Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
File: SkB8o6avRpoxu1IDD82RHJHmbBs.mft (raw, json)
Hash identifier: jc5EZfDaQnbbDrON0xu4yzXTv2WWQTSD0SZ/F5HIDXs=
Subject key identifier: 91:A3:7C:92:4C:D6:8B:34:AF:92:90:6F:55:87:50:F2:BB:69:F4:13
Authority key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Certificate issuer: /CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Certificate serial: 019548234F98BF33F07DAA74D234EC02FDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
Manifest number: 1067
Signing time: Thu 27 Feb 2025 16:00:28 +0000
Manifest this update: Thu 27 Feb 2025 16:00:28 +0000
Manifest next update: Fri 28 Feb 2025 16:00:28 +0000
Files and hashes: 1: J61Fkm6j7PE3MBvtv4g6n6biSSo.roa (hash: 8K7fCj5TQmFNg/C8KSxNqmWTR8finmCcI4+gE6ORWAo=)
2: SkB8o6avRpoxu1IDD82RHJHmbBs.crl (hash: uUmiecAfPuGKQi5rRr8gi/NSAJT+m5F52KC2YbvHlXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:23:4f:98:bf:33:f0:7d:aa:74:d2:34:ec:02:fd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Validity
Not Before: Feb 27 16:00:28 2025 GMT
Not After : Feb 28 16:00:28 2025 GMT
Subject: CN=91a37c924cd68b34af92906f558750f2bb69f413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:6c:34:75:79:24:c4:df:31:31:34:5e:26:
25:fa:57:1e:4a:0f:40:62:55:e7:18:da:b9:76:7f:
33:f1:80:e2:25:04:c5:29:a2:29:4b:0f:41:a0:81:
e6:48:70:95:73:b8:04:17:48:b5:c8:e5:c7:a4:56:
3c:46:0d:9c:c9:e3:5b:f0:24:ba:07:18:d2:b9:2f:
e9:cf:2e:2e:bf:dc:07:95:2f:0c:23:b2:bb:c0:e5:
d1:d6:56:7b:a8:ea:45:ed:8e:8b:78:42:64:dd:9a:
79:8c:f2:e3:46:97:d3:48:58:7f:f0:77:10:92:47:
5e:91:ef:9c:af:d0:e2:d3:af:58:9a:d4:72:aa:ee:
7e:2d:37:ab:ab:aa:54:f9:fc:cd:10:dd:44:1f:38:
ca:77:b1:ac:59:18:ae:5b:c2:35:92:cc:64:39:12:
10:da:e3:e8:e9:48:09:22:98:99:3d:d3:41:f2:4b:
a5:9f:28:b2:e1:88:72:03:5c:4d:f4:95:4d:48:4b:
de:bc:53:2b:63:d3:08:30:14:53:4b:41:fb:37:5a:
5c:d6:81:4f:01:e5:91:f4:bc:48:f2:2d:9c:b7:a4:
a9:69:75:bd:08:fc:0c:97:6f:d0:3e:c1:6f:9f:2a:
f3:c0:a2:ec:e4:04:64:b1:34:39:ac:6b:8c:49:7b:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A3:7C:92:4C:D6:8B:34:AF:92:90:6F:55:87:50:F2:BB:69:F4:13
X509v3 Authority Key Identifier:
keyid:4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:2e:cd:e9:ae:0b:fc:40:8c:ba:e9:15:01:be:a3:0b:fc:
36:3b:5f:ae:33:4e:8d:8b:73:7a:cf:e1:63:bf:1c:4c:c5:81:
01:50:45:d9:bc:5d:8a:7c:f9:75:90:2f:ba:23:99:2d:b0:6c:
8e:86:e2:65:9a:68:3d:d1:99:72:ec:4a:a1:0c:b7:41:d8:41:
4d:35:c7:ec:5b:03:78:fc:ce:cf:64:cb:da:4d:c2:d6:10:07:
4e:e6:36:96:b2:fd:68:b5:40:f0:c5:4a:05:a6:b3:9b:38:c4:
2b:51:ef:bf:1e:7b:c2:a6:7d:fa:f5:f1:e7:ba:e5:6e:78:fa:
a5:9f:a8:78:0b:75:97:33:fa:b8:78:4c:96:d3:1d:68:87:a6:
df:92:b8:8d:9c:34:08:17:6b:38:da:16:b2:c3:28:ff:d9:ee:
f9:4e:16:96:9b:80:08:1c:8b:10:c7:7c:12:a4:1b:99:96:91:
bf:d1:31:ba:a0:7d:8b:69:db:ff:94:f7:05:98:aa:c3:d2:6d:
c1:8c:48:47:d2:7e:ed:78:8c:8e:b9:e6:fa:3b:41:ce:2b:72:
98:d4:08:2a:cd:87:8d:f8:61:47:fa:87:b5:16:0e:9e:23:48:
2d:9e:89:f3:8a:4e:91:10:3b:3a:0a:51:f6:87:92:58:ba:f4:
a5:38:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:01 2025 by rpki-client on console.sobornost.net