Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f25c1f-707a-4522-ad75-3014f000143f/1/skVpGny6sqsq-Ku4y-aDIWqbiq0.mft
File: skVpGny6sqsq-Ku4y-aDIWqbiq0.mft (raw, json)
Hash identifier: ehhrE3FM465rXReyOgzuFuugBnQui3cdMDWCfh1kguE=
Subject key identifier: EF:81:DC:39:48:71:45:D2:84:32:36:E1:66:1E:A7:8A:38:B8:E1:15
Authority key identifier: B2:45:69:1A:7C:BA:B2:AB:2A:F8:AB:B8:CB:E6:83:21:6A:9B:8A:AD
Certificate issuer: /CN=b245691a7cbab2ab2af8abb8cbe683216a9b8aad
Certificate serial: 018F74D4D63BD1546CB1EDBBB1C32981CF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skVpGny6sqsq-Ku4y-aDIWqbiq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f25c1f-707a-4522-ad75-3014f000143f/1/skVpGny6sqsq-Ku4y-aDIWqbiq0.mft
Manifest number: 10B4
Signing time: Tue 14 May 2024 02:00:56 +0000
Manifest this update: Tue 14 May 2024 02:00:56 +0000
Manifest next update: Wed 15 May 2024 02:00:56 +0000
Files and hashes: 1: skVpGny6sqsq-Ku4y-aDIWqbiq0.crl (hash: ecd4BoVlRk2TdAFEidF38mat2L1c9Qwxd+raPUVV2LI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:74:d4:d6:3b:d1:54:6c:b1:ed:bb:b1:c3:29:81:cf:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b245691a7cbab2ab2af8abb8cbe683216a9b8aad
Validity
Not Before: May 14 02:00:56 2024 GMT
Not After : May 15 02:00:56 2024 GMT
Subject: CN=ef81dc39487145d2843236e1661ea78a38b8e115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:7d:ec:6a:59:ea:4e:78:ff:fa:fe:fe:7b:
55:97:e5:c6:6f:8b:90:a0:d1:0c:de:60:29:50:31:
1f:b0:6f:bb:1e:7b:01:41:68:02:ee:79:c3:69:6f:
ff:d7:f7:d9:fc:85:aa:18:54:ad:c8:95:c9:da:14:
37:ea:94:fc:a1:85:ad:5f:fe:f9:77:bf:de:b3:31:
9a:db:eb:0a:56:1d:b8:19:b6:c0:e5:1c:66:ae:f4:
51:e4:9e:d9:fc:12:ec:c0:d1:03:5f:f6:a6:25:a8:
dc:ce:36:4c:53:13:51:8f:d7:8c:d0:b1:e3:5f:7f:
92:c1:c0:94:75:4d:65:d0:7d:8c:7a:1b:b6:1d:b2:
3c:e7:a0:0b:b5:e6:47:8a:8d:b9:eb:d1:db:e8:21:
c7:51:98:ef:db:79:ee:42:b1:8c:bd:66:6f:46:db:
d4:8c:8a:aa:41:08:b8:5d:ce:d7:06:4d:cb:8d:ca:
47:d4:b7:28:a3:71:81:23:c7:77:80:4a:77:a5:5b:
f3:b5:13:78:7b:70:b3:fa:06:b7:1c:4d:2b:80:7f:
b5:6a:a6:92:ba:34:5c:0b:a0:55:39:5e:1b:a9:4c:
88:29:94:28:ed:3b:07:ab:c6:b5:11:88:0f:00:7a:
b4:5d:e2:dd:7c:10:4f:21:a8:72:72:70:69:d9:c6:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:DC:39:48:71:45:D2:84:32:36:E1:66:1E:A7:8A:38:B8:E1:15
X509v3 Authority Key Identifier:
keyid:B2:45:69:1A:7C:BA:B2:AB:2A:F8:AB:B8:CB:E6:83:21:6A:9B:8A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skVpGny6sqsq-Ku4y-aDIWqbiq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f25c1f-707a-4522-ad75-3014f000143f/1/skVpGny6sqsq-Ku4y-aDIWqbiq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f25c1f-707a-4522-ad75-3014f000143f/1/skVpGny6sqsq-Ku4y-aDIWqbiq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c5:52:0a:44:59:4d:5f:84:61:f5:60:7b:0f:f2:45:ec:3f:
67:ec:95:47:cf:03:67:3d:82:0f:d4:5b:1d:8b:c8:72:c9:66:
13:44:ac:3b:ad:87:b5:20:92:12:a9:3e:1c:68:0d:31:67:fc:
bc:48:b3:8c:35:60:5a:8e:b3:5e:3e:26:90:d9:21:87:98:0c:
0a:74:f9:84:e9:3b:ed:e2:d2:6e:78:dc:fc:e3:ee:83:b0:62:
5f:aa:6e:59:4f:27:ac:07:94:f7:8f:01:3d:7a:59:71:13:74:
b7:a4:50:0c:a2:b9:18:31:ca:66:5d:05:0e:35:b7:60:26:31:
bd:86:cb:ef:cb:79:96:69:97:5a:79:36:69:84:f6:70:aa:cd:
c8:69:b6:60:da:5d:d9:c8:0f:08:da:e2:18:50:f7:79:1e:ad:
eb:d1:0a:8d:a8:86:f4:c4:70:18:c7:f0:40:27:3c:40:bc:ca:
fc:3d:2c:43:20:76:dc:6d:25:ed:27:c5:0e:61:9b:3d:6e:82:
5a:77:84:d0:9d:65:89:08:24:c9:81:5f:d3:fd:91:ee:ef:27:
dd:63:1a:07:de:40:d6:98:1b:c3:00:c7:49:b0:9d:60:c8:f4:
0d:f6:ab:66:e5:37:00:80:d5:86:8a:44:26:aa:df:c2:fe:55:
66:c3:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:07 2025 by rpki-client