Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
File: stCgxoogOf8MpRQCQRUnHIoEZgg.mft (raw, json)
Hash identifier: Q4AzIwH6WgKdyI+gLgNzBPTmERe7uBtg//s6Ip37wS8=
Subject key identifier: 5A:3C:C3:99:82:6A:16:DC:F4:50:EF:6E:61:9C:CA:2D:1D:3C:06:A8
Authority key identifier: B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
Certificate issuer: /CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Certificate serial: 0194BD4E6C62E2FE4472B4597CE5FB338B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 98pSG03PsWjsaovooO14-BTQ9Vo.roa (hash: Nos0vMcOhKzLe90FJjKrPfa+9LXdDpzz5DlngxI3jBk=)
2: stCgxoogOf8MpRQCQRUnHIoEZgg.crl (hash: inb4DSwQTe4qOvzYXfSRx98pvZ7I+fLcFShfWfoFN7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:62:e2:fe:44:72:b4:59:7c:e5:fb:33:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=5a3cc399826a16dcf450ef6e619cca2d1d3c06a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:fa:b2:b8:c5:10:3b:fb:96:23:b6:a9:94:
17:05:fd:33:77:25:6c:a1:ee:eb:44:96:56:c4:54:
d9:2b:1f:ff:e8:30:e6:b3:41:f9:ad:8c:fd:4d:ce:
7b:27:81:23:ec:a1:49:a9:b0:da:7b:e7:6c:f0:04:
0e:cc:5c:a4:07:12:fd:5b:80:04:2e:2f:fd:28:4a:
ef:fc:fc:dd:6d:e8:76:a8:fe:54:14:fb:04:b8:24:
e7:7d:5a:55:c2:88:43:bb:b9:73:aa:8a:de:7f:0c:
e9:aa:c0:63:1d:35:c8:5e:1c:ea:24:dc:cf:9a:68:
31:a5:a6:6f:ae:3b:7e:59:de:36:c5:e7:86:b3:0b:
10:28:c5:22:4e:43:f9:e8:49:23:df:83:32:ae:86:
17:87:d1:75:6d:c4:33:1a:9a:8a:8a:29:11:7f:f3:
6e:31:e4:e7:da:0b:ca:d6:6b:83:75:81:79:c6:5b:
cc:9c:3a:7e:b2:53:fb:9d:8c:2f:29:c4:9e:39:68:
ec:08:fa:cc:8f:56:27:1b:bb:eb:97:c6:d1:3e:02:
34:54:a5:79:63:ca:31:4b:dc:6b:bd:6f:1b:6d:18:
f1:ab:f0:19:1e:e3:bb:0f:53:61:8f:60:53:f2:00:
ff:f2:65:56:71:03:07:53:5f:b1:d6:85:7f:b1:bd:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:C3:99:82:6A:16:DC:F4:50:EF:6E:61:9C:CA:2D:1D:3C:06:A8
X509v3 Authority Key Identifier:
keyid:B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:29:6a:35:2b:92:39:45:49:4a:5f:83:f8:08:51:4c:d8:2b:
09:f7:50:61:d5:50:75:8d:6a:91:6f:e3:97:f8:11:58:a0:31:
b4:45:58:ec:3c:09:06:26:1c:83:b8:58:04:d1:5d:99:60:b1:
74:2d:e1:49:41:fd:9f:ec:40:18:6e:61:d4:88:0b:14:d9:89:
d5:0d:84:7d:b3:91:d9:e9:69:f8:4a:a3:85:39:b5:51:e0:c8:
d3:fa:50:9f:fb:3c:4c:a3:52:b3:f2:30:06:15:03:bd:9e:df:
a0:b6:58:88:9d:b9:7b:03:06:10:5b:40:4d:c3:15:6d:9b:80:
78:7a:65:ef:0b:a9:8e:e8:77:50:cb:9b:b8:b5:83:61:a6:91:
ec:82:7c:f2:54:89:7e:08:37:30:79:01:04:a7:87:ef:21:d1:
29:40:c6:45:34:70:bc:27:81:61:4f:87:3b:73:5b:e9:b8:20:
5a:d1:a0:33:15:25:21:d2:dc:09:17:1f:8d:5b:71:c3:1f:bb:
5e:1e:ce:a3:b0:34:a3:fb:0f:c2:ae:e9:a1:a1:22:1c:0b:c4:
0d:8c:a4:3a:4d:c3:f2:f9:fa:4c:ec:df:48:a0:5b:19:75:9a:
35:15:b6:54:03:77:e4:76:bc:af:66:4e:4c:89:d3:25:98:c0:
2c:41:92:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tmxi4v5EcrRZfOX7M4uCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDBhMGM2OGEyMDM5ZmYwY2E1MTQwMjQxMTUyNzFjOGEw
NDY2MDgwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
Eyg1YTNjYzM5OTgyNmExNmRjZjQ1MGVmNmU2MTljY2EyZDFkM2MwNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRj6srjFEDv7liO2qZQXBf0zdyVs
oe7rRJZWxFTZKx//6DDms0H5rYz9Tc57J4Ej7KFJqbDae+ds8AQOzFykBxL9W4AE
Li/9KErv/Pzdbeh2qP5UFPsEuCTnfVpVwohDu7lzqorefwzpqsBjHTXIXhzqJNzP
mmgxpaZvrjt+Wd42xeeGswsQKMUiTkP56Ekj34MyroYXh9F1bcQzGpqKiikRf/Nu
MeTn2gvK1muDdYF5xlvMnDp+slP7nYwvKcSeOWjsCPrMj1YnG7vrl8bRPgI0VKV5
Y8oxS9xrvW8bbRjxq/AZHuO7D1Nhj2BT8gD/8mVWcQMHU1+x1oV/sb2uXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo8w5mCahbc9FDvbmGcyi0dPAaoMB8GA1UdIwQY
MBaAFLLQoMaKIDn/DKUUAkEVJxyKBGYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RDZ3hvb2dPZjhNcFJRQ1FSVW5ISW9FWmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iM2QwZDctZTEwYS00ODZmLTg4NWQt
NDFhYjdjODcyZmVhLzEvc3RDZ3hvb2dPZjhNcFJRQ1FSVW5ISW9FWmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iM2QwZDctZTEwYS00ODZmLTg4NWQtNDFhYjdjODcyZmVh
LzEvc3RDZ3hvb2dPZjhNcFJRQ1FSVW5ISW9FWmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnClqNSuS
OUVJSl+D+AhRTNgrCfdQYdVQdY1qkW/jl/gRWKAxtEVY7DwJBiYcg7hYBNFdmWCx
dC3hSUH9n+xAGG5h1IgLFNmJ1Q2EfbOR2elp+EqjhTm1UeDI0/pQn/s8TKNSs/Iw
BhUDvZ7foLZYiJ25ewMGEFtATcMVbZuAeHpl7wupjuh3UMubuLWDYaaR7IJ88lSJ
fgg3MHkBBKeH7yHRKUDGRTRwvCeBYU+HO3Nb6bggWtGgMxUlIdLcCRcfjVtxwx+7
Xh7Oo7A0o/sPwq7poaEiHAvEDYykOk3D8vn6TOzfSKBbGXWaNRW2VAN35Ha8r2ZO
TInTJZjALEGS1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:04 2025 by rpki-client