Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: FkN/abf666Rh7Q/hmDG8OKxH4zUANuB+3ZCF8hjbnA8=
Subject key identifier: 5A:0B:EB:B8:67:65:DF:C8:1B:00:B2:F6:5F:18:B0:04:79:AD:91:3B
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 0194BCE0AC4A87B75D18FE814EC173E2E3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: cRAAzm69rK1x2VXcQUJ_DYkM5W0.roa (hash: QMURLhpiB70UAjkJMuKHXFWklTM0r8n8ucBI0KCwX8g=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: 3oERGN1231t/kIItIFGkz84GZRjTqi8v10Pj6aUhbCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ac:4a:87:b7:5d:18:fe:81:4e:c1:73:e2:e3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=5a0bebb86765dfc81b00b2f65f18b00479ad913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:08:89:77:40:90:bb:95:23:ec:d9:56:7c:
71:74:5b:bf:6c:32:10:5e:48:f9:8a:dc:94:4c:dd:
71:89:17:a3:e8:fb:92:f4:a5:91:28:a1:8c:e9:d3:
59:8d:62:12:cb:b4:2b:ee:8f:3b:1f:81:df:b0:c7:
cb:29:63:be:6d:62:82:7e:2d:c2:d0:7a:1e:c4:cd:
e0:82:89:3e:74:0d:7b:62:58:48:a4:f1:aa:8d:53:
6c:b3:32:b4:3f:ac:d4:da:f2:3e:b3:2a:07:1d:2b:
fd:81:e4:28:14:b3:bd:5f:03:1f:17:02:5d:ad:d3:
ef:8d:e9:3b:62:81:14:48:0a:b4:25:69:a1:25:bc:
f7:76:32:a2:4b:25:a5:64:b4:33:2b:6c:e0:41:15:
44:c0:f1:d3:25:9d:4a:9f:d1:fb:f8:a4:d7:18:f7:
95:3c:2f:64:04:75:53:78:24:ed:97:32:a6:8d:86:
76:77:66:3b:a4:a8:56:41:44:ef:94:ea:ae:93:b9:
26:1c:09:41:4a:75:e4:e7:ef:1e:bb:f1:13:84:64:
14:e8:0d:44:16:56:7e:26:b5:e6:5b:99:69:a9:05:
a1:82:a7:5c:50:b5:e6:ba:86:a9:b9:9e:ad:13:df:
52:b0:01:55:66:2e:73:64:13:a2:13:a9:e6:e9:57:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0B:EB:B8:67:65:DF:C8:1B:00:B2:F6:5F:18:B0:04:79:AD:91:3B
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:39:a5:ca:47:b3:f5:ba:1e:7e:8d:77:6f:f5:c6:14:c8:1d:
eb:84:ec:3d:20:a8:69:6c:f9:96:9a:82:58:dc:d8:9b:ca:fd:
a4:9d:79:40:23:27:66:2e:a0:13:a7:5b:1c:e5:2a:be:e4:8a:
b8:d4:b6:8d:c6:9c:a0:71:5c:24:12:12:fb:81:db:c8:69:64:
01:f9:42:df:e3:62:41:64:c9:3b:c8:9e:62:f5:65:01:5e:47:
10:6e:df:77:12:29:ae:f6:8c:fa:9a:ca:7b:4d:90:7f:85:4e:
77:24:33:85:ca:0d:31:3b:53:c9:0f:30:27:38:35:aa:be:9e:
b4:f8:ae:d2:f8:64:cc:03:97:2f:09:14:af:6d:53:b8:aa:3d:
f8:96:ee:5a:c5:22:9a:82:ce:0e:83:12:81:97:71:96:d7:a8:
e5:ee:8a:77:7f:11:ff:0f:9e:26:da:fa:6f:2c:49:e7:ee:7a:
c1:aa:e5:25:04:26:56:9d:3b:4b:59:d9:97:ae:3f:cf:31:44:
64:f2:a4:8d:c6:10:ed:ad:29:c4:26:87:7f:53:76:10:a0:c0:
c8:ed:dd:2e:ba:d4:6b:58:42:9f:00:01:5d:55:ae:7b:a9:71:
74:73:75:48:26:6a:b4:eb:3f:09:cc:89:33:27:db:84:31:99:
86:45:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:05 2025 by rpki-client