Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
File: kgm43V6nJYkIN4Zh8rqe-JrToLE.mft (raw, json)
Hash identifier: Y9tftDZSXHD23qUh+MIvG18yCe7uFu3EeiJUBvAj5Do=
Subject key identifier: 06:47:93:87:1B:25:3E:D4:F6:9C:0D:35:1F:5E:BE:08:87:08:65:F6
Authority key identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
Certificate issuer: /CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
Certificate serial: 01962ECF7E326DDF30D829238072B2587ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
Manifest number: 5D
Signing time: Sun 13 Apr 2025 11:01:12 +0000
Manifest this update: Sun 13 Apr 2025 11:01:12 +0000
Manifest next update: Mon 14 Apr 2025 11:01:12 +0000
Files and hashes: 1: WReM2adAhR_LtpNyhGqyNjE1Y4M.roa (hash: CfgqMj+xDVkXamVtZy6LM6aMe3AmsivTTFfgXAb+rPQ=)
2: kgm43V6nJYkIN4Zh8rqe-JrToLE.crl (hash: LXzclzNBDyVcpVKi5L3ABucolAVNkknuAaz1WTIXmqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:7e:32:6d:df:30:d8:29:23:80:72:b2:58:7e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
Validity
Not Before: Apr 13 11:01:12 2025 GMT
Not After : Apr 14 11:01:12 2025 GMT
Subject: CN=064793871b253ed4f69c0d351f5ebe08870865f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:aa:b4:ca:25:33:58:67:49:16:5f:e2:5f:
fe:7d:d2:18:b0:76:27:d7:b8:12:04:eb:41:11:42:
05:3d:84:f2:d3:48:9a:0f:ed:a9:50:fe:9a:fa:12:
7b:fe:4b:72:0b:9f:e8:5a:36:0b:8f:c5:5c:80:e5:
af:65:af:18:0e:a8:27:1b:67:af:bf:ab:ff:20:c2:
4a:31:67:31:dd:99:cf:64:0c:14:0b:a1:51:a7:1c:
ff:c7:c2:cb:54:a4:75:46:31:99:82:e4:5e:be:fd:
35:63:5a:1c:b0:b0:a6:69:fe:9b:df:d4:5b:b5:4e:
7b:0d:bb:99:c1:9e:19:df:4a:53:bb:b2:ac:68:a4:
45:85:30:1e:12:f6:29:1e:16:fb:87:59:ee:ea:59:
70:f6:43:f1:19:d6:e5:4c:92:72:c3:10:8e:ef:47:
32:54:20:37:ef:5a:22:75:20:fe:3a:c2:17:d9:d7:
6a:9d:cb:46:f8:61:bc:98:f5:1e:b0:be:5f:42:35:
f4:c5:45:41:28:1e:5d:18:1e:56:91:33:b8:67:76:
d2:5c:57:00:c9:67:e1:b6:eb:39:0e:e5:91:af:05:
83:b2:0c:2c:83:83:c3:ca:62:75:48:1f:2f:17:27:
13:6f:a5:0a:55:76:a9:22:26:cd:db:a7:79:a7:b0:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:93:87:1B:25:3E:D4:F6:9C:0D:35:1F:5E:BE:08:87:08:65:F6
X509v3 Authority Key Identifier:
keyid:92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c7:8f:cc:80:92:cd:97:db:06:f7:7f:30:4f:05:67:fa:52:
fd:95:91:33:42:bd:e8:8a:f7:61:03:64:dd:eb:04:cc:28:10:
80:60:49:21:7c:71:a7:39:3c:c0:89:37:12:b6:05:29:2f:de:
5d:7a:fc:24:4e:1d:0e:78:0d:3b:3f:1f:db:df:d7:0f:67:8b:
a2:34:06:19:ec:8e:a2:da:40:db:17:1e:73:b6:91:01:30:93:
c7:01:94:b7:07:9a:f5:b6:89:b1:39:44:07:51:31:39:42:f8:
ad:6e:45:f5:1a:87:18:10:17:33:33:16:9a:81:b8:7b:ab:32:
35:cc:dc:d2:7c:5f:59:a0:35:62:05:65:0a:5c:01:9a:12:48:
b6:8c:20:ec:45:ac:22:ab:86:2b:f8:14:71:04:27:05:de:51:
b2:0e:9c:34:64:da:e1:80:29:b7:a4:34:d0:6a:31:6b:40:55:
e5:6b:45:1e:9f:a4:38:45:56:a3:8a:c8:8b:f7:88:70:f0:f9:
6a:4d:86:23:04:74:56:1e:bf:d8:ac:74:12:1d:dc:94:cc:d6:
dd:3d:5a:f4:64:32:21:82:7e:7d:7c:d9:c3:4e:7d:0c:9f:05:
60:56:7a:2b:54:85:da:0a:2d:5e:9c:a2:08:25:1c:04:17:11:
6c:95:72:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz34ybd8w2CkjgHKyWH7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMDliOGRkNWVhNzI1ODkwODM3ODY2MWYyYmE5ZWY4OWFk
M2EwYjEwHhcNMjUwNDEzMTEwMTEyWhcNMjUwNDE0MTEwMTEyWjAzMTEwLwYDVQQD
EygwNjQ3OTM4NzFiMjUzZWQ0ZjY5YzBkMzUxZjVlYmUwODg3MDg2NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAeqtMolM1hnSRZf4l/+fdIYsHYn
17gSBOtBEUIFPYTy00iaD+2pUP6a+hJ7/ktyC5/oWjYLj8VcgOWvZa8YDqgnG2ev
v6v/IMJKMWcx3ZnPZAwUC6FRpxz/x8LLVKR1RjGZguRevv01Y1ocsLCmaf6b39Rb
tU57DbuZwZ4Z30pTu7KsaKRFhTAeEvYpHhb7h1nu6llw9kPxGdblTJJywxCO70cy
VCA371oidSD+OsIX2ddqnctG+GG8mPUesL5fQjX0xUVBKB5dGB5WkTO4Z3bSXFcA
yWfhtus5DuWRrwWDsgwsg4PDymJ1SB8vFycTb6UKVXapIibN26d5p7CurwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZHk4cbJT7U9pwNNR9evgiHCGX2MB8GA1UdIwQY
MBaAFJIJuN1epyWJCDeGYfK6nvia06CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgt
ODkwZmZlYThkMGJjLzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgtODkwZmZlYThkMGJj
LzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMePzICS
zZfbBvd/ME8FZ/pS/ZWRM0K96Ir3YQNk3esEzCgQgGBJIXxxpzk8wIk3ErYFKS/e
XXr8JE4dDngNOz8f29/XD2eLojQGGeyOotpA2xcec7aRATCTxwGUtwea9baJsTlE
B1ExOUL4rW5F9RqHGBAXMzMWmoG4e6syNczc0nxfWaA1YgVlClwBmhJItowg7EWs
IquGK/gUcQQnBd5Rsg6cNGTa4YApt6Q00Goxa0BV5WtFHp+kOEVWo4rIi/eIcPD5
ak2GIwR0Vh6/2Kx0Eh3clMzW3T1a9GQyIYJ+fXzZw059DJ8FYFZ6K1SF2gotXpyi
CCUcBBcRbJVydg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net