Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier: HmIHjqwxzpHjZOy7A7k7snyW4UpQVYd24qiFQknKJvk=
Subject key identifier: 77:AB:1D:93:A6:08:AB:83:05:B8:0E:BA:6A:CB:83:61:58:2D:B8:76
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 0194BC3BD74CC8281E177DFC6B13D5A66A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=)
2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: XwwqqF5o7CLIHI1nwqQxhphDnQMs1tdG9v0HG8ik778=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d7:4c:c8:28:1e:17:7d:fc:6b:13:d5:a6:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=77ab1d93a608ab8305b80eba6acb8361582db876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:88:1f:d8:85:41:16:2b:ed:c8:67:70:7b:
71:07:ad:17:75:7e:70:18:81:1a:ee:cb:c9:9c:33:
52:eb:e1:de:a3:4a:47:98:fb:f5:ea:35:5d:60:ee:
2c:31:9d:58:0e:51:61:d0:04:71:3e:e9:ec:9c:5c:
55:c3:fd:b0:00:c2:7e:9a:14:1c:28:64:6b:0e:c6:
57:28:68:32:7a:0f:df:24:f4:fc:7e:c5:60:77:31:
25:0c:08:f4:96:bd:09:d5:6d:0e:a4:45:0a:41:1c:
91:4b:a0:33:8c:83:18:92:be:f1:f2:da:01:4d:ed:
4e:db:c5:dd:f4:07:99:ef:ed:d2:8d:92:9b:ac:da:
42:2f:66:78:1a:e2:8b:93:8b:01:5d:9b:a7:fa:85:
0c:8a:91:24:dc:e8:25:f8:b9:03:b0:a3:9b:b1:04:
42:81:ba:fb:48:7c:86:40:20:e9:1b:28:ce:16:01:
cc:d8:b5:51:aa:1d:a2:07:b2:3e:1c:7a:52:e9:76:
7a:7d:0e:5a:99:5e:ea:10:4a:23:2c:65:3d:c4:2f:
22:7c:d1:b9:cd:71:e7:a9:30:01:77:9e:dd:7a:ce:
9b:6e:ba:87:9c:ad:22:37:63:69:d5:b0:e3:74:7c:
0c:53:e9:f6:fd:34:6c:a3:c3:f6:94:79:db:81:89:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AB:1D:93:A6:08:AB:83:05:B8:0E:BA:6A:CB:83:61:58:2D:B8:76
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:31:81:b3:4c:68:67:34:65:cd:4e:09:4a:33:af:24:1f:
6f:4e:05:08:1b:4e:f7:a8:42:26:3b:99:04:a4:21:cc:89:fd:
69:be:08:9e:d0:61:1a:21:e6:34:16:09:00:d6:ae:e4:60:3f:
67:d9:fc:e9:84:fc:c7:23:d1:e8:ff:c0:d9:52:dc:f0:72:e1:
8c:1e:f0:73:44:23:5a:89:e8:c2:e7:99:62:d1:f6:3e:02:e9:
34:2a:46:b1:3d:7e:aa:fd:27:b1:98:4b:49:c1:12:d9:35:2b:
60:bd:ff:9e:8c:b1:a8:32:0d:1d:b2:fa:86:93:bd:82:32:9b:
7a:ec:9c:8a:5e:e3:f1:0b:07:e2:b1:5e:50:22:4c:7e:b0:fa:
f9:ec:fc:50:73:1b:84:06:44:ae:84:b7:77:6e:15:19:19:74:
7a:27:0c:1f:b8:62:79:71:ae:ec:91:e3:b9:9c:cf:9f:b9:7a:
ee:75:c5:aa:21:d4:02:16:dc:8e:3c:c9:55:3c:ed:0a:98:c9:
94:55:37:ce:9b:87:ef:a7:61:eb:f8:b6:e3:ca:37:62:54:9b:
e1:54:25:36:4f:07:e3:4a:30:76:09:a5:f7:b4:8d:b0:41:9d:
f9:63:c4:9c:36:a4:6e:86:f5:4e:bd:b3:10:19:4f:5d:08:38:
60:ae:50:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:17 2025 by rpki-client