Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
File: StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json)
Hash identifier: ZSFaU9curUtuY9hCftVp+1kYBEZI3jN9BHF+0vJzS8c=
Subject key identifier: 9F:E2:D2:E5:F1:04:EB:00:CF:53:4A:16:4D:F2:D8:4A:A1:D0:74:73
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial: 0194BD176327CA14894F4C86F62A977FE2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
Manifest number: 10D7
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: SHXTlexCU640W6zbYxhCmQn8Cw4.roa (hash: k2ku6jDV9cI0tnwN43DyJg87QMwSJe7N2AG8yOiDsPE=)
2: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: 74Ih2yL4Gl00iY9BS/UnQVtCwUyX5PF4r6YUmO+EJoQ=)
3: TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa (hash: wGkqaR7oIjPHLb7cXn0PbtIJ1WFfuKuRjd0OcbETY00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:63:27:ca:14:89:4f:4c:86:f6:2a:97:7f:e2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=9fe2d2e5f104eb00cf534a164df2d84aa1d07473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:d9:1f:71:eb:10:e7:fc:dd:31:80:a0:d4:
5b:65:3d:5e:3e:a4:07:4b:7f:7f:50:9c:50:9c:8e:
70:61:5d:43:68:a8:64:38:1c:e5:50:b9:96:95:cf:
72:bd:9c:10:13:73:3f:4b:3b:d2:41:f7:e3:56:96:
37:cc:ad:09:f3:1b:11:b5:c1:80:9b:93:16:98:fa:
8f:41:da:17:e3:f4:21:ae:55:1d:e1:59:3d:86:49:
17:d8:c3:1d:c5:f0:4b:9a:c0:29:42:aa:4f:c5:ac:
8e:e9:20:0b:38:13:05:20:95:bb:68:21:20:ef:26:
ed:07:e1:f1:ee:c4:87:18:d2:79:4c:6f:7d:ad:a6:
6a:a7:f2:3c:d7:85:c1:a8:bd:0f:85:ef:fc:a5:c9:
c2:25:e8:67:72:57:16:fb:1e:df:f9:e4:ff:47:69:
3c:53:29:05:fb:10:a0:8f:dd:d4:d1:5a:9a:c8:26:
07:ff:c4:3c:ca:d8:e6:30:fe:0a:a0:03:8f:9b:30:
69:29:d5:2b:2d:b1:57:18:98:4a:61:e1:dc:f4:ad:
09:42:2a:74:2c:ca:09:d2:9d:4a:a8:bd:5d:4a:2b:
97:dc:d1:98:a1:64:e5:5e:0b:61:3f:a2:d9:fe:64:
7d:32:30:ab:6a:3b:eb:98:3b:2e:ce:5d:42:35:8f:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:D2:E5:F1:04:EB:00:CF:53:4A:16:4D:F2:D8:4A:A1:D0:74:73
X509v3 Authority Key Identifier:
keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:58:3c:85:99:31:b0:3a:4a:30:9f:15:8b:1c:ec:73:e4:42:
88:7a:98:8a:32:7a:5b:c1:a5:02:af:44:7c:d6:64:78:b6:fb:
aa:c0:05:af:23:a8:bd:30:1c:8e:63:b2:21:66:c3:3b:0e:31:
57:41:1a:71:e8:12:6f:8c:bc:aa:55:68:e8:f7:8d:f5:e9:ec:
de:a3:aa:1c:ca:f0:05:dd:f4:b2:ce:44:4e:15:3e:ce:6a:7d:
61:d5:21:ce:31:b5:60:28:3b:70:e2:28:09:8d:a9:eb:65:68:
b6:5d:98:6d:11:79:34:f1:b6:f4:67:2a:73:4b:41:37:a4:6c:
57:b1:06:bd:b7:bb:b4:f5:ac:34:d6:61:6c:86:9c:e9:9e:3b:
2a:d7:5d:01:7f:de:30:39:99:f6:17:17:90:ff:e0:aa:88:46:
1c:a6:47:fd:15:3e:67:71:b8:1d:57:3f:ef:a1:be:bb:c1:8c:
34:97:5e:55:6d:e0:54:d5:c9:8f:00:06:12:d8:5b:53:0f:24:
95:1f:dc:48:3a:09:cf:d7:bd:03:8e:8c:69:6e:22:6d:96:4e:
dc:22:52:bb:03:45:91:94:31:b6:b1:94:c9:e1:9d:2f:d1:aa:
14:d5:ef:fe:b2:ba:e1:82:b2:19:c1:17:66:ee:41:c6:68:89:
d6:be:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:26 2025 by rpki-client