Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier: xsjgcuR8qzIRAXZWpQs334cX1EarnaRU5yPVQaPqDlU=
Subject key identifier: 96:8D:59:4B:13:33:AA:11:D7:77:65:56:94:FA:87:B2:29:04:1A:60
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 0194BC73061BEFDFDF3F704DB46C40F5C340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=)
2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: tWtULAFTd7Y6i6ZbZldEXZak1VaMF6rRwWqLYwLJ1fs=)
3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=)
4: qqV2GYRrmbyUVqWNJgyRU1ckeZ4.roa (hash: c1XQtreZPdPfIPdsWXkoKiXRjwhEMOyVYtqVV4vEo5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:06:1b:ef:df:df:3f:70:4d:b4:6c:40:f5:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=968d594b1333aa11d777655694fa87b229041a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:d1:44:65:01:3c:b9:b5:fd:c2:bb:34:85:
3e:46:22:5e:b9:31:ec:27:f2:84:6c:ec:83:86:e9:
13:8c:40:26:12:20:1f:87:bd:1a:eb:5b:e4:df:d2:
a4:4f:e0:bc:a3:81:b7:eb:a2:a3:b9:0d:91:d6:86:
d2:5e:b5:88:e2:c5:1f:ff:3c:93:85:6a:63:36:e0:
cc:be:fe:8f:9f:69:56:fa:35:fe:cb:29:eb:a9:76:
c7:ec:55:e0:38:c8:43:c8:68:00:07:f6:f6:dd:d5:
25:df:14:fe:58:26:dd:ff:64:57:67:25:a7:ec:7b:
ec:3d:6c:53:23:f0:55:02:ba:e0:64:e8:0b:25:78:
a3:17:c4:51:15:cf:31:a4:b0:4e:32:33:b3:44:dd:
9c:0f:b4:e0:6f:19:07:8a:33:33:f6:bc:2b:23:b6:
38:7b:c0:8f:45:ab:bc:e3:a7:ac:1f:ff:9f:f4:e4:
0f:ab:a1:e4:71:ee:bc:38:08:e8:f1:85:59:95:7c:
5e:97:4d:54:0c:11:83:73:90:54:1c:97:81:fd:3a:
4b:14:d4:4c:b1:cb:53:85:0d:91:4b:09:32:a3:4f:
6a:61:13:74:f0:4f:93:e7:f0:76:bd:ba:75:23:78:
4a:15:01:fa:96:83:65:78:3d:67:20:e2:b9:84:fe:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:59:4B:13:33:AA:11:D7:77:65:56:94:FA:87:B2:29:04:1A:60
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:93:8c:ab:49:8d:39:5d:1d:e5:de:b3:80:74:e8:c8:0e:3c:
10:6c:82:01:1a:cd:20:ec:fa:b8:53:1f:63:48:6e:52:ed:ab:
5d:5f:28:5e:5d:9f:21:8a:93:35:fd:99:e2:f9:da:9e:fe:d6:
66:e4:bc:f6:f5:99:66:dd:a4:38:1c:43:b9:a6:0a:ab:44:a8:
f8:12:c1:bb:0e:06:6f:34:ca:82:92:f3:bf:ff:31:d2:37:a5:
4f:f6:88:78:6b:c1:a2:7a:74:d7:12:3e:e2:6c:af:e2:6f:ce:
b9:fe:cc:67:6f:ab:cb:f6:21:e2:4b:5a:54:44:92:5a:91:2f:
aa:18:b6:c0:1e:87:80:71:8a:f8:c1:af:f2:12:77:d2:0b:d0:
67:76:fe:86:7c:54:df:0d:03:53:76:8e:56:cf:24:f5:25:c2:
a7:70:df:27:61:ce:ec:0b:23:4f:9a:d4:23:ea:ac:81:12:d9:
77:d1:d7:8b:d9:de:52:49:b7:c2:de:a8:74:44:a5:5d:2c:5d:
28:0d:65:d1:63:52:13:04:9c:f0:3a:9f:e0:39:14:fc:48:89:
05:97:a9:da:1b:91:c5:0b:57:0e:49:13:c1:2d:e5:9a:6f:86:
98:e1:d0:79:05:d1:64:cc:74:57:ab:86:9f:4b:0a:2f:28:66:
c0:1b:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:08 2025 by rpki-client