
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
File: B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft (raw, json)
Hash identifier: PS512VSlOiHlVxQ16T8ZbZrt/Rxa5kfiLV//5M3LEgI=
Subject key identifier: 09:6F:4D:D0:D4:EE:EE:53:04:9C:13:39:20:23:F6:32:C2:91:03:2D
Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
Certificate issuer: /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
Certificate serial: 7FF0CB597ABD1F5ACB83A5D3329CC5D5E39A0B8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
Manifest number: 8D
Signing time: Wed 21 May 2025 17:36:09 +0000
Manifest this update: Wed 21 May 2025 17:31:09 +0000
Manifest next update: Thu 22 May 2025 19:21:09 +0000
Files and hashes: 1: B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl (hash: TAnuGhZmVz3uXR2dtSqqDQZ06KLTMhIMlfuk9dCpjzM=)
2: 326130393a353463333a3a2f33322d3438203d3e20323135313437.roa (hash: Hh49k+Xt2ffEnf+1AdAQ2KRXHiXFSnVa9rayhA3bylc=)
3: 326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa (hash: DYKApsC0Xy9yKLi3q0BaMZa16VHMvjlxYhlK7Vyadxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f0:cb:59:7a:bd:1f:5a:cb:83:a5:d3:32:9c:c5:d5:e3:9a:0b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
Validity
Not Before: May 21 17:31:09 2025 GMT
Not After : May 22 19:21:09 2025 GMT
Subject: CN=096F4DD0D4EEEE53049C13392023F632C291032D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:3d:09:b8:f4:a1:5e:18:16:ea:30:cd:02:
69:1d:be:d7:09:3f:b9:cf:83:bf:90:db:22:61:bf:
b4:8c:89:27:7b:ef:ce:82:65:49:1c:a7:6c:f4:66:
44:9f:41:a6:96:93:08:eb:e2:93:02:d7:e4:2f:dd:
91:85:06:6b:34:bd:c0:9d:cd:c8:85:35:98:e0:aa:
85:a9:80:59:d0:2f:69:2f:e5:29:32:be:af:02:4d:
5c:65:71:f7:89:e6:7e:ac:80:8b:ba:54:52:7f:a2:
6b:6f:57:e0:cd:73:ee:6c:7e:07:5b:bb:ec:17:82:
0c:77:47:97:56:85:05:b9:42:a1:ca:aa:0a:80:3b:
31:d3:08:9a:e9:e6:05:22:66:57:74:6e:9a:48:91:
4e:f1:54:b9:48:71:6e:84:22:42:dc:cc:ea:d2:6e:
34:c9:ff:af:ca:4f:eb:69:45:aa:58:00:e8:9b:93:
d5:1a:9a:aa:32:35:36:45:db:8a:09:ba:bf:87:f7:
c0:60:03:79:36:9a:56:69:58:15:2b:c0:9b:0c:cb:
f4:57:0d:ab:92:94:ff:c3:f1:60:90:6a:4a:eb:c4:
7a:8d:fa:5e:1b:ff:63:c4:c1:ec:b1:1a:a2:e2:c8:
34:ee:53:0f:f8:4c:e7:92:12:ef:50:22:f0:8d:73:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:4D:D0:D4:EE:EE:53:04:9C:13:39:20:23:F6:32:C2:91:03:2D
X509v3 Authority Key Identifier:
keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:47:3e:d5:43:ed:f9:cf:fb:7b:3f:cc:d1:ee:11:7f:84:56:
eb:57:28:e6:d5:05:9c:94:96:ad:08:f0:db:2a:d2:0c:56:aa:
ef:83:ea:cb:84:e6:ca:3b:0f:cc:77:b4:4c:6c:f9:a6:a8:2e:
d1:76:61:2c:22:23:3a:cf:f3:57:54:f7:4a:3b:c8:da:34:6f:
7c:aa:e3:09:10:91:2d:7b:b9:11:db:64:96:e2:62:db:2a:0c:
7d:ba:a2:71:e9:45:a1:98:b4:d9:83:9f:4d:3d:f3:b8:1b:e0:
38:17:51:30:87:7c:08:3a:c4:c6:1c:cd:88:d8:a0:09:d9:83:
95:ca:5c:39:09:42:c0:1f:b5:ac:07:44:24:7d:07:84:db:7b:
ec:b9:db:c4:99:0c:4d:b4:a8:ef:c0:59:32:95:c1:84:04:33:
4f:e3:56:a1:6a:50:fa:b2:fa:bb:03:2c:30:03:79:41:c8:a4:
9e:4e:5d:f4:32:8c:0f:38:fa:80:ad:48:5c:28:01:e5:55:ed:
d5:6b:78:c7:12:7a:4e:44:7a:83:2e:66:85:bd:5e:59:80:de:
0b:94:a5:c1:09:ce:86:33:0b:96:79:cb:88:78:3a:ba:eb:85:
09:cb:ac:19:d2:85:46:96:d7:ec:49:07:e9:e1:9a:90:81:b6:
cc:3f:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:42 2025 by rpki-client