Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: 4m6uvrf741uZisynEr6zT+y5M4pVb8zgV2kkYIDUVMI=
Subject key identifier: DF:BE:E4:84:09:AC:7A:93:47:F3:9C:4F:E7:3E:8E:D7:1F:41:D0:6C
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 0194BCE0AB594F9DB8AB615FD93867FF3980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 131A
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: dQDxd/ND1bjlzeytFaEme4b8vT+z+OsgxGbDSBAAb84=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:59:4f:9d:b8:ab:61:5f:d9:38:67:ff:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=dfbee48409ac7a9347f39c4fe73e8ed71f41d06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:3e:47:6c:06:b0:d6:0f:57:6a:65:1f:31:
71:63:97:28:2b:14:30:d3:30:88:bd:d8:19:83:f7:
05:dd:12:be:4a:0e:b3:c1:08:a3:6b:a3:6f:37:c3:
a3:97:0a:17:16:0a:9c:df:26:d4:dc:82:e1:9c:27:
c6:be:97:dc:3d:4d:59:b5:4f:91:75:8c:49:fe:7a:
8b:6f:a9:03:c4:6d:5f:01:ad:2a:d1:74:fa:c3:b5:
43:65:02:d1:60:1d:21:7a:d5:1d:50:56:0d:c4:b2:
94:92:ce:0b:4f:7b:71:4a:c7:a8:68:50:12:f0:74:
02:71:3e:b2:fc:5e:f6:e1:e8:99:ed:df:71:d6:49:
1f:12:d6:cf:9e:a3:5f:2e:1a:5f:f6:db:cc:d4:0c:
c7:17:27:01:af:f9:10:d9:85:2c:9c:66:b3:2a:db:
f6:2d:38:f3:fe:d6:e6:b6:0e:c0:62:67:65:4e:86:
9e:b4:f7:fe:b3:ac:e7:ca:af:b8:99:8d:a6:cd:1b:
e0:15:0a:80:eb:f1:d1:a0:d3:bd:e0:6c:4c:75:8f:
a2:c1:de:98:45:13:57:b9:24:ff:f2:f2:06:e6:a2:
7b:8f:27:9a:09:7f:0f:a9:eb:3f:37:3a:82:0f:7f:
ca:6a:86:83:67:30:63:a7:da:ba:f2:07:41:f4:0a:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BE:E4:84:09:AC:7A:93:47:F3:9C:4F:E7:3E:8E:D7:1F:41:D0:6C
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:39:1a:4b:89:f2:27:ad:09:bf:22:01:71:10:a2:18:75:
39:b3:b5:cf:76:f0:c2:e6:f6:77:3e:f5:c1:76:dc:c9:87:3b:
08:97:09:96:1e:5f:4d:97:88:29:38:37:a1:d0:9e:b8:09:38:
61:0a:ab:44:bd:bb:b9:7b:7f:a7:bb:cf:23:76:bf:53:72:f2:
32:18:4f:4e:7e:da:75:30:58:84:7d:85:bc:da:11:94:b0:f5:
d1:cb:88:bf:52:e3:10:c6:04:79:00:1c:65:77:16:c3:bc:0d:
e6:6c:fe:7f:27:d3:f2:f5:30:b9:19:ee:fd:93:db:10:0e:d9:
47:2c:9f:a5:7a:ab:a3:ba:fb:a5:bf:44:bf:89:0d:de:c0:42:
c4:a3:ac:e8:64:90:32:bf:f5:47:ad:02:82:86:cb:b0:d2:77:
00:c2:ae:5d:96:e0:74:2f:95:4b:ba:cc:d1:85:e5:4d:fa:b4:
08:7f:cc:79:d2:51:77:2a:3b:c0:34:b3:f1:00:0a:73:84:ef:
cf:c1:c4:48:ec:c5:6b:67:47:b1:01:cc:d7:f6:8d:2e:2f:e5:
69:c5:9c:b5:9e:0c:d9:eb:c0:d7:31:40:1c:94:a4:65:bd:e3:
37:e6:9d:65:41:a0:e9:1b:e8:72:94:85:0d:a1:ab:f6:67:91:
7b:8e:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:16 2025 by rpki-client