Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: mBa6ujLSFwHi8g4tY6XRuMI6dj5Z12unrrEf+b9dllA=
Subject key identifier: 24:FB:47:4B:31:71:0A:E1:F9:FC:49:2A:9D:CE:4B:4B:C9:33:12:EC
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 0194BD857C069C5D4DDC71E0186107389D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 102A
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=)
2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: GvYt96N6ybn5wb7sZ0SVKut/tKaLk7v5mdDkzgZ7EVo=)
3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=)
4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:06:9c:5d:4d:dc:71:e0:18:61:07:38:9d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=24fb474b31710ae1f9fc492a9dce4b4bc93312ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:b0:5f:72:74:98:58:f3:2f:0e:b6:80:63:
7b:af:16:68:f3:93:b0:a6:3d:86:a3:5f:23:cd:50:
b8:98:2c:5c:20:af:a9:64:0a:e9:be:f3:5c:fe:1a:
e9:bf:21:49:f1:cd:2d:65:77:29:cf:36:9c:0c:b3:
5c:4b:cc:9e:09:fb:15:00:84:95:93:82:41:3a:80:
14:3a:f7:8c:fd:05:3b:b4:6f:4b:f7:fa:80:ea:f1:
cc:5d:27:98:5b:45:28:aa:d5:66:8f:e1:c0:ab:b0:
0a:1f:9a:ba:63:f3:3e:fa:61:22:d5:e1:d6:c7:2c:
ce:fc:19:0a:6b:59:58:f2:32:35:cc:58:fd:3e:bb:
a4:9a:c6:64:ff:2f:cf:12:0e:71:fc:8d:34:64:88:
9f:f9:55:1f:af:4e:f0:91:2d:88:0d:10:01:c8:87:
f3:c3:5f:51:7f:11:95:97:c2:17:32:f5:6f:cc:17:
ee:83:27:c2:d8:38:b6:5e:6c:a2:36:72:d0:57:c2:
f2:32:03:f0:75:77:b4:62:98:34:ee:d7:7e:6a:bc:
0b:a9:4d:bc:78:7f:f9:3b:0d:eb:b0:b8:37:7c:00:
4a:94:25:f4:b9:b6:27:c9:5b:8a:d0:2a:f5:fd:ae:
ff:05:98:a1:b7:24:c7:9f:99:b1:6b:9a:53:f0:06:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FB:47:4B:31:71:0A:E1:F9:FC:49:2A:9D:CE:4B:4B:C9:33:12:EC
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:76:35:c4:b8:37:bd:b7:54:b0:d1:fa:88:22:ae:2e:94:
9c:58:d3:e7:2b:b3:7c:c4:6c:86:d9:b7:4c:20:57:96:00:f0:
05:2d:aa:c8:3a:66:52:27:e1:f8:4f:b3:cc:06:95:a8:3f:59:
f7:eb:14:6b:31:87:5b:20:2a:8c:00:75:59:85:f4:42:ec:cf:
e0:18:bf:49:20:91:c5:8a:2e:d0:dc:80:78:c6:63:b8:02:e2:
95:68:4c:2e:e5:04:61:18:bd:06:d6:e0:a1:c9:f6:85:85:b5:
e6:49:29:3d:bc:57:f0:87:4d:0d:6c:0d:c1:4c:b4:80:17:b5:
db:d8:20:b9:b0:39:77:b8:45:5f:86:3a:22:52:69:35:c9:e7:
67:7b:b4:d8:1e:8d:98:21:6f:35:a5:6d:99:32:de:0b:2d:6e:
81:5a:9e:6b:91:7a:e0:95:38:ba:8d:0a:ce:af:9b:ad:2b:9b:
c5:da:51:19:a7:58:d3:5e:a2:75:8e:9c:16:be:25:e9:74:db:
e6:30:d4:66:92:c7:e7:7d:f2:2b:e9:fb:7d:09:f5:c0:06:23:
c5:4c:ac:bd:a7:be:c2:27:ca:7b:13:33:9a:72:08:5d:57:3c:
1e:60:ec:78:2b:e8:94:09:03:96:be:09:3f:d0:42:fe:c4:df:
a5:9e:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:40 2025 by rpki-client