Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: MSNW5/jacuFVqQJXkoYOnEs18mhFdi9RGXoHLjpQgY8=
Subject key identifier: 3E:0D:E3:A9:56:28:D9:A7:41:95:21:25:78:50:D0:6F:12:F7:84:CE
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 0194BC051775DC93A9FD254481A78AE298EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 0390
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: CorMjyuMUH2G1gY83uEqpmLELAH5RgN6TRPZC2M4en8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:17:75:dc:93:a9:fd:25:44:81:a7:8a:e2:98:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=3e0de3a95628d9a7419521257850d06f12f784ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:89:aa:84:c3:ff:67:34:1c:82:57:23:88:
4e:4e:f3:56:e8:84:f1:bc:1e:e4:f1:83:4e:36:83:
90:25:0b:7b:5b:88:85:b9:c0:67:d3:e2:7b:a7:51:
58:b2:e8:ca:97:9c:4a:bd:02:a1:57:fc:f0:61:64:
e9:84:b5:70:46:aa:5f:9c:8c:6b:ab:c4:b2:5a:4d:
9c:70:7b:f7:c3:45:8e:cf:97:78:cf:5e:55:71:fe:
58:49:63:74:1d:7a:b5:6e:f1:92:bf:d5:0f:ce:12:
e2:5d:52:82:44:ab:2d:44:54:79:00:44:e4:11:ad:
18:9e:61:f7:48:03:59:7d:fb:af:26:86:d0:1f:de:
9c:88:56:4f:a9:dd:66:3f:62:3f:b6:49:b1:66:2a:
c2:f2:7b:5b:7f:f7:49:bc:b0:23:2a:56:2b:76:f9:
52:9d:17:a9:ff:6d:45:e3:91:bd:56:e3:41:ee:82:
ec:5c:81:0a:77:ef:fc:76:f6:66:86:b9:8d:ee:9d:
0f:68:cf:1e:f0:ab:6f:54:b2:7f:aa:83:38:93:c5:
11:ab:38:4d:39:f1:27:c6:75:95:f3:be:1e:fb:44:
d8:91:27:af:ca:3e:b4:c0:93:78:37:d7:0f:81:e3:
5e:d0:5b:6a:78:f3:40:48:92:fb:1c:de:e5:4e:3b:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0D:E3:A9:56:28:D9:A7:41:95:21:25:78:50:D0:6F:12:F7:84:CE
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:63:75:16:12:20:59:4e:c4:c8:6e:40:ce:b9:4f:e8:f9:e0:
44:c7:c9:d6:d6:29:1d:6e:1d:b9:65:ac:dc:9e:e6:e8:28:f2:
f1:14:cb:b4:6e:69:57:cd:3d:cd:ee:26:77:80:01:d2:c1:d3:
1f:21:e7:53:e4:f5:83:76:c2:a7:1d:5f:1d:04:16:b0:d0:28:
c8:fc:44:1d:d4:ad:83:3a:4d:23:bd:fc:26:2a:9f:9b:3d:bb:
cf:0f:d2:a3:84:f0:b4:e4:1f:a1:7e:c9:0a:4e:29:9c:98:d3:
73:8d:2a:4e:86:e8:da:40:a4:d7:52:66:6f:22:88:cf:ae:93:
0e:e8:33:70:c4:0c:1a:e8:2b:e2:54:8e:5f:63:d3:e0:27:8c:
31:4e:c6:25:2f:29:84:ea:8e:18:d4:e9:9d:3f:ef:66:80:a9:
d4:da:95:6d:8d:bb:55:18:45:7e:e0:4d:a5:5d:f1:de:51:e2:
d4:29:9e:3c:d1:c2:6d:43:eb:5f:13:fe:27:c4:df:53:dc:77:
4f:a8:21:4a:23:6a:8e:74:00:3a:f9:b4:d0:68:b2:6f:12:b5:
6a:d5:ee:32:cb:35:c5:0e:39:ed:d1:d6:83:7d:a3:a7:1e:29:
b6:c7:ee:e6:96:2c:80:95:b3:21:a8:42:fe:fb:7e:48:1c:89:
07:7c:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:07 2025 by rpki-client