Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier: MaPUPpFsTKK9uHPiMiIF7RPmnBGrZ+EY0IczqshXhCM=
Subject key identifier: 5B:53:8D:57:9A:31:02:6E:66:15:BD:F4:7C:CA:8E:E7:65:7B:9D:25
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial: 0194BD4E4E9526E7988368E5E84D5C76E0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: MkQvoJwG/xxthTNjz0nGBbLcksL21vDKwCaEqyQzA+k=)
2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4e:95:26:e7:98:83:68:e5:e8:4d:5c:76:e0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=5b538d579a31026e6615bdf47cca8ee7657b9d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:7d:f9:4e:79:77:27:d8:f3:75:3e:58:34:
10:76:73:d6:a2:5d:ea:9c:17:fd:90:cc:67:5b:90:
87:5e:78:34:14:da:a1:d9:a2:45:22:8d:37:9b:1c:
1e:f0:0d:8a:e3:59:13:ed:bf:eb:78:e4:6c:ca:aa:
f3:f4:33:34:c8:bd:16:5c:c1:18:1a:83:71:b4:6b:
c4:da:67:03:c3:3e:0a:79:11:ef:bb:50:04:5d:46:
55:88:22:ad:4a:88:e6:82:1e:91:02:a1:2c:10:ce:
5f:63:8a:13:62:60:64:db:03:c5:dd:a9:bf:c2:07:
e1:a7:f9:33:2a:89:0e:97:84:f4:d3:a6:48:89:26:
33:56:11:af:8f:18:27:a8:fa:5b:14:16:52:2d:82:
fb:aa:27:e7:e1:05:05:55:de:5c:ba:8d:f5:2a:f5:
cf:45:41:db:38:0c:1f:8c:bc:42:52:61:33:d5:9c:
66:f3:d5:19:ff:ae:80:4d:72:d2:ed:b6:22:96:98:
64:37:8f:47:32:5f:b5:e1:69:08:b6:46:98:79:99:
1f:ae:07:47:44:a6:93:3a:a0:77:22:6e:22:0f:01:
ef:61:34:fd:aa:02:61:68:42:a3:8e:38:8c:74:4b:
5e:13:28:c4:8f:d9:69:aa:40:dc:d1:7a:54:8a:e8:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:8D:57:9A:31:02:6E:66:15:BD:F4:7C:CA:8E:E7:65:7B:9D:25
X509v3 Authority Key Identifier:
keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cf:2b:fa:fe:ca:4e:9a:ff:41:4e:7c:8f:ca:d0:52:24:3c:
61:eb:06:d5:8f:a4:b6:87:d6:d1:19:c2:e1:0a:a1:72:30:81:
46:88:6c:da:22:87:8a:24:02:66:78:e7:79:42:e8:17:3f:d0:
c2:53:61:71:e5:e9:4e:4c:3c:e5:32:78:96:1f:64:ec:cb:88:
8c:62:21:4d:9a:b9:6d:d2:49:c5:a4:2f:d8:5e:d4:79:7f:d1:
6f:49:82:f5:0c:18:48:96:6a:fb:42:81:e7:a7:38:e5:b9:18:
b4:9e:25:9e:0c:6b:10:41:a4:cf:90:2a:9e:24:f4:30:94:cf:
ec:4d:6e:58:fd:a9:84:90:f2:00:96:5f:eb:d1:26:e4:09:84:
97:80:42:a0:89:e7:2d:98:5a:46:eb:69:a0:15:c4:18:ab:cf:
ed:dd:9b:64:d7:7b:d6:f2:b1:29:7b:03:77:18:46:2f:2d:4e:
c4:3c:dd:22:6e:f7:2a:a2:05:e1:9e:7e:f1:61:9e:40:b1:ae:
36:f8:f0:8a:e3:6e:1f:03:48:2d:78:53:d2:59:87:d3:26:9e:
3f:85:91:ff:48:a6:18:e0:17:1e:a3:80:71:52:67:73:b9:1b:
10:e6:d3:ef:a5:60:ae:52:ec:00:e6:7c:76:a7:72:11:fc:6d:
f8:87:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:52 2025 by rpki-client