Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
File: StzxlnKWX1GxbYevqxsUkILmw-4.mft (raw, json)
Hash identifier: 47wogaS5NIXH7Ho2R/HxwBcPa/leeWFX4c3nBcQCJDI=
Subject key identifier: 57:45:D0:52:01:CC:5D:8A:B3:CF:DB:77:6E:16:DD:7E:88:6A:B5:32
Authority key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
Certificate issuer: /CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Certificate serial: 0194BCAA1000AD721F4514F891E294865131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: StzxlnKWX1GxbYevqxsUkILmw-4.crl (hash: i1mytKR4RNb2phQF5G4GebhdK1dDuNSmKxsFw7nwwgM=)
2: rGUQbl63n9K0Wn_57q9XL0tQAuA.roa (hash: vyvu3YaIjRy8oAh1PUr3JRdMW+KlCqlVTwrvF8kfQF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:10:00:ad:72:1f:45:14:f8:91:e2:94:86:51:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=5745d05201cc5d8ab3cfdb776e16dd7e886ab532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:4f:1f:9c:b9:12:f7:da:2f:3a:38:e6:ed:
e5:85:d4:cc:5b:de:1e:67:e0:47:f6:5b:0b:88:55:
0d:4a:d1:8a:70:ae:26:92:8b:63:a2:91:10:ba:77:
f6:61:42:9f:4f:ef:e6:b3:8e:48:a6:3d:bb:84:7a:
5f:e0:7d:f2:85:19:b3:ef:9a:90:85:3b:7f:d5:b3:
33:6f:1a:2f:ca:7c:4f:13:cc:01:6f:f6:de:2e:17:
dd:6b:6c:d6:81:a1:11:9b:ed:1e:52:4e:fe:af:4c:
8f:ff:3a:b9:4c:26:f5:df:27:79:83:d6:bc:56:ac:
28:6a:50:dd:b7:a9:33:5f:f6:4c:cc:47:8d:6a:26:
73:09:d4:85:31:d1:81:c4:22:ed:90:3e:fa:fe:a4:
11:36:d4:c0:9d:41:ed:f9:d6:ea:82:03:f3:9b:3e:
b1:5f:4c:52:7e:5c:4d:1b:05:61:6b:25:92:cb:b2:
47:52:2e:6f:b6:62:2d:aa:a8:de:d0:01:40:32:6d:
dd:09:6b:bc:50:19:c0:3a:b1:10:ab:ba:1f:3e:ac:
14:f1:13:42:e7:52:84:49:f9:44:ba:27:23:fb:2f:
eb:08:85:5b:54:76:80:46:fb:22:a8:2e:4b:37:b6:
0e:2e:2f:f5:d8:66:1c:2b:32:e4:c5:dd:f9:ce:de:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:45:D0:52:01:CC:5D:8A:B3:CF:DB:77:6E:16:DD:7E:88:6A:B5:32
X509v3 Authority Key Identifier:
keyid:4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d9:fb:07:0e:45:61:66:24:2b:7a:d9:10:38:07:29:01:24:
2c:d1:df:30:86:db:b0:eb:0f:aa:87:a9:ab:66:80:c5:31:84:
a1:87:43:64:31:d4:0e:19:25:83:73:a1:8f:3b:25:89:27:8a:
bd:15:34:e4:e9:e8:14:fe:28:64:df:dd:2e:67:9a:cb:d6:67:
b3:3c:6f:47:e3:83:31:d7:c9:0d:73:27:3d:09:3a:7f:fc:0b:
94:53:8b:4c:06:e6:96:c2:75:54:7a:a4:40:c5:0a:8b:1d:4e:
23:01:cc:55:4d:cc:2f:de:33:68:1a:9f:08:f8:4f:85:bb:47:
8a:d3:8c:0e:60:e9:32:ca:66:b5:4c:0a:c7:45:22:b5:1a:02:
c4:c9:42:a7:61:08:dc:c9:06:20:b8:ab:15:23:a2:fc:f9:c8:
6f:1f:34:b6:a7:94:65:9f:28:91:95:cb:22:33:01:b2:b9:e2:
90:48:f7:92:f8:ec:7b:92:cd:a9:97:a2:73:c1:55:4f:d5:a9:
60:81:45:e6:a2:fc:c0:16:9b:e1:1d:33:f3:14:0f:f3:5a:e1:
d9:46:3c:06:87:fa:3f:d1:a9:db:21:24:c8:02:fd:b3:46:6f:
66:bc:56:9d:de:ab:a6:9c:20:56:9b:ae:6e:cd:15:a5:5c:ea:
d1:24:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:33 2025 by rpki-client