Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: pE6o2KZ6URpFKcGLl55Eu4kcRslrrQHg5dj5sY5TSPs=
Subject key identifier: BC:AA:77:6A:36:31:88:F3:1D:5E:DE:A5:CE:46:A3:F7:B5:36:CF:CA
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 0195DFD974146EDC3F5C16C1FCF5413FC388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 031C
Signing time: Sat 29 Mar 2025 03:02:04 +0000
Manifest this update: Sat 29 Mar 2025 03:02:04 +0000
Manifest next update: Sun 30 Mar 2025 03:02:04 +0000
Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: K5dwGySW+RYlZTjE2YiofjjBWKu+fLNuvINLpwy1dZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:74:14:6e:dc:3f:5c:16:c1:fc:f5:41:3f:c3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Mar 29 03:02:04 2025 GMT
Not After : Mar 30 03:02:04 2025 GMT
Subject: CN=bcaa776a363188f31d5edea5ce46a3f7b536cfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:4f:68:37:59:0f:2e:c2:31:51:d1:10:fe:
83:92:d3:68:a3:d2:80:c3:1d:dd:44:e0:f9:ff:3f:
b1:86:81:dd:d7:82:61:fc:41:07:2d:24:78:9c:6c:
2b:ca:f7:9c:2a:40:c8:e2:17:ea:80:53:0c:ce:72:
4f:14:79:03:30:1b:d7:51:7a:c3:51:d5:3b:f7:62:
16:33:b5:5b:ea:61:98:44:88:a7:71:95:77:7c:4d:
4d:21:ad:ac:86:ac:cb:7f:11:ef:1f:ac:52:9f:6e:
e4:dc:7e:06:fc:4f:3f:78:11:de:cb:08:13:69:74:
bd:61:3b:c1:c4:b6:20:86:78:6c:be:fc:0e:6c:5f:
36:86:e5:40:b8:b4:82:5a:88:6a:a1:0e:f4:b7:d7:
f8:28:e3:44:2e:e6:3d:1d:70:3e:5c:63:d2:57:1c:
86:ee:e1:67:5e:f1:48:f3:4a:e8:fd:49:9d:bf:9e:
72:83:ff:db:fb:a5:f1:7c:02:92:c2:79:bd:f8:2f:
99:42:e6:26:a4:58:3d:4c:98:d2:0e:4e:5e:47:b0:
32:07:3f:04:ef:f0:e2:55:ba:37:55:c7:2b:c7:91:
b9:a6:22:8f:80:9b:75:cb:0d:f4:bb:9a:8a:48:4f:
e4:cb:37:03:6e:59:12:b9:15:00:19:a7:d5:57:e3:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AA:77:6A:36:31:88:F3:1D:5E:DE:A5:CE:46:A3:F7:B5:36:CF:CA
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:a7:92:9a:9d:82:bb:51:fa:35:37:bd:c2:fd:e5:ad:5e:
94:30:92:ca:73:d1:11:f3:67:48:71:01:fd:f3:54:36:91:da:
d5:da:ce:ac:d2:58:ea:a2:fc:e7:c0:49:b9:7c:d6:e5:75:c3:
b0:e3:c1:b2:c1:5d:33:f4:29:de:c7:2b:be:4b:ea:1e:e7:01:
0f:bd:d7:8a:f4:17:b9:2d:68:7f:78:dc:cb:3d:4a:94:35:04:
fb:07:8b:e5:9f:ed:bc:1e:b6:fa:33:e1:0a:ef:cd:7a:57:21:
25:ba:9d:92:4c:5e:7d:ba:2b:7d:37:25:27:66:49:89:2f:d9:
e2:d5:ba:29:d6:05:81:8a:d6:c9:3e:05:30:d0:fe:b3:f6:dc:
f2:90:04:53:64:ab:66:d5:b6:5e:fa:19:2b:7c:79:72:e7:69:
23:1e:7e:bb:6c:41:89:9b:be:05:2e:21:57:52:4f:81:0f:c5:
53:2c:bf:61:b7:46:6b:8b:37:ba:26:2e:c0:ad:21:f5:ad:03:
5f:ba:9b:a9:33:59:e3:0f:f6:72:53:e8:c9:e7:15:59:57:4a:
1a:3f:ca:52:da:08:a9:66:77:ed:06:fa:e7:89:a3:9b:fc:2f:
7b:d0:a9:56:b8:b5:6f:f5:5f:82:f1:3e:be:9a:64:be:a4:ed:
18:06:c0:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2XQUbtw/XBbB/PVBP8OIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl
YTZkN2QwHhcNMjUwMzI5MDMwMjA0WhcNMjUwMzMwMDMwMjA0WjAzMTEwLwYDVQQD
EyhiY2FhNzc2YTM2MzE4OGYzMWQ1ZWRlYTVjZTQ2YTNmN2I1MzZjZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ZPaDdZDy7CMVHREP6DktNoo9KA
wx3dROD5/z+xhoHd14Jh/EEHLSR4nGwryvecKkDI4hfqgFMMznJPFHkDMBvXUXrD
UdU792IWM7Vb6mGYRIincZV3fE1NIa2shqzLfxHvH6xSn27k3H4G/E8/eBHeywgT
aXS9YTvBxLYghnhsvvwObF82huVAuLSCWohqoQ70t9f4KONELuY9HXA+XGPSVxyG
7uFnXvFI80ro/Umdv55yg//b+6XxfAKSwnm9+C+ZQuYmpFg9TJjSDk5eR7AyBz8E
7/DiVbo3Vccrx5G5piKPgJt1yw30u5qKSE/kyzcDblkSuRUAGafVV+PjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyqd2o2MYjzHV7epc5Go/e1Ns/KMB8GA1UdIwQY
MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt
MTNjMGE2MzNlOWY0LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0
LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3Onkpqd
grtR+jU3vcL95a1elDCSynPREfNnSHEB/fNUNpHa1drOrNJY6qL858BJuXzW5XXD
sOPBssFdM/Qp3scrvkvqHucBD73XivQXuS1of3jcyz1KlDUE+weL5Z/tvB62+jPh
Cu/NelchJbqdkkxefborfTclJ2ZJiS/Z4tW6KdYFgYrWyT4FMND+s/bc8pAEU2Sr
ZtW2XvoZK3x5cudpIx5+u2xBiZu+BS4hV1JPgQ/FUyy/YbdGa4s3uiYuwK0h9a0D
X7qbqTNZ4w/2clPoyecVWVdKGj/KUtoIqWZ37Qb654mjm/wve9CpVri1b/VfgvE+
vppkvqTtGAbA/Q==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:56:00 2025 by rpki-client