Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
File: st8A84zO2SGXmTB2yzaFvzK8Xmk.mft (raw, json)
Hash identifier: Xj8J0m4RPdbiNQtQ5keuqo4LRWB2Z00CU8Sd/lZ2ggs=
Subject key identifier: 69:92:21:CF:49:1D:55:9C:19:1D:AD:48:BC:14:8F:F1:FA:7C:66:E6
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial: 0194BC728F25E0F5CCC3E5D3A01687DA4DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
Manifest number: 0F93
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: gbTQ5TFLqYdv3bxMQXRQSRcMIoc.roa (hash: rJ5djAjgxTYzs8j0EQsFjkKUrs3CGg0sgiibLKW68Ck=)
2: st8A84zO2SGXmTB2yzaFvzK8Xmk.crl (hash: Z9uOLSNShA45JxojszEQt1EvoRrxUDMX4ThtdanYacI=)
3: wu3L_A3dWSKUeaU4lbLH5tQFGhs.roa (hash: QMvHM8N7K9OdWcNx9rJFFp+Z7jXiktM21WFlvU4ZxMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8f:25:e0:f5:cc:c3:e5:d3:a0:16:87:da:4d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=699221cf491d559c191dad48bc148ff1fa7c66e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:79:6b:84:8f:d4:9f:7c:c6:a3:af:c1:c2:
6f:3a:23:42:14:45:8b:93:ad:d0:32:20:24:e5:65:
75:1b:df:61:2d:6f:3d:a9:53:83:c3:b3:63:42:58:
3a:da:8d:4e:9e:ca:cd:62:df:0f:d2:b6:0c:44:f6:
3d:eb:1f:a3:08:77:9a:5b:c5:90:bf:77:78:80:72:
8d:0f:0c:b2:94:4e:40:22:f1:39:d6:98:7a:3c:b5:
7a:ab:51:5f:e2:3e:9d:4b:e6:20:0c:c2:96:8e:1c:
57:00:9c:e1:35:af:11:1f:5b:09:fd:28:08:fb:61:
55:c9:56:1e:38:64:2b:14:dd:f4:b9:03:22:d8:07:
83:18:66:38:49:cf:00:74:dd:a9:5c:70:f6:30:09:
3a:b9:fc:57:c2:76:af:f5:e4:42:ae:35:68:f1:82:
78:4f:d9:43:3f:04:ff:5b:fe:ef:4f:d1:32:13:67:
e4:49:66:c5:f0:34:a7:8e:98:02:00:b2:a7:eb:fd:
ec:c4:49:61:34:d3:31:66:5d:89:eb:b3:c8:04:9a:
46:f8:b2:b4:df:e3:a7:0d:01:4f:14:c4:70:74:9b:
87:0c:0a:0b:38:05:c7:2c:83:c2:d6:ab:ba:35:3c:
e2:a0:96:5f:0b:22:68:e0:72:58:80:8c:9c:27:9c:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:92:21:CF:49:1D:55:9C:19:1D:AD:48:BC:14:8F:F1:FA:7C:66:E6
X509v3 Authority Key Identifier:
keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:90:3a:77:1e:23:92:fa:e6:ba:bb:78:56:64:62:9b:b2:
45:36:70:7a:1e:3b:22:6f:5d:69:78:e9:c7:15:ae:7c:62:5e:
dc:d4:a8:dc:e0:26:79:07:0b:bd:3d:95:66:cb:88:89:76:26:
ee:fa:06:a4:f3:ea:31:83:a9:53:42:23:be:83:5f:ac:65:d6:
98:b1:d6:73:e4:08:f2:5c:cd:36:1d:03:ba:f2:60:75:35:3b:
14:34:07:2f:a2:35:de:e4:51:04:61:d0:1b:00:5f:5b:70:7d:
11:0b:7d:f0:65:b3:1d:fc:db:b3:98:7d:91:44:8a:d1:23:f8:
26:e9:60:f8:60:26:27:6b:4d:9f:03:51:9b:8c:41:9c:72:c3:
9e:5c:2b:e0:a9:c6:37:86:30:d1:54:e4:57:4b:2e:89:b7:b2:
fe:4b:7d:93:d9:0e:c1:3b:8a:d4:3c:27:88:34:93:20:b8:1c:
c5:b1:c1:ec:b4:dc:6a:b3:c3:fc:03:2c:d5:96:8d:12:74:7b:
08:76:0d:46:03:69:d8:15:20:bb:09:d0:93:b1:43:62:65:90:
be:58:60:5d:ba:b2:b7:22:b0:ce:68:0b:b5:a2:c5:de:74:11:
6d:ef:12:ed:81:5a:97:db:75:6d:c5:89:cc:28:8d:b8:50:e7:
52:7f:96:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:06 2025 by rpki-client