Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: cJiRil8iN7jFxQG+4/qyeRI0eJqEKsaAh3ofz0/yNfY=
Subject key identifier: BC:2B:5A:D2:08:42:16:F1:B2:16:2F:C7:61:4D:CD:78:64:64:07:91
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 0195E046A935839117FD0C7B0523E82E71B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 1377
Signing time: Sat 29 Mar 2025 05:01:21 +0000
Manifest this update: Sat 29 Mar 2025 05:01:21 +0000
Manifest next update: Sun 30 Mar 2025 05:01:21 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: 0QyjHG07TBSnpRZZJii76DQe0feOXkiJJnc3zP0tDhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:a9:35:83:91:17:fd:0c:7b:05:23:e8:2e:71:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Mar 29 05:01:21 2025 GMT
Not After : Mar 30 05:01:21 2025 GMT
Subject: CN=bc2b5ad2084216f1b2162fc7614dcd7864640791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:4c:fd:58:9a:43:97:4e:da:29:0c:05:5b:
2f:a1:81:1c:e3:a4:08:74:29:b2:fb:4e:42:e6:a2:
f9:88:bb:93:3f:c4:a0:6a:a9:db:42:36:f8:f9:b2:
01:c4:15:16:75:a0:e2:13:0e:73:29:44:ac:32:17:
6f:14:89:c1:20:b4:f1:4c:2a:13:00:0c:e1:a9:39:
2b:a9:15:f0:4d:8d:e2:d6:1c:be:42:76:23:b8:6e:
a6:5a:90:3c:25:75:77:98:0d:5e:c9:51:e2:d5:08:
3c:77:b9:28:9f:bf:b6:60:a0:6f:4f:76:8e:79:14:
7d:0e:72:12:c5:90:1e:59:cb:0c:7e:d7:61:6c:17:
a7:f6:b3:50:74:b6:44:4b:51:15:7a:01:cc:f8:3f:
78:a8:b7:2e:ae:2a:64:a4:8f:42:49:bc:a1:cf:16:
77:4e:63:3b:f3:b8:8c:c1:21:3f:b6:9e:be:69:ea:
db:ab:e3:f9:40:e1:e4:11:96:f9:de:c8:2c:be:fa:
85:ef:9f:b3:89:27:f6:db:86:40:4a:a0:23:51:03:
ab:22:46:da:41:aa:89:e3:40:2c:bd:6f:b2:75:cf:
4c:94:99:5e:21:1d:3d:37:d4:c2:c6:65:d0:e7:2b:
32:83:b4:61:c9:b0:c8:5b:27:b6:56:45:0b:4e:db:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:5A:D2:08:42:16:F1:B2:16:2F:C7:61:4D:CD:78:64:64:07:91
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:23:f4:f5:9b:15:74:6b:08:45:2e:d8:09:25:b0:63:a3:98:
98:0c:38:d9:5c:aa:1c:e3:82:3b:eb:58:f8:7c:1c:0d:99:3a:
28:d9:b0:2e:e8:f1:79:5b:8a:5a:d6:79:13:f3:24:f3:65:5b:
90:57:4c:6c:52:50:32:4d:26:f0:85:fc:17:cc:3b:be:f9:64:
3b:84:5e:5a:dc:99:a8:70:56:78:cb:58:ce:5d:19:cc:61:51:
7c:43:dc:c9:16:7d:0b:55:05:e7:3c:75:21:bc:91:aa:c6:1b:
98:a5:30:af:f2:70:18:8c:e5:d5:82:95:3f:08:24:c8:bd:a4:
ef:d1:9a:d1:bc:7d:e7:ff:7b:31:ed:de:5a:6c:42:b4:c7:c5:
1a:72:85:3b:e4:92:9f:fb:7c:15:9b:39:82:cc:d6:df:7d:28:
8a:a2:6d:29:14:27:8e:1c:48:ec:f1:0a:13:96:9a:66:0b:88:
71:ba:fd:c9:fd:f9:93:70:64:99:c2:5f:f6:61:3c:57:ea:17:
e6:07:7a:4b:f6:70:53:f4:36:5b:e4:ef:1a:25:14:c7:ba:96:
0d:8d:b0:60:d5:5b:75:cf:48:cd:b9:6e:54:6c:86:58:71:f9:
9b:10:06:46:5b:35:c2:dd:27:a1:59:1e:22:fc:6f:13:29:ef:
fb:24:f2:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRqk1g5EX/Qx7BSPoLnG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjUwMzI5MDUwMTIxWhcNMjUwMzMwMDUwMTIxWjAzMTEwLwYDVQQD
EyhiYzJiNWFkMjA4NDIxNmYxYjIxNjJmYzc2MTRkY2Q3ODY0NjQwNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0dM/ViaQ5dO2ikMBVsvoYEc46QI
dCmy+05C5qL5iLuTP8SgaqnbQjb4+bIBxBUWdaDiEw5zKUSsMhdvFInBILTxTCoT
AAzhqTkrqRXwTY3i1hy+QnYjuG6mWpA8JXV3mA1eyVHi1Qg8d7kon7+2YKBvT3aO
eRR9DnISxZAeWcsMftdhbBen9rNQdLZES1EVegHM+D94qLcuripkpI9CSbyhzxZ3
TmM787iMwSE/tp6+aerbq+P5QOHkEZb53sgsvvqF75+ziSf224ZASqAjUQOrIkba
QaqJ40AsvW+ydc9MlJleIR09N9TCxmXQ5ysyg7RhybDIWye2VkULTtuQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwrWtIIQhbxshYvx2FNzXhkZAeRMB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyP09ZsV
dGsIRS7YCSWwY6OYmAw42VyqHOOCO+tY+HwcDZk6KNmwLujxeVuKWtZ5E/Mk82Vb
kFdMbFJQMk0m8IX8F8w7vvlkO4ReWtyZqHBWeMtYzl0ZzGFRfEPcyRZ9C1UF5zx1
IbyRqsYbmKUwr/JwGIzl1YKVPwgkyL2k79Ga0bx95/97Me3eWmxCtMfFGnKFO+SS
n/t8FZs5gszW330oiqJtKRQnjhxI7PEKE5aaZguIcbr9yf35k3BkmcJf9mE8V+oX
5gd6S/ZwU/Q2W+TvGiUUx7qWDY2wYNVbdc9IzbluVGyGWHH5mxAGRls1wt0noVke
IvxvEynv+yTyBw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:00:45 2025 by rpki-client