Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b2605f-c539-497c-ab13-067ab6cf9b6d/1/skcpjniSXyWKomVsc-cGgxVOpGU.mft
File: skcpjniSXyWKomVsc-cGgxVOpGU.mft (raw, json)
Hash identifier: hOC2saAiOpUhhc3C8VBEmE2ogCIbJJ5aZrnjWwFTJvM=
Subject key identifier: 68:30:10:E1:8C:C4:49:3E:55:38:25:8D:E8:AE:E7:45:0E:F7:13:8B
Authority key identifier: B2:47:29:8E:78:92:5F:25:8A:A2:65:6C:73:E7:06:83:15:4E:A4:65
Certificate issuer: /CN=b247298e78925f258aa2656c73e70683154ea465
Certificate serial: 0194BC3C4FBD41BB295ED2E397A2BF5B72E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skcpjniSXyWKomVsc-cGgxVOpGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b2605f-c539-497c-ab13-067ab6cf9b6d/1/skcpjniSXyWKomVsc-cGgxVOpGU.mft
Manifest number: 02A0
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: skcpjniSXyWKomVsc-cGgxVOpGU.crl (hash: K9xX6DJUiL6EmbxUNSzAK1kugJhOrteVvGacNAEnOvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4f:bd:41:bb:29:5e:d2:e3:97:a2:bf:5b:72:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b247298e78925f258aa2656c73e70683154ea465
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=683010e18cc4493e5538258de8aee7450ef7138b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:55:80:8f:b3:44:f8:e5:4f:1d:e5:34:c2:
db:2d:d3:98:18:ad:ab:23:37:a6:17:51:03:88:d9:
8a:03:ed:59:76:57:4e:cc:66:d8:ac:d3:93:16:85:
53:cc:09:6d:c4:10:0d:51:d1:ae:6a:2f:00:9f:38:
29:77:9e:c0:d2:c2:1c:18:ef:ae:51:66:f8:d8:66:
07:1d:03:2e:bd:fb:db:36:9c:90:48:58:e3:8c:f1:
c6:d8:c8:88:70:09:58:d4:0e:80:2d:7d:43:8e:c9:
88:e3:17:97:1c:d3:c1:a6:37:30:9f:3b:5a:26:00:
87:74:d1:03:44:37:6a:48:6c:5a:dc:0a:da:f1:81:
d5:bd:b7:52:f0:b5:25:63:20:3d:81:84:80:7e:7d:
84:a0:0e:d4:ce:d8:42:91:ac:c6:f5:4b:c9:bb:b1:
be:7b:3a:ec:a5:39:c3:1a:ce:ad:e5:ab:bd:2b:4c:
2a:b7:00:db:be:ca:06:e7:69:11:f0:1f:71:0c:fd:
43:14:b6:22:48:8c:25:96:f7:91:7b:92:42:18:ce:
d1:a4:7c:6d:4b:7e:4f:16:5f:9b:82:84:cd:79:38:
9e:c1:e2:0b:1e:ee:4b:74:1d:f5:c0:2f:b1:ea:28:
4b:83:d9:f8:61:ec:b4:ec:6b:ed:76:d3:c6:36:72:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:30:10:E1:8C:C4:49:3E:55:38:25:8D:E8:AE:E7:45:0E:F7:13:8B
X509v3 Authority Key Identifier:
keyid:B2:47:29:8E:78:92:5F:25:8A:A2:65:6C:73:E7:06:83:15:4E:A4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skcpjniSXyWKomVsc-cGgxVOpGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b2605f-c539-497c-ab13-067ab6cf9b6d/1/skcpjniSXyWKomVsc-cGgxVOpGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b2605f-c539-497c-ab13-067ab6cf9b6d/1/skcpjniSXyWKomVsc-cGgxVOpGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:79:c1:cb:db:05:61:71:b9:fa:61:fb:c5:96:05:3a:3d:5d:
c1:5f:4a:e0:75:ef:94:83:5d:5f:e3:5d:d4:f1:ea:25:dd:58:
5b:5b:7f:e8:55:72:7e:d0:88:fd:13:0e:b6:e5:70:0d:98:ec:
c3:5f:59:e5:08:0e:a0:bd:c9:56:f9:09:f9:11:cc:e6:87:cd:
06:b9:e9:8b:93:c3:47:4d:0c:13:0d:8c:f8:51:7d:28:65:57:
3d:ba:27:4b:79:36:0b:b8:51:0c:b1:d7:0e:7a:53:8b:08:46:
e9:87:df:a2:84:95:96:34:cb:63:2b:ae:50:5f:e0:56:f2:ed:
01:c8:ad:af:79:1f:65:41:d8:29:3f:c4:65:01:6c:0d:30:e8:
31:f4:e5:ed:cf:24:c4:31:63:f4:71:e8:4f:33:5d:5b:23:e4:
87:8a:84:c3:ad:cf:ac:c4:cf:f3:0b:17:21:1d:c1:ed:a5:9f:
c0:7f:71:77:57:5d:10:b0:24:29:dd:c3:eb:ae:b7:ec:c9:94:
9e:b6:1e:63:4a:24:b0:dc:10:ba:ca:26:66:83:9f:7e:f4:e7:
a8:2a:80:71:11:17:ef:fb:ef:95:53:b4:a7:96:fb:0e:9b:ec:
55:dc:81:42:f9:ee:65:a1:82:75:bc:42:b9:7b:04:49:d2:47:
e6:5e:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:51 2025 by rpki-client