Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
File: kgm43V6nJYkIN4Zh8rqe-JrToLE.mft (raw, json)
Hash identifier: rCv6UiZU0p1FQp+lTEqtLrdfbuufsyStzdE7QI0S5Zg=
Subject key identifier: 28:D8:77:C5:E1:51:01:E9:59:90:F2:23:0C:0E:79:1D:54:C9:C9:BD
Authority key identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
Certificate issuer: /CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
Certificate serial: 0195E190876CD456D0983D41778B8C212F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
Manifest number: 35
Signing time: Sat 29 Mar 2025 11:01:40 +0000
Manifest this update: Sat 29 Mar 2025 11:01:40 +0000
Manifest next update: Sun 30 Mar 2025 11:01:40 +0000
Files and hashes: 1: WReM2adAhR_LtpNyhGqyNjE1Y4M.roa (hash: CfgqMj+xDVkXamVtZy6LM6aMe3AmsivTTFfgXAb+rPQ=)
2: kgm43V6nJYkIN4Zh8rqe-JrToLE.crl (hash: /esLqv144+viSUw9+v72bD7QKZixX2TNDEWvd0xXNMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:87:6c:d4:56:d0:98:3d:41:77:8b:8c:21:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
Validity
Not Before: Mar 29 11:01:40 2025 GMT
Not After : Mar 30 11:01:40 2025 GMT
Subject: CN=28d877c5e15101e95990f2230c0e791d54c9c9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:9a:9e:03:1d:51:a6:4f:c3:2e:28:89:00:
be:ef:36:8c:ce:01:d5:78:03:32:4b:43:11:01:32:
b9:50:4b:87:c6:ff:a4:4c:eb:e4:28:c6:4b:32:40:
23:2b:28:35:f2:16:83:17:57:b6:68:10:7b:c8:49:
b0:76:9f:2a:f8:2c:3c:81:2f:bf:4c:ad:32:c6:06:
49:07:25:10:5f:1f:81:aa:f4:31:93:c7:4d:a4:ef:
d5:ce:38:4f:56:ee:d5:bd:12:ea:7a:89:1b:e0:fa:
11:4b:15:86:45:5b:5b:5b:54:c6:59:59:ff:21:3c:
48:48:a3:01:0a:64:68:c2:da:8b:f3:1a:1a:38:89:
a1:8c:ee:6b:7f:80:59:48:8f:38:95:e1:1a:61:95:
62:a4:5a:d4:be:39:56:b4:02:39:d0:a2:e2:da:45:
1a:59:5b:b7:b2:a6:b1:5b:d6:45:6b:71:ee:8b:6a:
c7:73:66:b3:f8:30:b3:5d:b3:d2:87:a5:34:62:90:
65:08:8f:f5:0e:fe:d2:64:32:cb:84:ff:12:99:43:
01:74:57:43:05:b9:ca:a0:32:5c:0b:26:b5:9b:ff:
c9:a7:58:c8:fb:4d:30:06:01:e3:14:a1:46:b9:03:
d8:95:12:c1:e1:da:0c:b0:d2:48:69:13:9f:0d:f2:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:77:C5:E1:51:01:E9:59:90:F2:23:0C:0E:79:1D:54:C9:C9:BD
X509v3 Authority Key Identifier:
keyid:92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:15:ea:f6:00:a9:04:01:9a:5f:5a:63:de:b8:5a:27:9d:
ef:b5:2b:22:01:eb:05:3c:af:b3:e3:61:74:2e:d8:57:8f:67:
eb:29:33:1c:d5:5f:56:0a:e6:3d:32:6f:22:07:5c:25:d1:9b:
a1:d6:3f:7f:1e:6a:60:ab:f0:47:d4:94:fe:aa:60:61:e4:5e:
e7:63:40:95:21:14:d7:38:e8:76:52:28:52:0d:aa:31:fc:39:
0e:e8:09:8d:6a:4a:96:c5:b4:2a:44:08:cd:58:8d:57:64:dc:
0d:ee:23:01:4f:be:62:1f:e1:98:64:34:b2:40:29:67:b4:24:
19:4a:0c:b3:e4:bf:4f:3a:97:69:cb:56:fd:27:04:76:24:7d:
27:8f:ce:d0:be:c0:02:5e:98:72:7e:d7:6f:8c:e1:5a:76:a1:
7c:e6:a1:e6:97:bd:ba:ef:a7:5c:7c:1f:34:c9:e9:fc:4f:db:
2e:30:31:05:00:6e:88:b0:7e:e7:54:e5:92:09:99:98:5c:47:
f8:3e:f5:64:de:62:e4:ca:d0:40:cf:6f:64:cf:33:a5:cb:bd:
2f:c3:d1:12:b7:5e:ca:13:8f:88:f6:09:a5:aa:04:69:d9:30:
b2:ce:9d:b3:56:e0:a0:37:ac:50:6f:73:d5:19:ff:08:b2:44:
34:83:d6:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkIds1FbQmD1Bd4uMIS96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMDliOGRkNWVhNzI1ODkwODM3ODY2MWYyYmE5ZWY4OWFk
M2EwYjEwHhcNMjUwMzI5MTEwMTQwWhcNMjUwMzMwMTEwMTQwWjAzMTEwLwYDVQQD
EygyOGQ4NzdjNWUxNTEwMWU5NTk5MGYyMjMwYzBlNzkxZDU0YzljOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbOangMdUaZPwy4oiQC+7zaMzgHV
eAMyS0MRATK5UEuHxv+kTOvkKMZLMkAjKyg18haDF1e2aBB7yEmwdp8q+Cw8gS+/
TK0yxgZJByUQXx+BqvQxk8dNpO/VzjhPVu7VvRLqeokb4PoRSxWGRVtbW1TGWVn/
ITxISKMBCmRowtqL8xoaOImhjO5rf4BZSI84leEaYZVipFrUvjlWtAI50KLi2kUa
WVu3sqaxW9ZFa3Hui2rHc2az+DCzXbPSh6U0YpBlCI/1Dv7SZDLLhP8SmUMBdFdD
BbnKoDJcCya1m//Jp1jI+00wBgHjFKFGuQPYlRLB4doMsNJIaROfDfJ6qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjYd8XhUQHpWZDyIwwOeR1Uycm9MB8GA1UdIwQY
MBaAFJIJuN1epyWJCDeGYfK6nvia06CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgt
ODkwZmZlYThkMGJjLzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgtODkwZmZlYThkMGJj
LzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmwV6vYA
qQQBml9aY964Wied77UrIgHrBTyvs+NhdC7YV49n6ykzHNVfVgrmPTJvIgdcJdGb
odY/fx5qYKvwR9SU/qpgYeRe52NAlSEU1zjodlIoUg2qMfw5DugJjWpKlsW0KkQI
zViNV2TcDe4jAU++Yh/hmGQ0skApZ7QkGUoMs+S/TzqXactW/ScEdiR9J4/O0L7A
Al6Ycn7Xb4zhWnahfOah5pe9uu+nXHwfNMnp/E/bLjAxBQBuiLB+51TlkgmZmFxH
+D71ZN5i5MrQQM9vZM8zpcu9L8PRErdeyhOPiPYJpaoEadkwss6ds1bgoDesUG9z
1Rn/CLJENIPWgg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:27 2025 by rpki-client