Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/stP1luxQIy6wkmkKNYboNc9RsC4.mft
File: stP1luxQIy6wkmkKNYboNc9RsC4.mft (raw, json)
Hash identifier: 4YqkD5keZQaO7rHNotJpFn7YRozYlFn6/4feed0MTE8=
Subject key identifier: 41:C2:F6:17:BF:EE:43:27:E9:53:AF:D5:8B:9F:59:5C:7D:03:9E:EE
Authority key identifier: B2:D3:F5:96:EC:50:23:2E:B0:92:69:0A:35:86:E8:35:CF:51:B0:2E
Certificate issuer: /CN=b2d3f596ec50232eb092690a3586e835cf51b02e
Certificate serial: 01933F5D0104B63EE6294837F24FE04A837D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stP1luxQIy6wkmkKNYboNc9RsC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/stP1luxQIy6wkmkKNYboNc9RsC4.mft
Manifest number: 11
Signing time: Mon 18 Nov 2024 13:01:19 +0000
Manifest this update: Mon 18 Nov 2024 13:01:19 +0000
Manifest next update: Tue 19 Nov 2024 13:01:19 +0000
Files and hashes: 1: rJRF57TVF9uOUtnF1zsqChxYBxE.roa (hash: icI3fP9DvMSSjEwhlX98Fss1xXQk8TDvtHa2im/eHzs=)
2: stP1luxQIy6wkmkKNYboNc9RsC4.crl (hash: BrxMGUx2J6s5wdd20fxlHPq8xlpCmge9BqcHsnfVmdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:5d:01:04:b6:3e:e6:29:48:37:f2:4f:e0:4a:83:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d3f596ec50232eb092690a3586e835cf51b02e
Validity
Not Before: Nov 18 13:01:19 2024 GMT
Not After : Nov 19 13:01:19 2024 GMT
Subject: CN=41c2f617bfee4327e953afd58b9f595c7d039eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:7f:7b:0f:66:37:43:32:a3:8a:ee:b2:b7:
72:8f:29:a3:d7:18:d9:64:bb:c2:02:6f:8e:17:db:
c5:80:d7:68:81:b7:d7:fe:80:a2:0b:ff:10:a8:25:
b3:a8:b5:c4:37:e3:41:6c:f2:b9:1c:f3:2f:f7:5e:
54:7f:c6:af:41:bd:dd:ad:d5:10:f2:ee:93:03:ff:
5d:c3:c5:3b:b2:fe:68:37:43:7d:1c:c2:fe:bc:21:
f4:b8:44:99:ab:c1:f0:1c:52:ec:4b:7b:26:40:c1:
db:8b:da:28:96:f5:ba:21:0a:68:1a:ba:9e:e0:7d:
c6:67:15:24:1f:bb:fa:16:00:86:03:71:24:35:7e:
8a:2e:09:97:21:a4:32:ca:92:ed:b0:e4:52:11:c1:
1c:07:0a:e7:ac:de:62:18:dd:9c:0e:14:45:96:be:
66:4f:b2:be:fe:ca:b4:1d:b3:c0:d1:1e:b7:db:c2:
54:7b:90:d8:c3:44:fb:04:fa:62:6e:37:80:b6:4d:
ed:79:4e:26:de:81:2a:bc:66:23:29:4b:dc:6a:23:
21:b4:77:6f:b1:b2:38:8f:3f:ac:bf:88:c8:ba:51:
84:d4:c3:f8:b3:4e:d1:c4:60:db:b6:0d:de:75:7d:
e2:b2:db:ef:c4:ba:76:81:0c:d7:05:e2:f1:17:ae:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:F6:17:BF:EE:43:27:E9:53:AF:D5:8B:9F:59:5C:7D:03:9E:EE
X509v3 Authority Key Identifier:
keyid:B2:D3:F5:96:EC:50:23:2E:B0:92:69:0A:35:86:E8:35:CF:51:B0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stP1luxQIy6wkmkKNYboNc9RsC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/stP1luxQIy6wkmkKNYboNc9RsC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/stP1luxQIy6wkmkKNYboNc9RsC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5d:6b:24:e6:52:6b:d7:21:b5:63:92:cd:f4:e1:7b:da:fa:
9a:3e:a0:d3:8c:4e:88:cf:6c:09:cc:23:9d:d8:35:76:f8:a5:
eb:31:de:b7:dd:dc:96:d1:65:6d:25:a5:85:e8:87:54:db:42:
97:5c:98:81:ed:ff:ed:da:66:a1:a0:2d:a5:d3:10:c1:90:66:
ed:52:a7:c2:97:e2:c7:3c:e4:51:bb:1f:b6:60:40:16:a1:e6:
cc:c5:48:63:91:dc:16:5b:f7:32:a3:16:a1:86:dc:a3:4b:34:
c7:e8:dc:a7:1a:ee:01:11:75:58:20:95:33:ec:dc:d7:2d:5c:
1b:84:eb:23:47:f1:e0:3b:3d:31:01:22:66:52:c8:ee:8f:22:
b2:0d:0e:93:6f:49:d5:1d:36:19:28:ae:36:82:e7:e6:08:a0:
5b:80:bc:69:fc:03:d8:22:f0:5d:24:a0:28:09:96:b0:b9:62:
bf:30:17:8a:52:ef:4f:8c:75:db:38:ee:0d:2e:d1:f9:5d:a2:
a5:90:49:f7:52:20:fb:c0:3e:21:06:8b:f9:6b:8f:5e:59:7c:
73:58:e2:fb:46:d9:b6:4f:ee:52:69:55:4a:ec:05:d4:24:83:
bd:64:51:8c:31:cc:ff:93:05:d7:7b:f4:48:7f:bb:c6:7b:10:
93:6c:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:39:24 2025 by rpki-client