Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
File: 0stdGBr-pp854XESWTvksA5YS00.mft (raw, json)
Hash identifier: n0vHMoMMGd0eGF9k3U1OkNEOC+IczEyPL4ClGS5GOVo=
Subject key identifier: 06:54:0D:7C:C9:23:2C:E8:76:B1:65:45:8D:C9:6F:C9:D3:DE:AD:66
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 0194BCE0A14E5DA10E60AC079B29A74EBAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
Manifest number: 0297
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: befaCvjKiHbMFn9f/9gp9r/Feaq53cMZVLCHrq50jv0=)
2: DjD9dQKu2fp9cHrAn1sIWGhC488.roa (hash: fAPGT8GWJz86zGyzRAQmnMcTrszvTZhO+N/oXftz62E=)
3: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (hash: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a1:4e:5d:a1:0e:60:ac:07:9b:29:a7:4e:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=06540d7cc9232ce876b165458dc96fc9d3dead66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:23:7f:30:d5:58:1c:12:77:31:f6:bd:15:
c8:92:b2:6b:7f:e4:87:a6:4e:73:4e:41:5e:d9:3e:
d2:8a:d3:5e:d9:c2:4c:4b:0b:dc:35:0d:6c:3d:81:
dd:ad:2d:a8:a5:ac:5f:6e:9c:d6:b0:fa:89:ce:5e:
53:2f:39:36:ea:93:a5:55:fe:75:f8:f1:27:52:ab:
13:63:de:31:6d:69:ab:7f:6c:85:24:e6:ab:13:fa:
f7:fc:83:ed:48:f2:c3:61:a4:44:8a:bb:1b:44:fb:
2e:05:48:3b:c5:86:6e:f9:df:a8:d9:8f:fe:23:58:
18:b0:5c:f0:e5:2c:9e:86:46:7f:b4:c4:1b:52:78:
96:bb:76:c1:41:3b:fc:39:6e:8b:a6:22:52:dc:65:
50:1c:1b:f3:df:6b:54:ee:b2:2a:65:f6:09:a2:22:
34:8d:c4:53:ef:2d:d7:cd:92:d3:54:7b:4c:0d:22:
fb:38:92:07:8d:78:ae:d0:f5:d0:10:93:2b:69:62:
03:a6:7c:66:34:91:f8:c9:34:ba:90:99:20:d6:f3:
31:bb:b3:9c:e7:a9:57:03:d1:0b:66:bf:5b:52:a0:
61:a6:82:b2:18:47:f4:3d:87:47:1c:09:02:6b:55:
29:5b:32:d1:ba:f0:b1:e6:44:9b:94:39:5c:f7:60:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:54:0D:7C:C9:23:2C:E8:76:B1:65:45:8D:C9:6F:C9:D3:DE:AD:66
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:21:89:eb:22:e8:d1:aa:68:0f:7c:5d:a8:81:df:51:7d:
ac:c5:9b:59:2c:cf:7a:e9:40:fb:60:34:36:78:1e:e6:38:40:
31:40:f4:99:d2:8d:25:c8:5d:1e:ed:99:5c:9f:f6:d8:38:03:
a3:07:bd:cf:02:8d:72:9f:58:f6:2c:c3:fd:9f:a4:9d:ca:9a:
73:1f:ba:42:d1:e4:38:bf:b0:77:fb:b2:f7:38:7e:84:3b:68:
4c:4d:05:bf:36:e2:ee:fd:41:11:e2:97:2a:cf:d6:b9:07:f1:
fe:14:5f:15:99:e3:b3:b5:60:7f:5a:97:47:7b:69:27:1e:71:
d2:57:3b:3d:33:74:4a:de:89:0f:98:1c:aa:f4:2b:d2:b8:20:
d3:36:26:45:9d:02:a7:07:15:3a:af:a1:b6:a5:a7:69:91:8c:
05:a9:f6:51:f2:06:70:4e:41:75:b1:6a:22:28:a0:01:ec:61:
68:f2:4d:17:86:29:e3:fc:9a:fa:4c:7a:0d:2c:a0:63:e7:df:
aa:4e:75:36:a2:4a:6c:69:4f:ef:4a:dd:7e:34:1a:33:53:f9:
7b:49:7f:15:a7:23:05:7f:84:96:81:02:1a:c7:8e:a5:8f:70:
d9:77:3f:8f:30:2f:ef:25:fd:42:bc:a4:29:e7:43:ac:4f:36:
17:7a:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:27 2025 by rpki-client