Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: Pvu6S1L+PQRTagpjT4zlIQC17DJqgtUhHQgJkcLeyCk=
Subject key identifier: B1:81:1D:11:8E:92:43:B0:0B:DB:50:A8:BE:C0:03:71:93:53:39:08
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 0194BBCEB05F1AB2FB0C11728C554B415567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 02EC
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: QrU75OKs/4twBJnWXF21sTzsGx7vbevmzFSH8hIH+rw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b0:5f:1a:b2:fb:0c:11:72:8c:55:4b:41:55:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=b1811d118e9243b00bdb50a8bec0037193533908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:18:b8:2e:29:8e:00:2b:a6:a9:0e:46:ac:
89:fe:43:ab:8b:94:09:76:7b:47:b1:fa:a8:a6:6c:
a5:44:10:4f:68:8d:dd:3f:3b:31:32:17:b7:7b:7c:
6b:f5:36:e0:22:47:cb:6e:83:f9:92:8c:1d:1c:3c:
43:dc:23:fb:30:73:cb:ad:c6:df:f0:2e:dc:65:c0:
11:a9:63:e3:59:1d:6a:b0:cc:ce:4a:af:53:7d:55:
a3:ff:71:70:6f:c9:55:9a:2e:6f:24:3f:96:a5:f2:
db:ce:ba:02:65:95:54:0c:7c:d6:af:ab:58:72:8d:
1b:57:43:eb:a2:96:51:55:8b:cd:6e:1b:65:cf:d5:
5e:6a:15:65:58:ac:26:3b:33:bf:02:bc:0c:68:45:
2f:03:fe:ae:91:ab:9a:ad:80:a5:7c:ab:b0:28:c7:
1a:5a:07:b4:24:f0:3e:07:ca:4c:76:45:cf:35:eb:
53:e3:40:22:b9:69:de:95:2a:af:06:2c:08:69:48:
4b:92:90:e8:9b:31:6d:27:e9:c8:0c:ca:a1:ed:79:
33:07:4a:1c:b0:5f:1d:ec:e1:59:f2:7f:57:46:f2:
cb:38:e6:c0:36:04:04:84:19:ff:8a:03:44:04:63:
fc:1b:ce:49:56:93:fc:53:30:24:d5:07:79:7b:4a:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:81:1D:11:8E:92:43:B0:0B:DB:50:A8:BE:C0:03:71:93:53:39:08
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:66:b8:4e:4e:01:7c:3c:0f:80:d3:0e:24:95:36:d7:91:34:
90:9c:4a:fb:ad:23:01:78:b0:c6:3c:11:88:c0:e6:5b:e4:e9:
c7:48:b8:78:e8:a0:6b:17:36:24:48:81:a1:57:78:03:73:33:
dd:78:7d:0d:02:35:3c:cc:cd:83:02:09:a3:fe:d6:39:89:41:
d5:bb:16:a0:f9:f0:aa:82:fd:c3:fe:6f:5d:b9:d7:33:4c:72:
8d:a5:cc:fb:e6:0d:24:09:39:34:ef:e8:37:6c:c3:95:81:db:
67:f2:21:48:b3:83:f8:ed:3a:15:2e:bc:4c:24:8d:34:95:9e:
b0:f6:bd:92:cd:2d:18:1f:29:04:a5:de:19:8d:8e:4d:90:ee:
c3:07:db:d2:fe:ab:8e:02:33:84:4f:bb:42:b9:0a:cd:2c:7f:
ff:00:33:f4:06:f2:9f:27:c0:6c:2b:91:f0:57:e7:d9:62:53:
31:21:9a:7a:9e:5e:a7:b1:e2:71:db:12:c8:e6:b4:b8:79:8f:
ec:ea:3d:c1:2a:a5:e5:af:3e:88:a6:e3:57:f0:92:b8:14:8f:
ee:7b:34:47:3c:50:fc:bf:01:c9:df:98:50:c0:b2:1b:5b:6b:
90:a0:7c:e8:34:e7:77:d4:3b:e0:fc:e8:1b:da:58:6b:dd:60:
b5:bb:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client