Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
File: C746AC47360523A8D817C5EA638AE186912619C1.mft (raw, json)
Hash identifier: IVhEmQR20FlWOc0EFcrtt6rZ32PVm4Sb5GiKLCuYfUQ=
Subject key identifier: 16:DE:37:C6:A2:C5:DB:E8:73:3F:99:8F:6B:AB:C9:90:63:19:59:57
Authority key identifier: C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1
Certificate issuer: /CN=c746ac47360523a8d817c5ea638ae186912619c1
Certificate serial: 31A57B1949E6396A278CA0B6BB630ED624D15259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
Manifest number: 21
Signing time: Fri 31 Jan 2025 13:53:46 +0000
Manifest this update: Fri 31 Jan 2025 13:48:46 +0000
Manifest next update: Sat 01 Feb 2025 17:46:46 +0000
Files and hashes: 1: AS199310.asa (hash: 3SenAcT/sG+XKGJDs0XQEVL6gOlPaxNYROzeTSq5Nh4=)
2: C746AC47360523A8D817C5EA638AE186912619C1.crl (hash: +ReFRTPiY7WcgCCGLAlIW5hAnUnDdiKgTWLxOYjd73M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a5:7b:19:49:e6:39:6a:27:8c:a0:b6:bb:63:0e:d6:24:d1:52:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746ac47360523a8d817c5ea638ae186912619c1
Validity
Not Before: Jan 31 13:48:46 2025 GMT
Not After : Feb 1 17:46:46 2025 GMT
Subject: CN=16DE37C6A2C5DBE8733F998F6BABC99063195957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:7b:b4:cb:3a:6c:42:b5:1b:79:9f:5c:39:
ed:c4:5a:8b:27:b5:14:56:0b:59:a0:c7:4a:ff:2a:
68:75:d2:56:b2:fc:5c:d2:9b:42:fb:30:9f:77:6b:
dc:0d:4e:40:02:34:35:a0:9a:e8:40:b9:4c:98:65:
9b:08:6d:24:af:ef:45:72:e9:42:c4:97:e4:2f:54:
e1:96:23:13:db:c7:d3:f7:5d:17:72:1c:17:1d:56:
83:92:30:e4:2a:a6:a5:95:03:af:92:78:36:c0:ff:
e4:84:42:5d:00:68:bc:3c:86:01:c3:98:88:5a:aa:
c5:7c:a6:20:bd:ec:5b:be:b2:17:d7:2c:dd:4a:f8:
fa:57:f5:9a:b7:9f:77:b4:80:d6:16:e3:8b:b2:2f:
1a:70:0d:a9:ac:8e:99:11:6c:4a:cf:54:a0:b6:45:
02:fc:7b:d0:c0:d2:84:0d:b7:e0:85:c7:41:50:33:
b0:3e:48:71:1a:04:80:38:e7:04:a4:67:f6:90:69:
ac:2d:f2:3d:23:59:ef:7c:0a:f4:7f:77:f8:89:8c:
7d:17:0b:53:d9:52:2f:88:9f:b4:e8:26:90:ac:0b:
d8:29:7b:36:12:fc:0c:8b:07:8b:61:79:62:be:47:
65:36:02:de:b2:fd:85:69:89:a1:f7:86:39:93:e1:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DE:37:C6:A2:C5:DB:E8:73:3F:99:8F:6B:AB:C9:90:63:19:59:57
X509v3 Authority Key Identifier:
keyid:C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:69:5b:b4:52:7f:32:c6:13:5f:d7:c6:f0:9d:98:fa:f6:6f:
37:7f:a3:7b:e6:73:86:da:cb:6b:74:78:07:6d:2f:9f:91:4d:
b6:e6:82:04:8a:e2:dd:cd:1c:30:d8:5f:6e:d1:34:32:a5:d6:
c2:3e:9e:1f:3a:be:17:83:14:5b:7c:83:b1:b9:2e:9b:67:84:
bf:f5:03:37:52:a6:a0:d5:38:c5:df:60:43:0e:c3:41:b2:a5:
fb:f1:3d:5b:08:9d:29:e2:dc:39:89:44:ac:f4:fa:cc:3c:8c:
07:44:8d:99:8b:d3:f8:58:6a:7e:7d:c7:ea:ce:8d:1a:64:ad:
00:60:8c:63:7c:70:1d:57:cc:f2:94:3c:6d:6c:63:cd:62:3c:
9c:93:17:d7:ad:60:75:cc:dd:91:7e:33:35:d8:01:86:56:60:
a0:53:65:d4:c7:71:47:15:30:c4:e3:0c:a0:69:af:d1:ff:42:
a2:f2:e9:6e:61:b2:f8:c9:1f:f0:ae:44:60:8f:11:75:8b:1d:
d5:0c:1a:27:7b:f9:ed:7c:94:b8:df:52:89:47:8b:1a:6e:19:
79:42:15:7f:77:fd:49:b6:89:69:e2:db:a4:ca:91:83:a9:2a:
f4:32:de:65:82:43:27:a3:22:8d:4f:bd:4b:f4:ff:93:bc:2e:
ba:c0:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:59 2025 by rpki-client