Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
File: stf5mYOKoWO_NE_GmRe7YNEv38M.mft (raw, json)
Hash identifier: M3P1ybtBs3+mS6L3KkDHM/UAK4/Ochn31cPHVPx6a20=
Subject key identifier: 20:A8:A5:C3:62:FE:17:55:97:AC:43:8B:F8:F5:A8:A0:2F:9B:53:68
Authority key identifier: B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
Certificate issuer: /CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Certificate serial: 0194BC04F5B06DA0E6616D56C803B21BD22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
Manifest number: 0F19
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: i-DPtzOhX1UrAwvJvp6e_VFBpfU.roa (hash: b0DJ4Ik9RBvNDvd/V/+wWQQR6BcIK0SHDpRuzhlzJ6o=)
2: stf5mYOKoWO_NE_GmRe7YNEv38M.crl (hash: 5GSHX5WjU20MQBOoGIyOEM9l/zDG23PNqA3p8Kdg2V8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f5:b0:6d:a0:e6:61:6d:56:c8:03:b2:1b:d2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=20a8a5c362fe175597ac438bf8f5a8a02f9b5368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:9d:3a:0e:68:09:c0:ee:48:bb:0e:a7:33:
fa:77:8f:fd:61:e6:14:b3:5e:77:6f:39:4f:08:47:
26:5e:92:0e:06:ee:c9:0d:93:f8:53:65:3b:ef:6a:
4e:99:bc:08:f3:49:be:01:59:0b:82:a2:b8:9a:98:
65:af:b6:69:31:4a:40:39:64:d8:44:c7:d4:08:e6:
ed:fb:ec:a0:d1:2e:41:08:f2:55:51:da:a0:8f:bb:
70:91:72:06:d0:16:c0:c5:87:a1:8e:29:c0:7d:7d:
49:a0:58:9a:26:d7:83:e3:e3:db:71:9d:f1:0f:fe:
f0:92:47:36:b5:9e:7e:75:d2:89:15:e8:cc:0f:20:
91:9e:3b:33:74:10:df:c5:a5:8a:a7:96:74:15:b2:
a9:6a:ee:e7:27:29:87:70:ee:b8:9a:ac:14:b2:8d:
1c:4e:d0:8a:41:26:cf:a4:25:97:88:c4:d4:2d:b8:
1b:54:d5:51:fd:55:07:a7:ae:ee:90:c2:f2:f2:59:
2c:00:1d:4d:ea:9c:79:34:4a:b8:41:2d:d2:3c:f5:
5f:d1:82:ee:c1:bb:10:bf:14:64:ca:93:95:58:00:
82:07:07:55:6f:6c:8b:8a:25:8f:9b:1f:4c:41:e9:
d9:6d:7e:12:c8:9f:83:83:56:b0:2f:dd:d6:fa:e1:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:A5:C3:62:FE:17:55:97:AC:43:8B:F8:F5:A8:A0:2F:9B:53:68
X509v3 Authority Key Identifier:
keyid:B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0c:ed:62:c6:2f:85:8f:2f:f6:eb:aa:19:06:b7:1f:9b:22:
c8:4b:de:98:a6:97:0a:52:b7:91:1f:20:b7:3a:cf:69:c4:4c:
af:93:9e:c4:40:56:91:d2:ab:01:d7:f3:08:e4:86:03:ef:b7:
cc:69:bf:d1:22:44:55:8f:25:07:e1:c1:71:cb:5d:bf:80:3e:
ad:ec:24:94:f3:17:ba:b7:74:ab:6b:31:ea:d5:22:23:21:e3:
68:e1:13:c2:9b:49:20:06:c4:56:54:5b:e5:25:f6:8f:1c:42:
60:74:ba:87:89:09:16:27:fc:4e:1f:2b:f1:a3:74:15:46:a2:
fd:3c:2d:c0:1d:e8:52:64:28:b3:c2:68:d8:9d:53:75:d9:9e:
d4:70:5d:d1:42:7d:49:11:0a:14:61:3a:c1:85:33:ef:9b:4c:
f0:db:d3:0f:36:62:81:c7:98:7f:a2:34:8d:3e:68:24:ff:07:
09:dd:bd:1e:c1:9c:45:78:93:39:0f:48:2f:15:c7:63:5e:85:
c8:03:fc:fa:8b:88:2b:d1:91:05:85:df:f2:fb:6e:75:aa:a0:
7b:4d:68:5e:e6:7f:cf:d3:3b:c2:18:9e:dd:39:93:ce:70:84:
52:5d:f8:17:ea:77:2f:d3:cc:2c:a2:5a:00:49:d6:9a:7b:27:
6b:4b:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:58 2025 by rpki-client