Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: hAzyESiJNzVc6jNL3mMdzsH78gxNs2xD1QW4Af+nNoY=
Subject key identifier: 6C:FA:FD:96:45:FC:D0:3A:BB:0C:CE:FC:25:1A:3F:57:84:B7:E2:2C
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 0194BCA991D75DF76F69AEF3C5C68569BE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1067
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: yC5UnujZCq0ly6mnHnBzZPD7hOeawJLIEYqAlhy7dEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:d7:5d:f7:6f:69:ae:f3:c5:c6:85:69:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=6cfafd9645fcd03abb0ccefc251a3f5784b7e22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:48:27:a4:f3:58:5d:cc:14:aa:69:de:d1:
ec:96:77:c1:43:43:32:81:73:e3:ce:95:2f:2e:7e:
8e:e4:c2:ac:45:a4:1d:29:b1:52:a4:d7:b3:6e:4b:
03:a9:fe:d8:68:7a:16:b8:75:ca:d5:09:06:c7:c6:
ae:f9:f5:34:49:c0:ca:64:58:2a:b4:8c:12:d5:f1:
2f:65:48:7e:71:40:88:cc:28:fd:8e:b5:25:f7:9d:
e3:25:e4:1a:84:53:3c:40:9c:36:f1:00:e3:a9:37:
18:c3:f4:07:37:50:e1:ad:9d:db:4c:d3:21:77:70:
4a:1b:0e:2d:42:16:fb:7d:b3:9d:3f:ae:a1:74:78:
05:83:7e:39:32:14:f7:9d:ed:17:0e:8e:65:c7:18:
96:2e:a4:55:3b:4a:4a:91:96:4c:ce:28:a7:5f:6c:
ec:03:07:9a:06:e7:bc:ad:70:d0:f9:8d:ee:82:4e:
bf:dd:56:19:3b:2d:30:34:09:74:2a:74:88:0b:9c:
6a:1a:c9:2c:52:77:59:dc:0f:15:0b:88:eb:51:c2:
5c:46:62:7a:92:4a:f2:89:db:56:5f:0e:5d:a9:a4:
a3:d4:8f:cd:de:05:0f:2e:7f:2c:58:47:7c:e4:90:
55:f7:c5:4a:b6:08:91:41:ba:b1:a1:72:b4:66:d3:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FA:FD:96:45:FC:D0:3A:BB:0C:CE:FC:25:1A:3F:57:84:B7:E2:2C
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:96:4d:da:08:6a:01:32:1a:02:3f:bc:a1:57:a3:74:f9:cc:
1b:09:3a:2f:8c:9c:d4:3d:b0:86:17:fc:c8:b0:5d:be:57:78:
13:7e:28:a1:3a:ba:fa:64:7d:da:44:dd:4a:6f:ba:3e:e6:d0:
9f:4d:c5:1d:4b:da:dc:c0:62:8b:4f:f0:da:d5:fd:c0:1f:72:
9b:72:95:2f:55:af:8a:f9:6d:51:8b:23:95:e1:50:b1:fa:80:
b9:91:29:66:cf:cf:d5:40:43:cd:2c:f2:fa:4b:24:50:a9:f5:
7b:18:f6:dd:91:84:14:30:c1:38:f8:55:eb:9f:24:dc:9d:c2:
34:73:d2:35:42:47:25:90:7f:7b:93:de:be:47:99:71:b3:6c:
f6:9f:32:8a:93:8c:60:1f:24:6a:f4:cd:26:fb:55:94:1b:83:
35:c7:21:30:53:20:18:0f:68:8b:ef:f9:0f:7c:ca:73:c4:2f:
6a:4a:aa:77:88:d9:ad:e4:18:14:58:ee:e0:6e:1e:f9:2c:01:
e7:87:6f:05:18:b1:42:cb:36:26:9c:2d:86:15:53:12:46:26:
5c:0f:1d:90:c6:60:5b:fc:a8:a9:5b:fa:e3:fd:20:e5:94:14:
15:7f:91:a6:7c:1c:e6:66:9d:26:9d:92:a3:f4:ea:42:87:0c:
4a:00:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:58 2025 by rpki-client