Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: G++4yhBGiNEbTYLp6dd6rZ1wVUgI+ktwAkZqosz+0yo=
Subject key identifier: DB:B8:CA:55:28:8B:4B:96:84:10:3D:FB:A4:26:84:86:76:34:08:6D
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 0194BCE0AE8402A53882E35F97E80B0A50BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: Rt1gtqsL3XGckE6ravfPMbXd82w.roa (hash: 2JwbGC82Puo98akTLN0YA0GBgvd3GFrPbqPDWMBfEo8=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: 56vypuX9SD17CPgD4tIZWs2Sd8/e2+JjWjDuZ25hmqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:84:02:a5:38:82:e3:5f:97:e8:0b:0a:50:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=dbb8ca55288b4b9684103dfba42684867634086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:6c:be:45:93:96:74:ed:0a:79:79:92:83:
f6:dc:79:7e:5e:83:68:ca:91:38:5c:a6:a8:9e:fa:
88:37:cc:38:05:6b:df:c9:66:9b:a7:b3:6a:3a:bb:
0a:6a:70:19:5d:c2:bc:72:dd:53:c9:65:6c:9a:51:
27:18:95:2e:62:ca:25:19:a5:49:66:8a:54:c0:cc:
af:50:3d:16:21:79:bc:7c:3d:9f:1b:b7:70:f3:1d:
b7:72:37:ba:57:fb:c2:34:21:54:2a:23:51:d3:03:
2f:10:b2:39:aa:7d:31:20:d1:21:fa:ef:a6:99:e2:
2d:71:89:6a:ce:bc:21:fe:90:0d:78:26:17:1b:c9:
71:9c:2a:d0:df:6f:91:60:60:2b:5a:89:97:72:01:
cf:16:91:fe:27:79:76:2c:5d:85:a6:6d:6c:5d:8c:
a5:0c:63:89:f8:76:7b:e2:80:7f:f1:78:f0:d1:55:
b6:ce:f5:ef:60:8f:e5:71:0c:4a:bf:67:0e:a1:24:
02:2f:65:26:6a:fc:52:ea:6c:71:72:be:81:32:99:
03:b6:1c:8d:f6:dc:22:2f:58:49:24:67:5d:42:57:
06:e0:e8:79:3d:8a:c8:f9:7d:e1:56:3d:07:11:b4:
ae:5e:ec:ae:74:11:5a:31:0e:67:55:38:04:0f:91:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B8:CA:55:28:8B:4B:96:84:10:3D:FB:A4:26:84:86:76:34:08:6D
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:48:4f:a3:3d:69:0d:76:8d:aa:ed:a8:30:50:81:d5:95:9f:
8c:59:d4:3e:50:61:6f:fd:d7:ea:dc:5f:b0:c5:9b:7a:ce:a5:
0d:28:1d:e8:e7:94:c0:f8:66:8b:71:81:f5:d4:c7:d9:5f:95:
28:5b:a6:3b:ab:f1:8a:b9:06:82:06:44:d9:c0:0f:61:b3:8b:
71:b0:4e:95:0d:11:de:64:5f:7c:8a:44:92:8f:27:07:46:cb:
1d:42:6e:5a:a5:8b:0a:cd:0c:c6:0a:a8:43:f0:43:66:5e:a1:
4b:81:c5:b9:ee:d4:62:df:66:b6:c4:9b:e0:6a:8b:bd:07:47:
87:2f:36:55:a4:3b:77:a9:1c:ee:99:5b:23:85:0b:2a:65:b8:
2b:51:51:17:b7:d7:e6:bb:2f:1d:82:0a:65:05:92:3d:a4:e5:
d8:62:cd:fc:57:a5:da:44:97:db:33:2c:e7:c1:c1:85:bf:0f:
26:3d:8e:f0:40:a0:96:d5:20:b9:0b:0c:59:a4:e2:6b:44:72:
9b:8a:73:5a:b4:6b:bb:77:77:cd:42:6a:74:e2:02:c7:1f:95:
fd:f2:a1:6e:07:f0:d9:ba:f4:b6:09:83:36:22:fa:52:71:53:
2d:b4:71:5e:a4:de:c9:79:26:31:d0:37:13:10:50:cd:e4:5c:
7a:7b:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:38 2025 by rpki-client