Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: sP2LoXpIvmaMsqig8uxdxCsJ4E6sxnLvIl1AGOu+NVM=
Subject key identifier: 63:14:08:0B:8A:D4:DB:4E:02:36:CB:88:74:AF:7D:93:DA:D1:A0:90
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 0194BD17EB1BFEBF5866372A748BA810EAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 0E05
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: JsG/assAW0TG7Aigw3xy40bmHFw5nUNpFRvIhsSMB54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:1b:fe:bf:58:66:37:2a:74:8b:a8:10:ea:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=6314080b8ad4db4e0236cb8874af7d93dad1a090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:ce:56:1c:54:33:c0:a4:a3:56:ac:0d:bb:
27:7e:ee:47:87:65:ef:d9:fd:26:73:2d:8f:c3:c1:
a7:ad:04:8d:5f:47:40:e0:61:c5:75:ff:72:07:cb:
b1:89:d1:c8:28:00:a1:fa:0c:5b:5b:00:e4:a2:e4:
cd:22:bc:49:e1:2e:cc:78:33:89:db:a4:f5:0e:85:
6b:b1:7e:f3:c5:a9:74:6d:3b:ce:69:38:af:80:f1:
3f:d0:3f:31:6c:52:be:c7:3f:12:2d:e3:3b:4d:7e:
8e:9d:9e:5f:b2:23:e9:70:66:e1:9b:2e:ea:76:9e:
f6:61:4f:c1:6c:05:0c:c7:d9:b0:07:c3:ce:de:00:
97:27:b4:56:7f:4c:ec:05:10:ae:41:bd:fb:c2:51:
a7:8d:e6:61:42:b7:ee:e7:83:52:5e:4d:5b:5e:f3:
c3:7e:cc:f4:47:f9:c6:b5:07:cd:f8:85:63:88:10:
cc:52:4d:db:11:bc:eb:53:70:3b:c1:e6:ff:e1:8a:
e9:a5:a0:50:77:2e:2b:56:ed:5c:76:3f:1e:68:cc:
0c:2c:dc:d9:4b:68:20:68:bb:d0:fe:38:b0:bd:1e:
74:10:92:1f:76:ef:a7:d8:97:e9:ad:48:a6:0f:7a:
48:58:d2:89:1b:03:76:fb:82:14:23:5e:69:77:bc:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:08:0B:8A:D4:DB:4E:02:36:CB:88:74:AF:7D:93:DA:D1:A0:90
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:29:e9:a6:8c:86:da:27:a1:e2:cd:8a:a0:66:df:b3:b2:
95:c5:17:f8:6b:39:bc:bd:22:47:6a:24:cf:99:a5:5e:0c:90:
bf:0d:33:9c:5c:80:c0:25:6a:f0:49:59:be:bc:c9:45:91:fd:
fc:be:80:24:30:49:e4:45:9b:75:03:e9:da:6a:56:f3:f3:a6:
34:66:89:27:db:f1:cd:8b:40:31:f7:76:62:96:c1:05:ad:be:
61:11:c2:8b:47:88:52:82:7b:8a:c6:ed:77:36:6d:ac:c0:db:
fb:f1:07:ef:d9:ed:ab:3c:81:02:a3:ad:3e:2c:72:2f:45:d7:
90:4c:55:69:6e:6c:60:f3:28:d6:c8:9a:7c:fc:d8:00:fa:11:
61:dc:b1:4c:37:b6:74:a9:78:81:e3:86:f5:92:0f:cb:bc:58:
24:ef:cd:ac:a5:b4:67:35:bd:18:e3:d4:79:77:1a:74:30:14:
da:b6:50:41:63:3c:90:dd:08:7f:c6:6f:0b:a9:b6:4c:d5:31:
f1:af:14:f2:3d:78:6e:32:1c:76:9e:ae:4e:5e:db:1b:9c:98:
15:28:1a:1f:d4:02:61:76:2c:d5:b2:53:d8:db:93:85:a1:46:
10:7e:cf:c0:26:34:19:7f:6e:b2:f1:30:bc:95:c9:d0:12:8d:
e7:8f:9f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:55 2025 by rpki-client