Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier: h2YwAP5Fsn2IVbacGvQ5E4iZdTmdZUSnjd8aBNmxrm4=
Subject key identifier: CB:F8:71:E3:08:D5:C6:17:52:1A:DD:DF:71:46:0B:51:C3:B9:BF:9A
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial: 0194BBCDBD6FEEC28036CE6329D9A43ABCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number: 090E
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: Ewu_L9NGAMIn9J1bD2mKPYHfLN0.roa (hash: MPg//qxTuFJeVfIte2bOUUVJ5G8w+mQ6T68mV0V7xWY=)
2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: 4DfwAVgDjHOWfMu3CX7hCXHcHjxGl5a6iuJiSvQ5S5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bd:6f:ee:c2:80:36:ce:63:29:d9:a4:3a:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=cbf871e308d5c617521adddf71460b51c3b9bf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:19:1c:d9:99:45:06:34:3e:8e:0d:5e:7c:
8b:f4:8e:61:fb:8d:89:17:31:1a:d0:a7:39:d5:84:
60:33:49:e9:c5:c3:5f:b9:3e:df:3f:41:cd:4e:18:
45:6f:b6:a8:4d:63:d8:8b:47:68:03:1c:93:57:5d:
0a:a3:8e:dc:b4:48:1b:d2:fe:01:a6:c1:c3:93:8e:
3f:f9:0f:55:9d:b4:42:7c:f0:83:91:c1:c7:91:91:
86:9d:b2:10:30:dc:e0:4b:ec:96:6f:06:a7:5c:30:
e0:de:ea:10:b1:7a:27:c0:af:97:d0:0d:d0:ea:8e:
99:ef:c8:10:78:4c:49:02:67:51:56:0c:71:f4:19:
06:9f:91:a7:c2:53:b7:34:3f:c9:58:8c:33:75:c9:
1e:1d:b1:e6:89:16:a1:34:f9:98:0c:f9:da:a2:07:
9c:bd:05:11:03:1e:e4:2d:ee:b8:bd:0a:28:eb:86:
88:75:23:23:37:d5:9d:c0:41:fc:63:75:58:7f:1f:
02:a5:30:4e:9c:c5:56:a3:c7:d7:20:de:0c:e0:bf:
f1:ee:dd:fb:8f:2d:38:92:5c:1d:c2:54:15:ae:1b:
22:ec:14:27:d8:93:6d:89:57:e4:93:d5:c6:eb:84:
dd:42:12:3f:34:0e:77:1f:0e:95:fd:03:39:36:1a:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:71:E3:08:D5:C6:17:52:1A:DD:DF:71:46:0B:51:C3:B9:BF:9A
X509v3 Authority Key Identifier:
keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a0:41:a1:1b:da:92:bb:fd:d2:72:18:ec:f3:25:26:f0:8d:
2c:0d:6b:49:15:ff:b2:67:7c:ee:63:1b:bf:ee:24:c3:b8:25:
90:34:d2:a2:d2:38:0a:09:5d:01:f5:0e:0b:00:f9:4e:10:b8:
5a:7f:70:11:3c:bf:b0:74:b5:ba:d7:13:e1:b6:0b:c0:c7:43:
16:7f:af:88:a6:06:61:67:b5:be:8a:d2:25:c2:c5:9d:dd:82:
22:df:c5:e3:53:53:84:3e:84:7c:53:29:e3:0a:d1:51:38:34:
51:66:8d:ab:7b:68:1a:a6:01:d7:cc:98:9f:62:c2:84:59:39:
7d:0b:b4:e7:52:0d:57:5e:3e:38:5b:2c:95:34:46:b9:be:b8:
b9:ef:10:fc:46:e6:38:d7:28:6c:bd:71:78:cc:92:6a:5c:78:
1d:16:d7:e3:a5:54:8d:59:37:c5:7b:fe:1f:e4:77:26:1c:43:
9e:05:f0:0a:34:ac:c2:7c:e2:c7:97:9b:b4:0c:85:57:4e:41:
83:ae:2c:79:2b:a7:8c:d7:c1:b8:77:2a:61:27:2f:35:4c:23:
b0:ae:7c:1b:f9:c8:34:4d:8e:9e:6a:8d:65:26:e8:b3:89:ea:
f7:0b:7a:da:7e:30:25:2e:ac:34:b7:0a:d1:63:c0:56:99:d8:
c3:e5:c5:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb1v7sKANs5jKdmkOrzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzk3MWJmZWE3OGQ2YWE1YjQ5ZWQ1YWMzNWM3N2I2YTMw
YTA4OTQwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
EyhjYmY4NzFlMzA4ZDVjNjE3NTIxYWRkZGY3MTQ2MGI1MWMzYjliZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1gZHNmZRQY0Po4NXnyL9I5h+42J
FzEa0Kc51YRgM0npxcNfuT7fP0HNThhFb7aoTWPYi0doAxyTV10Ko47ctEgb0v4B
psHDk44/+Q9VnbRCfPCDkcHHkZGGnbIQMNzgS+yWbwanXDDg3uoQsXonwK+X0A3Q
6o6Z78gQeExJAmdRVgxx9BkGn5GnwlO3ND/JWIwzdckeHbHmiRahNPmYDPnaogec
vQURAx7kLe64vQoo64aIdSMjN9WdwEH8Y3VYfx8CpTBOnMVWo8fXIN4M4L/x7t37
jy04klwdwlQVrhsi7BQn2JNtiVfkk9XG64TdQhI/NA53Hw6V/QM5Nhq2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv4ceMI1cYXUhrd33FGC1HDub+aMB8GA1UdIwQY
MBaAFLE5cb/qeNaqW0ntWsNcd7ajCgiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zZjAwODMtNTlkNy00MzNhLTkwNWEt
NDdiMWJkZjhkNTMwLzEvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zZjAwODMtNTlkNy00MzNhLTkwNWEtNDdiMWJkZjhkNTMw
LzEvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaBBoRva
krv90nIY7PMlJvCNLA1rSRX/smd87mMbv+4kw7glkDTSotI4CgldAfUOCwD5ThC4
Wn9wETy/sHS1utcT4bYLwMdDFn+viKYGYWe1vorSJcLFnd2CIt/F41NThD6EfFMp
4wrRUTg0UWaNq3toGqYB18yYn2LChFk5fQu051INV14+OFsslTRGub64ue8Q/Ebm
ONcobL1xeMySalx4HRbX46VUjVk3xXv+H+R3JhxDngXwCjSswnzix5ebtAyFV05B
g64seSunjNfBuHcqYScvNUwjsK58G/nINE2OnmqNZSbos4nq9wt62n4wJS6sNLcK
0WPAVpnYw+XFig==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:28 2025 by rpki-client