Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier: 3G9SlhXFgkk8nlUUphSUIFWqfVWSS/1CR4432Shojqw=
Subject key identifier: 6B:63:06:8A:3C:EB:23:3D:60:5E:56:EA:4D:90:78:42:AC:88:67:D6
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 0195E159B23D1CD4BDF26E039857031B5AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number: 0DBB
Signing time: Sat 29 Mar 2025 10:01:46 +0000
Manifest this update: Sat 29 Mar 2025 10:01:46 +0000
Manifest next update: Sun 30 Mar 2025 10:01:46 +0000
Files and hashes: 1: KSNAER4Mydp8HyU9sU8i1lEowuM.roa (hash: k7Cs9APUIR/QxVIdcXpLwc8DXRZq1n3B8dEj7Z0wTKs=)
2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: RH4pCTGxlM40iPoStuy21obOH//PEMLufQpTlzxka+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:b2:3d:1c:d4:bd:f2:6e:03:98:57:03:1b:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Mar 29 10:01:46 2025 GMT
Not After : Mar 30 10:01:46 2025 GMT
Subject: CN=6b63068a3ceb233d605e56ea4d907842ac8867d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:40:45:ef:86:91:46:48:2a:3f:3f:59:d7:
cf:9c:eb:99:97:63:4c:1f:0e:76:70:8f:d7:03:ed:
ca:85:b5:96:84:9b:97:e0:84:40:ee:69:9a:9e:75:
e4:65:98:97:13:b4:6a:df:82:d6:08:d6:1c:b6:ea:
c9:11:73:2f:15:30:7c:39:58:ea:3a:5d:ab:6b:8a:
47:bb:27:a9:64:97:b3:c4:71:8e:ee:02:ee:37:55:
3d:a3:8b:6f:ec:98:7b:9b:eb:3a:b9:7e:40:62:91:
bc:4a:e2:ac:0c:42:51:16:2b:b8:04:7d:44:fa:ad:
90:be:56:fb:6c:eb:42:2c:c1:84:e0:37:3e:80:32:
eb:36:2e:72:c5:7c:d5:5e:df:66:7b:9d:f0:66:64:
d9:e7:64:6a:f2:0a:62:6f:9d:73:4f:32:84:67:58:
78:37:88:a3:59:22:b5:27:8a:56:bc:9c:78:e7:9c:
9b:02:25:1c:fc:e6:7a:9a:9e:5a:2b:13:b1:f3:0d:
81:07:09:47:fd:90:20:c6:f1:ca:93:ad:cf:4a:75:
63:58:33:b9:fb:19:89:25:fe:90:3a:0a:9a:24:7f:
a7:11:87:01:60:bc:a4:e9:b8:3f:a4:8c:1b:d5:2e:
27:4f:da:0e:08:2f:2f:86:74:7a:5e:21:39:10:4a:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:06:8A:3C:EB:23:3D:60:5E:56:EA:4D:90:78:42:AC:88:67:D6
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:33:a8:80:24:cd:7d:1a:08:c1:cf:59:b9:fe:0f:fe:09:e5:
b2:5c:23:bf:e2:05:a4:44:70:ab:51:e0:5a:8f:f3:fb:27:b9:
7d:70:1f:d7:a1:bb:85:5f:69:18:4a:63:1c:1e:57:55:d6:86:
ad:fe:89:ca:5f:3d:02:bf:c9:94:f9:13:7e:6c:b5:d3:c7:78:
e7:5b:5a:4b:69:f1:7b:bb:49:e4:bc:f3:9e:03:7f:aa:9e:fe:
c0:a1:62:6e:06:bf:da:bc:04:4d:8b:25:8b:86:b0:c9:a8:2e:
5d:94:62:be:7d:bb:e6:8d:2a:f8:c9:2b:24:ba:4e:a6:57:85:
ec:6e:d5:cb:be:c8:4d:a8:5d:2a:36:58:b8:b1:34:bc:3d:c7:
fb:26:e3:75:41:b0:5e:ac:20:2b:ca:b8:4b:f9:a4:27:5e:77:
86:a1:b7:26:0c:61:52:1b:30:70:20:8c:c8:ec:0a:3f:bb:12:
82:7d:a3:fd:ab:1b:a4:43:ab:d5:f6:b1:da:42:4d:5a:97:d5:
1a:0a:9c:51:f6:4c:fe:84:a8:71:67:d0:0b:86:cf:6d:1f:37:
f6:ea:84:55:15:97:6a:0a:b3:a3:10:16:2b:78:71:fd:79:3d:
d9:db:2c:10:bd:de:f9:8a:ad:b2:d7:f2:1a:5c:26:57:3c:8a:
dc:2c:d4:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWbI9HNS98m4DmFcDG1rzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YTQ2OTNiMWRjY2M0OWVlNjYwNWE3ZDMzOWUxZDg0N2Vm
MGFkOGIwHhcNMjUwMzI5MTAwMTQ2WhcNMjUwMzMwMTAwMTQ2WjAzMTEwLwYDVQQD
Eyg2YjYzMDY4YTNjZWIyMzNkNjA1ZTU2ZWE0ZDkwNzg0MmFjODg2N2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj9ARe+GkUZIKj8/WdfPnOuZl2NM
Hw52cI/XA+3KhbWWhJuX4IRA7mmannXkZZiXE7Rq34LWCNYcturJEXMvFTB8OVjq
Ol2ra4pHuyepZJezxHGO7gLuN1U9o4tv7Jh7m+s6uX5AYpG8SuKsDEJRFiu4BH1E
+q2Qvlb7bOtCLMGE4Dc+gDLrNi5yxXzVXt9me53wZmTZ52Rq8gpib51zTzKEZ1h4
N4ijWSK1J4pWvJx455ybAiUc/OZ6mp5aKxOx8w2BBwlH/ZAgxvHKk63PSnVjWDO5
+xmJJf6QOgqaJH+nEYcBYLyk6bg/pIwb1S4nT9oOCC8vhnR6XiE5EEqmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtjBoo86yM9YF5W6k2QeEKsiGfWMB8GA1UdIwQY
MBaAFEikaTsdzMSe5mBafTOeHYR+8K2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4Yjct
YmUzYmI2Y2QyZDUxLzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4YjctYmUzYmI2Y2QyZDUx
LzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDOogCTN
fRoIwc9Zuf4P/gnlslwjv+IFpERwq1HgWo/z+ye5fXAf16G7hV9pGEpjHB5XVdaG
rf6Jyl89Ar/JlPkTfmy108d451taS2nxe7tJ5LzzngN/qp7+wKFibga/2rwETYsl
i4awyaguXZRivn275o0q+MkrJLpOpleF7G7Vy77ITahdKjZYuLE0vD3H+ybjdUGw
XqwgK8q4S/mkJ153hqG3JgxhUhswcCCMyOwKP7sSgn2j/asbpEOr1fax2kJNWpfV
GgqcUfZM/oSocWfQC4bPbR839uqEVRWXagqzoxAWK3hx/Xk92dssEL3e+Yqtstfy
GlwmVzyK3CzU6w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:11:01 2025 by rpki-client