Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: uMBII60/Tz7N1Fs9PIdJOHkZF97Ziq6O2LZAKlRjaws=
Subject key identifier: 78:BA:59:4A:6D:51:62:86:00:96:9E:4A:9F:6D:17:DA:F5:09:F2:3F
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 0194BCAA3CB4FC9111B9C4CE3DC97956AE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 04FE
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: pGAPkMJu1B6A85TXsvtnjPuWQp9HxkRaJKIVGmeWfvE=)
2: wilpaK1V0r35ZNvUw0OLpxxalHM.roa (hash: cc48kr9ntP1AGZHGu6VbcBWoFsvg/tsNceyhXPWuzak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:b4:fc:91:11:b9:c4:ce:3d:c9:79:56:ae:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=78ba594a6d51628600969e4a9f6d17daf509f23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:85:22:fb:ba:5f:33:cf:6a:46:10:4c:c8:
4e:f5:7e:70:b1:5f:ad:48:d1:a8:ee:72:b7:9c:9e:
9f:f7:df:ad:ee:23:b2:71:1e:a6:0a:3b:ef:a1:53:
a5:ba:8a:62:90:3b:65:ac:f8:6a:cf:ec:04:e7:33:
da:57:28:fe:e9:a0:85:e4:5d:88:cc:b1:8a:68:2d:
aa:9f:01:53:ed:83:52:38:ee:90:79:84:d3:c9:aa:
51:16:b9:7b:3c:7b:55:00:3d:57:75:f0:d0:0d:73:
cd:54:bb:d1:9b:26:ff:07:25:50:03:ae:cb:21:53:
34:e1:60:cf:e7:b4:66:c1:43:1e:c2:55:23:0b:a0:
6e:bf:ad:6d:4c:25:3c:81:08:e0:0b:b0:b8:3c:f3:
73:d8:c0:52:6f:9d:c7:68:1a:14:d9:f7:0a:2c:48:
9c:28:d1:4c:0e:99:6f:cd:b9:be:75:e7:11:80:a9:
72:85:7e:98:11:20:16:1c:61:58:3b:e1:1a:db:04:
e2:c2:4f:4e:af:b1:5d:d2:fb:c7:f5:3a:69:67:8e:
5d:f2:d4:0e:c1:d5:f6:4b:4f:94:5f:41:de:eb:b5:
ac:ee:74:13:88:33:41:22:19:1b:90:87:83:67:8d:
64:90:a3:00:9c:f4:5f:ae:21:01:03:ab:e5:17:52:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:59:4A:6D:51:62:86:00:96:9E:4A:9F:6D:17:DA:F5:09:F2:3F
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1c:dc:49:0a:05:ec:0f:1c:37:ff:70:5a:c2:b6:71:09:18:
8b:78:9e:86:20:91:42:31:46:b3:bf:1b:11:2f:b4:20:15:c0:
41:ee:f0:94:92:08:d2:90:95:42:e3:12:d3:df:dd:61:b8:f4:
34:3d:71:87:dd:a8:9d:e9:8d:38:fa:fc:d5:26:19:a3:92:48:
4a:2a:e9:ae:cf:cd:88:ea:5b:8d:40:7a:ef:8b:ad:c6:92:3d:
1e:6a:14:72:d9:e9:6d:e4:aa:e2:6a:85:f7:b5:37:ab:3e:28:
ca:7b:22:a2:aa:a7:e5:c3:73:aa:e1:9c:da:ef:f7:3d:3f:0c:
47:b1:e4:a6:9c:2a:c7:87:d1:e3:b4:9e:31:f8:20:79:2d:4f:
f6:81:b5:65:d2:3c:09:65:6a:61:40:1a:5e:5a:81:fa:28:39:
51:8e:92:cd:d0:7a:83:43:fe:f0:18:9b:a8:da:54:5b:49:21:
6f:04:e8:fc:0c:ee:8f:f8:98:fc:3d:ed:ad:cf:1b:56:75:42:
2a:ee:7f:a5:91:8d:46:58:66:5d:2e:07:d2:ce:1b:67:06:12:
eb:f3:ea:00:84:14:ce:4e:5f:56:91:0a:ec:e9:f2:27:d1:74:
f7:7c:40:ee:d6:76:d4:79:08:7a:36:1a:a1:92:7d:af:43:85:
ac:94:af:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjy0/JERucTOPcl5Vq4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjM0MDM1MzA0OThkODI1ZjJlNzg4YTA3NjUwM2JjOWRj
ZTE1NzQwHhcNMjUwMTMxMTQwMTAwWhcNMjUwMjAxMTQwMTAwWjAzMTEwLwYDVQQD
Eyg3OGJhNTk0YTZkNTE2Mjg2MDA5NjllNGE5ZjZkMTdkYWY1MDlmMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiweFIvu6XzPPakYQTMhO9X5wsV+t
SNGo7nK3nJ6f99+t7iOycR6mCjvvoVOluopikDtlrPhqz+wE5zPaVyj+6aCF5F2I
zLGKaC2qnwFT7YNSOO6QeYTTyapRFrl7PHtVAD1XdfDQDXPNVLvRmyb/ByVQA67L
IVM04WDP57RmwUMewlUjC6Buv61tTCU8gQjgC7C4PPNz2MBSb53HaBoU2fcKLEic
KNFMDplvzbm+decRgKlyhX6YESAWHGFYO+Ea2wTiwk9Or7Fd0vvH9TppZ45d8tQO
wdX2S0+UX0He67Ws7nQTiDNBIhkbkIeDZ41kkKMAnPRfriEBA6vlF1IP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHi6WUptUWKGAJaeSp9tF9r1CfI/MB8GA1UdIwQY
MBaAFPezQDUwSY2CXy54igdlA7ydzhV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQt
NDBkZDJjNzVmMWI3LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQtNDBkZDJjNzVmMWI3
LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhzcSQoF
7A8cN/9wWsK2cQkYi3iehiCRQjFGs78bES+0IBXAQe7wlJII0pCVQuMS09/dYbj0
ND1xh92onemNOPr81SYZo5JISirprs/NiOpbjUB674utxpI9HmoUctnpbeSq4mqF
97U3qz4oynsioqqn5cNzquGc2u/3PT8MR7Hkppwqx4fR47SeMfggeS1P9oG1ZdI8
CWVqYUAaXlqB+ig5UY6SzdB6g0P+8BibqNpUW0khbwTo/Azuj/iY/D3trc8bVnVC
Ku5/pZGNRlhmXS4H0s4bZwYS6/PqAIQUzk5fVpEK7OnyJ9F093xA7tZ21HkIejYa
oZJ9r0OFrJSvxw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:12 2025 by rpki-client