:f6:ec:ad:e9:d4:44:23:fd:df:c8:
95:2d:e0:25:34:7c:59:42:84:d2:e2:47:2c:c7:4a:
ea:27:5e:d3:c8:26:18:05:c7:8e:36:e0:59:ee:20:
be:57:af:54:98:18:a4:79:a6:ec:e8:13:d9:6e:a7:
a0:47:d9:f0:61:7e:2a:12:5a:ed:fd:62:92:08:05:
8e:25:b6:a9:40:8f:35:93:a0:4f:9d:9b:f6:69:25:
f0:91:f9:9d:bb:32:39:dd:46:95:cb:67:6d:65:b6:
9f:e5:31:d7:b8:62:fa:1d:92:4a:71:48:35:b9:be:
34:59:84:af:09:15:a8:ab:65:2a:d4:76:1f:f8:f8:
81:31:c7:ee:e9:b4:76:36:f7:f9:5a:e7:a6:77:1d:
bb:7e:a5:f5:f4:bc:ff:d6:f7:e0:f4:e0:4f:55:f0:
2d:c4:74:d3:9f:86:2f:43:1a:d5:89:68:1f:b5:78:
9d:b6:ed:23:ce:d6:94:d2:05:22:c7:2d:84:ea:76:
6f:de:33:59:17:bd:81:c4:00:33:7c:e8:31:af:ac:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:59:F7:B0:1E:C4:3D:D9:37:E4:6A:FB:39:4F:94:58:4D:95:7B
X509v3 Authority Key Identifier:
keyid:4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c7:cb:10:11:57:c0:df:35:6f:af:f5:6b:f6:58:14:f7:4a:
e0:ea:f5:44:01:8e:13:d5:30:a2:9b:78:7b:80:ef:69:2d:40:
52:56:78:f7:a4:bd:fb:34:ca:4f:4b:ac:51:d2:76:4c:31:6e:
9c:34:fa:12:ae:aa:96:97:ff:b8:00:d6:87:dd:a7:1f:b9:a5:
fa:64:09:a3:cc:8f:17:2f:81:a8:e8:a1:ac:fb:98:f3:9f:07:
a6:0e:6b:b1:3b:60:a5:c2:68:0b:a0:32:40:c7:2c:ff:b1:f8:
2a:62:04:8a:5a:ee:54:68:a2:c7:93:c6:ae:c8:32:0c:13:ea:
a9:1a:36:f6:25:58:55:68:70:98:1d:94:b5:22:e9:6f:98:4e:
d8:64:ff:78:a8:52:60:d8:eb:01:d1:7d:65:d8:3e:89:86:c0:
3e:f2:e1:c6:ff:ed:47:b0:4e:09:17:ee:fe:ab:19:48:a5:23:
75:c1:16:f8:4f:86:97:8d:12:12:88:f9:3f:a2:e3:65:98:47:
df:9c:36:0e:70:29:74:9a:9c:c6:31:6c:b4:9a:5e:5e:82:92:
79:28:d9:4b:12:a1:68:e0:58:77:00:c3:92:28:74:b4:e6:08:
c5:7c:b8:24:82:9d:83:ff:9f:04:84:c0:4f:c9:a0:14:18:fc:
91:67:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:34 2025 by rpki-client