Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/StNbrYf7vCPk3aC8ry4ymhRDLlg.mft
File: StNbrYf7vCPk3aC8ry4ymhRDLlg.mft (raw, json)
Hash identifier: XZvz7oOchXP5yYBnOdDAwo0JO3szcZMsXc04iLpluHI=
Subject key identifier: FE:7C:29:42:24:E7:CE:63:2C:32:40:94:ED:5D:63:BE:AB:63:3E:FC
Authority key identifier: 4A:D3:5B:AD:87:FB:BC:23:E4:DD:A0:BC:AF:2E:32:9A:14:43:2E:58
Certificate issuer: /CN=4ad35bad87fbbc23e4dda0bcaf2e329a14432e58
Certificate serial: 018BC7EA62E0515E5B7132690CF479A1D872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StNbrYf7vCPk3aC8ry4ymhRDLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/StNbrYf7vCPk3aC8ry4ymhRDLlg.mft
Manifest number: 073D
Signing time: Mon 13 Nov 2023 09:01:48 +0000
Manifest this update: Mon 13 Nov 2023 09:01:48 +0000
Manifest next update: Tue 14 Nov 2023 09:01:48 +0000
Files and hashes: 1: StNbrYf7vCPk3aC8ry4ymhRDLlg.crl (hash: CA5crgWzwKRztk9Nu5x35dQEvCFVKN9Fd7nv0tut4tc=)
2: jUhLoTpH3sf6bEjjecXvPYm1VMU.roa (hash: s20+qVarTv+dfQOmEm/O1aFXefYC2WyTmRT8bBTUE1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:ea:62:e0:51:5e:5b:71:32:69:0c:f4:79:a1:d8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad35bad87fbbc23e4dda0bcaf2e329a14432e58
Validity
Not Before: Nov 13 09:01:48 2023 GMT
Not After : Nov 14 09:01:48 2023 GMT
Subject: CN=fe7c294224e7ce632c324094ed5d63beab633efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:82:56:3f:9c:a3:ee:9f:2e:2f:cb:4b:0c:
2a:e6:8a:f7:52:7c:cd:9e:80:67:dd:3a:25:5b:14:
82:e2:9a:71:1a:06:16:78:31:75:77:03:d1:76:ce:
93:6c:6e:c0:ff:76:97:ac:16:25:ef:3a:ef:7e:9b:
e4:1e:33:19:fc:2e:af:21:d8:0c:c3:0a:cb:34:74:
40:50:65:5c:23:66:ef:ad:4c:7b:9a:c0:af:91:ce:
a3:ce:75:48:30:7a:81:51:f1:65:e1:0a:cd:ae:a3:
11:dd:81:2c:b2:1e:d5:2a:70:55:fd:ae:92:91:3b:
bd:89:e2:e0:5e:c0:f2:17:80:13:07:7b:90:41:2f:
6b:40:25:03:8e:b7:ca:19:a8:6c:8f:b1:fe:a6:2e:
9b:5f:a4:56:51:3b:4e:2b:8b:52:90:9e:53:7a:df:
cd:11:a3:1c:cc:1f:fc:1c:aa:05:ab:83:50:e7:5b:
33:4b:d0:92:92:0a:89:89:86:a7:4a:40:4d:6e:da:
15:a5:7e:46:88:27:34:3a:cc:b7:0b:f8:d1:b1:fc:
b0:5f:a8:57:ed:66:63:6c:61:79:d6:64:9b:f6:4e:
37:c0:af:5d:3f:38:1a:61:4d:91:58:dd:aa:7e:57:
ee:62:d0:66:03:7a:ac:f5:35:20:5b:87:48:7e:ac:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:29:42:24:E7:CE:63:2C:32:40:94:ED:5D:63:BE:AB:63:3E:FC
X509v3 Authority Key Identifier:
keyid:4A:D3:5B:AD:87:FB:BC:23:E4:DD:A0:BC:AF:2E:32:9A:14:43:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StNbrYf7vCPk3aC8ry4ymhRDLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/StNbrYf7vCPk3aC8ry4ymhRDLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/StNbrYf7vCPk3aC8ry4ymhRDLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fe:23:ed:c7:00:15:10:c8:d8:7f:52:29:c9:c2:4c:51:19:
b6:cc:09:7b:22:69:26:36:70:b7:8d:33:62:df:99:3d:7a:ba:
51:06:7f:4b:fd:14:0f:68:16:b0:57:3b:4d:1c:0a:11:c0:cf:
3e:63:e7:0c:99:14:4c:a4:25:93:7d:4f:78:90:6d:9b:36:f8:
73:bd:c8:54:f1:d4:ee:1b:75:e2:fb:93:37:57:a3:6b:8d:3c:
f8:8d:9e:2b:c3:50:56:6d:59:ff:51:fb:30:1e:88:f4:d1:e2:
5e:dc:ac:b2:54:e7:cf:36:ca:8b:c8:19:a9:7c:34:89:f7:cb:
e0:22:22:9d:13:f7:c8:3e:fb:f2:ea:97:54:27:5b:b2:90:e6:
09:8d:ce:06:76:0e:84:90:28:27:f0:bc:8a:59:08:be:95:22:
84:45:e6:06:1a:2c:90:fb:2c:fe:12:2f:02:9f:c9:c6:b9:ef:
1e:e1:97:a3:74:d1:bd:d9:7c:a5:1c:51:f6:58:5e:94:3d:6b:
7f:bc:50:be:30:ed:dd:f3:23:a9:63:35:15:f6:32:17:cf:a5:
59:18:cc:03:c4:02:ab:85:43:72:da:bf:32:ac:70:75:c7:c5:
48:1b:13:57:eb:3c:86:56:36:9d:cf:30:58:56:5d:32:2a:70:
5a:72:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:16 2025 by rpki-client