Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: YqKwKo/wFsy3xforeuRSF15YqqrRZvUPJwl1JWir/LU=
Subject key identifier: FE:33:2C:ED:F0:56:1F:31:3B:DC:CA:ED:E0:C2:5D:AF:14:C6:9B:12
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 0194BCA9A5A5A5C2A5A1420D8055C83632D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0953
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: 1SWj93EABHqxi0lHv/peufnNoRYon1Rofq0EJQpOmnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a5:a5:a5:c2:a5:a1:42:0d:80:55:c8:36:32:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=fe332cedf0561f313bdccaede0c25daf14c69b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:dd:ce:b5:92:95:d3:0c:0d:e5:b9:91:bd:
d4:46:53:42:1b:e2:e4:89:77:d9:ac:db:33:96:7c:
5f:81:0e:99:51:70:77:3f:a3:e2:1d:ff:a0:f4:32:
5b:a9:f7:71:95:11:d1:fd:66:d0:85:22:d4:65:fb:
62:5d:10:9a:51:54:da:b5:01:d1:d8:41:83:9d:18:
07:d1:cb:75:4a:c1:38:be:06:64:07:c4:88:96:b1:
c9:ca:d6:bb:3c:1c:b5:ec:d0:04:fa:15:f5:2d:3c:
66:c8:3b:f3:b6:4e:bc:6b:ed:0c:c9:ea:34:43:5e:
fa:6b:27:d3:9a:eb:64:ad:a0:8e:61:23:e3:fc:42:
db:62:ca:ad:76:40:5e:a8:53:81:03:ee:35:b9:37:
f0:fc:9d:17:85:df:d2:77:c0:60:27:41:1b:3d:c0:
d7:54:7f:24:9b:67:a0:6a:ef:67:8f:51:fb:0e:9f:
84:3a:52:5c:13:9f:9c:28:04:16:09:2f:8c:c1:47:
46:f0:3a:87:98:0b:58:73:5e:cc:a3:e9:68:96:3f:
5c:31:51:58:38:1d:45:28:cf:ed:df:b8:7b:1b:ad:
d0:1a:e3:c7:77:eb:fe:ab:b5:ec:c4:8c:23:6a:3b:
12:e2:53:63:9d:f3:0b:da:b0:66:fb:78:87:42:70:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:2C:ED:F0:56:1F:31:3B:DC:CA:ED:E0:C2:5D:AF:14:C6:9B:12
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5a:df:53:b1:61:68:81:5c:d6:64:0b:7e:65:f8:10:72:44:
e0:0c:fb:62:de:67:f9:fd:e4:13:91:68:f5:1f:b9:3c:3d:9e:
e5:b0:55:0a:fa:15:8e:8a:e2:72:b1:c5:cf:38:4d:ae:e6:13:
e4:da:43:90:7a:0a:4e:97:ae:74:6a:35:53:93:cf:f7:4c:6a:
4e:3b:fb:e5:cb:bb:2d:ed:81:2b:5e:7f:bf:ed:b2:18:62:2c:
78:e2:c7:d4:2e:1f:dc:ba:a5:e4:74:d9:cd:4a:a0:a3:c0:30:
40:7b:05:c5:19:67:e9:13:d0:54:86:b6:d9:4e:c2:b5:16:da:
1a:d1:45:f9:9c:c0:7a:40:eb:1e:51:59:d7:75:3e:93:13:04:
55:63:6e:d8:f5:00:bf:47:5b:21:e4:f1:b6:e7:ce:24:b6:5d:
fa:cf:9a:5d:91:84:1d:00:d1:81:c5:91:59:37:a1:1f:0a:24:
46:2a:77:cb:f1:30:8d:1e:c3:74:10:d1:ea:43:85:61:5c:57:
b0:9b:ab:a9:ab:d3:ab:fa:b3:cf:fa:ed:9c:19:21:df:db:93:
1a:7d:9d:22:17:5a:29:ea:85:b2:0f:c1:72:3a:49:34:98:cb:
35:fc:00:8e:94:7f:86:b0:95:1f:ce:9f:f3:f3:ca:5a:62:66:
d4:03:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:03 2025 by rpki-client