Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File: 96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier: w7TZeSR5nHje0mHfLmasIP7LaXRqIfW37j/6MxEJoeo=
Subject key identifier: FB:C8:4E:57:36:E4:CB:C9:90:8C:5C:8C:F8:48:F7:F4:CB:D9:34:B0
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer: /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial: 0194BD1769ACB9E36E39F773363104221103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 5pSATMPZ0p7gsB8mMb7VRMdgILk.roa (hash: n6iETK+1U2jYxCvuN/hxrmzW6QRPJ6PVi/YnvpAOe54=)
2: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: 75Vs00MgRuaiR6mp98G4YHleEjjQGGDwn1FmmuS5TDg=)
3: HOzDSyhci1oqkFYg_HbCSVURV70.roa (hash: nhIbLdZhFO91+DXj7DSINlsbz0bS+HiCo4ktiLJuf1I=)
4: HTtaJI7F0HZATXXascx3TmNByxo.roa (hash: d5j76fTLUAV6ovcqXej2UO/z7lwi9LauG77wR6/wZRE=)
5: Zc3EPNVFRcdWBGFghDwIYYsiutk.roa (hash: m81UKM1wAmpf9BPJ2gZjuvXEWH2Fd1esmxulacEVZrY=)
6: jEK1d3vUN0cIlA-uXNamjthkOwI.roa (hash: 41tF5GEIsjhhQFzZ4Z9ebWeIwUkdNFTY9RSR2SItUCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:69:ac:b9:e3:6e:39:f7:73:36:31:04:22:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=fbc84e5736e4cbc9908c5c8cf848f7f4cbd934b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:0e:46:bc:b5:6c:98:72:d2:59:49:36:08:
26:5a:2c:a6:32:13:76:86:5a:25:a2:19:dc:aa:b7:
04:d9:86:5f:6a:df:d6:2c:ff:d1:16:7e:5a:37:f5:
28:79:05:5b:9e:11:24:9a:e5:7d:6f:6a:a6:05:a0:
69:69:c0:f7:0b:d5:68:8e:a3:64:f3:f7:3c:4a:a6:
fe:70:04:79:33:31:eb:4d:f9:1d:d2:af:1f:e5:1a:
8c:db:58:6e:ff:c9:66:1c:55:1c:f6:0e:1a:c1:7a:
7f:7c:1f:55:90:78:5a:c9:11:ce:cf:47:2e:5f:d0:
64:21:68:a0:a3:5d:4c:af:1a:81:40:19:d5:9b:c5:
f1:1c:e7:86:a2:93:44:83:86:d7:bf:75:77:a7:b9:
88:26:79:b7:41:a3:ce:56:26:7f:e7:87:66:fa:c9:
54:eb:23:ff:d3:ff:6a:a0:e2:a5:45:06:11:d3:5c:
1e:48:fc:46:b5:ac:ff:fa:5e:47:ab:f3:4a:1d:3e:
dc:13:cf:e6:59:05:f8:89:83:32:c9:28:85:13:9d:
0c:c8:3e:71:ba:d6:84:26:30:64:49:ee:21:76:b2:
3e:7a:2b:f2:b6:a2:5c:ee:5b:0a:65:f9:1b:15:01:
f5:d2:5e:1d:52:91:e6:82:c2:a3:10:ff:33:1d:fe:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C8:4E:57:36:E4:CB:C9:90:8C:5C:8C:F8:48:F7:F4:CB:D9:34:B0
X509v3 Authority Key Identifier:
keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:81:0d:e7:1e:bd:29:4b:f2:2a:06:87:27:53:10:ea:30:
5a:3f:9c:9c:46:0a:7c:20:d8:a1:a0:b1:a0:77:80:8c:b6:e8:
f0:e2:81:ae:3d:bc:e4:e7:bf:dc:8b:f9:3b:3d:d8:ce:be:15:
7b:76:60:81:17:1a:55:62:1d:2e:fe:8f:50:da:b7:22:4f:b5:
5b:c4:f1:8d:7b:8d:03:18:81:66:bc:de:f1:84:ba:36:96:41:
ac:7b:95:05:d0:83:28:83:e0:1d:6d:22:55:39:e8:76:70:56:
dc:fb:7d:1c:97:d6:6f:a2:65:df:b4:9c:10:41:3c:f2:95:d1:
dd:bd:78:9d:c3:0a:4a:3f:ef:d6:d7:c1:98:54:c1:79:39:68:
00:19:20:af:f0:e3:f8:2b:ca:f2:38:91:9d:01:37:6c:b8:4f:
d8:0d:12:46:e7:50:3b:38:89:00:d4:37:f5:cb:22:28:2b:4a:
a4:c1:39:a4:0e:15:80:c9:1f:e8:11:01:7e:45:39:c8:b0:2e:
e1:c0:b9:db:e5:a2:3a:3b:ef:7e:5e:cb:93:e2:2d:98:64:bd:
ba:06:0e:23:ae:85:bc:62:4c:de:16:76:60:93:e2:cc:69:53:
4b:b8:43:8f:24:0c:ad:21:f8:e3:b1:f6:17:54:47:71:55:a8:
7e:0d:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:43 2025 by rpki-client