Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: aXY2K+p257DL01bluYrWDbub/aNhmLJ+NfFUEFv6Yts=
Subject key identifier: D4:20:50:85:56:08:AD:CC:2E:76:AE:41:99:BE:E5:3F:CC:5F:97:61
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 0194BBCEAE4A877918DA0ACF7399007D47EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 0D03
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: 0Iz3YPj6/No0Mwi1pAk2GuYL9uKTBiaXqLQeUycWJ+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:4a:87:79:18:da:0a:cf:73:99:00:7d:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=d42050855608adcc2e76ae4199bee53fcc5f9761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:8f:e1:7c:65:b0:d7:6b:13:a4:c6:4a:dd:
7f:a5:e5:77:ec:93:3a:66:48:81:66:83:6b:c1:83:
73:b1:7f:33:57:7d:da:b0:24:20:47:99:8f:a0:dd:
e2:ad:1a:dd:9f:19:a2:ce:6a:32:d7:5d:a6:fb:4d:
f5:38:c9:04:ff:52:28:a8:93:5a:93:30:d8:60:7b:
7b:ea:27:5d:b5:a0:33:aa:68:22:8d:ca:2f:e9:31:
d2:a5:5b:26:f8:a7:71:ce:15:cf:89:ed:d7:6c:0c:
c9:14:67:59:51:fc:ff:f5:45:52:43:97:42:ea:02:
bc:a1:ba:8b:3c:0c:64:13:31:0d:69:e5:a1:61:46:
f2:0d:f1:50:c3:52:12:b4:19:d5:49:08:ea:41:49:
cc:2b:1f:e3:ed:31:50:e0:1a:d5:cb:0f:7d:6a:09:
74:75:9f:b0:e4:ab:42:1f:7d:1c:48:ad:4e:87:4b:
f8:9c:e7:3d:bb:0a:36:04:38:b9:eb:22:4d:b4:7d:
8f:ae:3a:8e:27:0e:25:23:f6:0d:ff:d5:62:9f:b5:
44:28:92:d5:ab:58:a6:00:d9:28:8d:54:55:c4:c6:
00:cd:1a:86:e0:35:e0:49:15:d1:ab:59:cc:48:ca:
6c:70:2d:14:3e:be:82:8a:51:63:68:f7:ee:e5:27:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:20:50:85:56:08:AD:CC:2E:76:AE:41:99:BE:E5:3F:CC:5F:97:61
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:29:bf:fd:cd:8d:31:76:1f:0d:5d:49:1e:cb:2c:69:5f:50:
f5:d3:14:df:a2:02:35:8f:0f:72:96:c9:64:74:28:71:2c:69:
b6:05:c7:67:fb:02:3c:11:56:c9:49:c0:60:1b:09:de:53:e8:
87:56:e3:b5:a0:38:c9:f2:be:df:9b:58:2d:e4:ca:4d:03:e7:
ba:ee:ab:ba:ab:b3:3d:a8:28:3d:b8:45:90:f1:6d:8a:1b:8d:
69:bf:d5:4e:86:6b:02:92:4b:3d:48:74:11:60:3b:9b:c4:57:
3e:14:ee:be:04:8f:66:ea:d3:a8:c4:64:4f:75:18:fa:01:7d:
c1:f9:c0:b8:a1:9b:78:08:7b:01:70:a1:fd:43:3b:6f:a2:fa:
e4:e3:2d:c4:71:5e:7c:c6:23:14:80:91:d7:33:99:e9:e5:ab:
0d:55:71:ef:06:ee:31:88:ba:38:25:17:de:0a:24:b6:b5:b9:
4d:8c:44:18:86:70:9f:ba:e0:00:37:ae:38:7c:ab:fb:93:22:
3d:0b:b8:48:a7:9a:7b:6b:dc:9d:b2:10:31:5c:18:47:27:1c:
60:b0:c0:2f:47:89:9a:4a:18:f7:63:77:84:de:84:e6:8c:79:
a6:30:c4:8e:ee:4f:63:df:c5:d9:cc:73:11:11:7e:a9:ea:9c:
77:28:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:11 2025 by rpki-client