Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
File: SkB8o6avRpoxu1IDD82RHJHmbBs.mft (raw, json)
Hash identifier: KVI+zAKto6OtAThWHklYLcyMoOTCk6yIqnU5QZRwT5M=
Subject key identifier: A7:8F:B4:11:CE:91:6A:DC:A1:AA:20:1C:56:08:2B:7A:D0:92:1F:04
Authority key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Certificate issuer: /CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Certificate serial: 0195AC9000E62D5E8982ECC48CFB362578EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
Manifest number: 109B
Signing time: Wed 19 Mar 2025 04:01:13 +0000
Manifest this update: Wed 19 Mar 2025 04:01:13 +0000
Manifest next update: Thu 20 Mar 2025 04:01:13 +0000
Files and hashes: 1: J61Fkm6j7PE3MBvtv4g6n6biSSo.roa (hash: 8K7fCj5TQmFNg/C8KSxNqmWTR8finmCcI4+gE6ORWAo=)
2: SkB8o6avRpoxu1IDD82RHJHmbBs.crl (hash: z2lwlkS8nvSU2fkCBWZustND8friyY8ybk6P70A6Eak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ac:90:00:e6:2d:5e:89:82:ec:c4:8c:fb:36:25:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Validity
Not Before: Mar 19 04:01:13 2025 GMT
Not After : Mar 20 04:01:13 2025 GMT
Subject: CN=a78fb411ce916adca1aa201c56082b7ad0921f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ed:33:45:2e:c7:77:3a:68:24:0b:53:17:fc:
57:e5:7a:5e:cd:1c:00:a3:5b:9d:1c:a9:65:a2:16:
be:f5:f2:93:1c:fd:f1:1c:96:64:94:be:4b:92:b6:
34:f9:84:35:17:1f:95:22:0c:8b:ac:c0:11:72:29:
58:02:dc:c0:62:ee:02:31:58:00:75:49:05:3c:86:
e6:52:24:0e:0d:e8:b3:8a:46:5e:0b:bb:a0:70:20:
5a:ad:78:3b:af:9a:b0:97:c0:70:a2:b3:0f:ec:f6:
59:c1:5f:e9:ff:be:88:66:e8:3d:4e:93:5c:8c:ad:
11:27:8a:d2:65:97:ed:4d:25:ec:6a:0e:2e:b8:c4:
15:aa:f5:9d:91:08:22:62:55:35:70:c2:62:81:e9:
bc:86:92:9a:a3:8f:5e:6b:30:30:8e:fd:a3:b2:fd:
2b:ff:f1:74:2c:0e:e5:8c:5a:d6:5f:06:63:cf:a8:
99:05:9f:4a:63:71:d8:e6:3c:47:d3:c2:ca:86:20:
c8:73:db:d7:4e:c5:14:e2:6a:8c:82:49:ab:36:21:
27:75:c3:62:c6:20:60:8f:92:0c:10:0e:eb:90:fa:
a4:7f:02:60:f6:65:bb:25:88:5e:a2:1c:d8:59:b0:
f7:11:64:2f:46:e2:c8:fe:1c:fe:fd:b6:6e:2d:15:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8F:B4:11:CE:91:6A:DC:A1:AA:20:1C:56:08:2B:7A:D0:92:1F:04
X509v3 Authority Key Identifier:
keyid:4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:77:b9:aa:b6:cd:f5:1b:0f:68:37:31:c7:ac:61:85:40:21:
aa:c5:c0:7d:b6:cd:29:44:1e:a9:e0:70:79:1b:c5:25:cb:c8:
d4:9e:d4:a3:51:2d:82:4a:eb:b7:56:e5:22:85:e8:a1:f1:18:
d6:ad:0f:92:4a:ca:a5:f4:01:b2:71:66:39:f7:47:21:6f:a5:
13:7b:85:ba:7f:a0:5d:d0:8f:bd:1b:d7:77:89:b9:09:9b:9e:
59:44:0a:0f:bd:15:d2:c8:e7:8d:ce:b3:2d:43:3f:70:27:b4:
af:2b:df:61:1d:1e:17:ae:83:34:7e:be:56:73:56:5c:82:3e:
16:e2:12:50:7d:60:0c:1d:17:cc:75:d2:e0:f3:e4:fa:e5:55:
ee:27:1a:3e:ad:5a:82:a6:fc:7a:86:4b:d5:a0:3e:e2:35:5d:
f8:69:7b:8d:84:41:7a:6f:a7:9b:b9:4d:0c:94:f7:fd:70:cc:
86:92:c1:ac:29:e8:63:8b:c1:4b:b3:a8:4d:67:ad:cd:03:8e:
2b:6f:5f:68:f3:58:c8:d8:bb:8c:2b:a1:d2:3a:21:93:39:8e:
c5:58:aa:b6:8e:67:bb:32:b0:d9:73:ee:61:38:e0:d1:66:1e:
fe:8c:9d:d6:9b:63:1f:3e:bf:ed:1a:2e:f6:0b:a1:77:27:48:
80:c9:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:38 2025 by rpki-client