Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: EJNxwH63WCJariZUL6nYTrWDY8LnO3+rcEpzqrlm48Q=
Subject key identifier: B2:E3:28:51:48:21:8F:BC:EC:22:CA:D8:A0:45:80:5B:60:41:BC:F2
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 0195E046B253897BA36F0BFDAC9F1C4DB1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 10FE
Signing time: Sat 29 Mar 2025 05:01:24 +0000
Manifest this update: Sat 29 Mar 2025 05:01:24 +0000
Manifest next update: Sun 30 Mar 2025 05:01:24 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: NwCEWdbiRCAJvXuyIXdVTDqGHLRroizPVA82lte9Bho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:b2:53:89:7b:a3:6f:0b:fd:ac:9f:1c:4d:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Mar 29 05:01:24 2025 GMT
Not After : Mar 30 05:01:24 2025 GMT
Subject: CN=b2e3285148218fbcec22cad8a045805b6041bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:a1:f9:50:37:3e:88:3d:cb:24:e8:19:5b:
a0:92:be:8b:50:c7:9f:7c:c1:bd:9f:5d:0e:ce:25:
fd:33:cd:a4:d4:b9:46:85:b6:78:22:05:98:65:5a:
21:0c:c8:b4:a8:10:46:88:2e:dd:1a:02:79:3e:f2:
73:28:f5:dc:13:6d:cc:53:1f:49:4b:de:c7:72:ab:
5b:24:fa:9b:09:09:e3:98:65:be:05:d2:0d:51:0f:
f6:19:43:76:c1:dd:c5:64:15:a5:5d:12:ce:94:3f:
23:f5:c2:ea:84:47:bf:35:ea:ed:75:51:74:38:b9:
51:10:30:97:d3:2f:e6:a3:77:52:66:20:53:0d:40:
d5:7f:3f:89:59:d9:fe:63:9c:95:84:60:3f:5a:f2:
08:de:c0:50:fe:c9:8b:e7:88:6e:2e:42:93:4d:77:
58:0e:1b:31:8d:a8:69:a1:f6:ec:c9:3f:e6:e9:f4:
bc:bf:3b:98:70:79:f9:93:86:4b:ca:e0:e3:ed:4a:
84:62:e9:1a:de:0f:81:b6:ed:b4:ee:d6:74:46:9d:
4f:25:a3:5b:5f:03:a2:81:6a:af:83:7d:ee:3d:dd:
8c:fd:13:9b:96:81:fa:56:d3:ec:ab:da:b4:a6:d1:
bf:ab:4b:35:90:37:8c:d0:b3:eb:74:30:e6:6b:6a:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:28:51:48:21:8F:BC:EC:22:CA:D8:A0:45:80:5B:60:41:BC:F2
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:98:d5:c1:77:f3:14:46:85:25:20:31:2c:74:b6:93:c9:f5:
50:3a:58:b2:1a:36:97:99:aa:d8:b1:e1:bb:f0:9a:0a:b9:4e:
ad:d5:57:56:4e:8c:61:a3:e1:d9:99:f1:6a:bc:85:f9:38:0e:
bd:52:0b:48:73:db:7e:a5:ae:e0:b3:d7:e4:5b:31:ca:22:ed:
a5:68:14:c6:56:e6:23:e2:1c:b0:c1:ea:2e:71:5c:fc:86:0f:
fd:58:9e:8e:73:a7:90:dd:dd:28:45:eb:43:b0:e8:38:5d:0b:
80:68:e9:04:97:17:58:5f:ae:3f:50:91:e8:60:3c:18:2c:2d:
63:d7:82:d6:88:b8:2a:b7:0d:86:c2:5b:75:bb:56:63:aa:92:
a1:52:39:22:36:64:a9:7f:92:49:3e:f1:52:26:e8:3a:4a:64:
d5:c6:53:9f:bb:bf:89:cf:93:33:fd:11:d6:48:75:f3:31:c0:
fe:09:3f:e8:52:75:62:ac:b8:0e:59:bd:8d:2c:e6:f8:56:89:
79:a6:1b:ac:75:10:36:9b:88:1a:31:c9:42:b1:56:cc:7d:25:
6b:fc:d5:94:71:e0:70:e2:91:29:9e:3d:27:7a:bd:94:c3:00:
17:41:3c:76:71:69:13:a9:4e:c3:70:5d:ef:79:58:c3:03:be:
ea:d7:b8:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRrJTiXujbwv9rJ8cTbGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzJlOTM1YTEwZjljZTIxNmUwOTkzYWU0MTk5Yzk2ZjUy
NzNhZjQwHhcNMjUwMzI5MDUwMTI0WhcNMjUwMzMwMDUwMTI0WjAzMTEwLwYDVQQD
EyhiMmUzMjg1MTQ4MjE4ZmJjZWMyMmNhZDhhMDQ1ODA1YjYwNDFiY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18yh+VA3Pog9yyToGVugkr6LUMef
fMG9n10OziX9M82k1LlGhbZ4IgWYZVohDMi0qBBGiC7dGgJ5PvJzKPXcE23MUx9J
S97HcqtbJPqbCQnjmGW+BdINUQ/2GUN2wd3FZBWlXRLOlD8j9cLqhEe/NertdVF0
OLlREDCX0y/mo3dSZiBTDUDVfz+JWdn+Y5yVhGA/WvII3sBQ/smL54huLkKTTXdY
DhsxjahpofbsyT/m6fS8vzuYcHn5k4ZLyuDj7UqEYuka3g+Btu207tZ0Rp1PJaNb
XwOigWqvg33uPd2M/RObloH6VtPsq9q0ptG/q0s1kDeM0LPrdDDma2pwiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLjKFFIIY+87CLK2KBFgFtgQbzyMB8GA1UdIwQY
MBaAFLEy6TWhD5ziFuCZOuQZnJb1Jzr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMt
YThmMGVlMDBiMmFkLzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMtYThmMGVlMDBiMmFk
LzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZjVwXfz
FEaFJSAxLHS2k8n1UDpYsho2l5mq2LHhu/CaCrlOrdVXVk6MYaPh2ZnxaryF+TgO
vVILSHPbfqWu4LPX5FsxyiLtpWgUxlbmI+IcsMHqLnFc/IYP/ViejnOnkN3dKEXr
Q7DoOF0LgGjpBJcXWF+uP1CR6GA8GCwtY9eC1oi4KrcNhsJbdbtWY6qSoVI5IjZk
qX+SST7xUiboOkpk1cZTn7u/ic+TM/0R1kh18zHA/gk/6FJ1Yqy4Dlm9jSzm+FaJ
eaYbrHUQNpuIGjHJQrFWzH0la/zVlHHgcOKRKZ49J3q9lMMAF0E8dnFpE6lOw3Bd
73lYwwO+6te4fQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:13 2025 by rpki-client