Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
File: sTFfExaKIog9oEuECAZgc7Hz8Nw.mft (raw, json)
Hash identifier: YZcuXriaVhu4ohcyd6IMj7EgpUws4d+3AB0akHwlwPw=
Subject key identifier: C5:50:60:3F:E4:3C:9D:BE:82:9B:8E:CD:1C:CC:47:2B:61:71:FA:2C
Authority key identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
Certificate issuer: /CN=b1315f13168a22883da04b8408066073b1f3f0dc
Certificate serial: 0194BBCE97BD32FF77AE8510EF002505C7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: sTFfExaKIog9oEuECAZgc7Hz8Nw.crl (hash: EGuUh28Pwg53ZBOQM5k6RpefrFCc0U6ZgeNnl9LYbmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:97:bd:32:ff:77:ae:85:10:ef:00:25:05:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1315f13168a22883da04b8408066073b1f3f0dc
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=c550603fe43c9dbe829b8ecd1ccc472b6171fa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:7b:3a:be:0b:71:13:25:2d:c6:10:28:ec:
53:3f:e2:9b:54:8a:76:cf:4b:7c:a6:b2:7d:68:f9:
c2:aa:30:66:23:ca:41:0f:c2:4e:18:77:c5:2b:86:
9f:95:2c:4e:9a:82:98:f6:41:2b:7b:da:75:c5:4f:
c7:76:1d:47:36:73:f0:f3:10:c0:aa:8d:1e:cd:01:
f8:8d:a2:13:7e:3a:38:e0:8d:ca:2d:2b:62:ce:1d:
10:88:48:74:04:db:5a:4d:3d:89:b5:85:18:a8:f0:
34:86:dd:9b:6f:dd:78:99:b1:cd:de:ab:10:e7:0e:
ab:de:d2:b0:5d:13:2e:3d:47:8c:90:a1:40:ac:e5:
98:36:1f:42:ce:7b:8a:5e:bf:09:2e:9d:0d:ce:e7:
1f:75:36:f4:5a:f0:59:ed:60:3a:20:c5:5d:51:f2:
5a:b8:ed:9f:79:b6:8c:56:7a:b2:ae:5a:d3:2d:be:
8e:d7:9d:6f:b3:4b:1f:f6:fd:c4:48:a1:f3:e3:ce:
80:f4:c3:a5:da:cd:20:89:66:45:b1:01:23:ba:2d:
86:9e:d2:c2:82:c5:e2:d2:e0:5e:c9:a4:b7:3d:a4:
df:25:87:85:6d:21:07:ab:a8:28:9d:9c:1e:ed:b6:
cc:71:ec:72:d6:29:72:0b:bb:8e:e7:f8:fb:ff:d7:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:50:60:3F:E4:3C:9D:BE:82:9B:8E:CD:1C:CC:47:2B:61:71:FA:2C
X509v3 Authority Key Identifier:
keyid:B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f4:00:31:dd:00:9f:59:39:75:8d:11:5c:92:32:e4:87:23:
63:f8:a5:fe:93:14:e8:8f:e2:24:f5:8f:78:24:3d:a0:2d:82:
01:14:ac:d9:72:db:9e:7d:40:c8:68:f3:eb:3a:af:b4:be:13:
cd:39:08:68:ae:e8:e5:1e:56:c3:fe:1e:8e:c9:e8:77:93:e4:
cd:e2:3b:86:3c:d3:2c:7b:4a:a9:aa:7e:c0:89:7f:bc:d8:b1:
d5:5b:fd:d6:d9:e0:0a:ba:b4:e6:e8:8d:c7:49:5a:80:4a:d0:
e2:a8:8b:92:2b:89:ec:39:03:ea:f2:23:7b:61:ec:79:c7:db:
82:de:9b:52:76:c8:e4:2e:b6:47:35:a0:bd:bb:96:f3:93:01:
66:18:8d:e4:60:a7:fd:d0:86:c9:7b:dc:8a:51:73:4e:42:17:
f2:df:4d:fb:0f:2f:d3:ba:4a:4c:2c:c3:4b:62:9b:ff:96:df:
25:48:f6:7c:65:4b:f8:b5:97:0f:39:ff:0e:88:0f:5b:d8:e4:
f0:be:ad:c6:ac:29:e2:c1:f9:27:a8:fa:13:b4:66:18:3e:0f:
9b:57:0c:6e:b1:a2:6f:d4:13:dc:7f:31:f7:f8:dd:7d:8c:56:
1d:f0:84:37:b1:62:1c:4f:1c:06:e3:56:1a:4a:09:2f:a3:8b:
4a:36:e7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:31 2025 by rpki-client