Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
File: 5777980E886C29F0060C3A073B6E681A8A70574B.mft (raw, json)
Hash identifier: V7gT3V/nRCE9ippoQ41spGiPbnhd9tbhO+694OqlYvw=
Subject key identifier: 80:3C:F7:B3:A1:3F:13:57:F4:0A:DD:19:8C:0B:2C:F9:57:DF:8A:01
Authority key identifier: 57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
Certificate issuer: /CN=5777980e886c29f0060c3a073b6e681a8a70574b
Certificate serial: 28F2233F89343CA8A6B010295C783364B3E4CACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
Manifest number: 0191
Signing time: Fri 31 Jan 2025 09:17:40 +0000
Manifest this update: Fri 31 Jan 2025 09:12:40 +0000
Manifest next update: Sat 01 Feb 2025 12:49:40 +0000
Files and hashes: 1: 5777980E886C29F0060C3A073B6E681A8A70574B.crl (hash: yOebSHjhWJ03jUS4djL9SIRBafxT3iyWldXnkfrNskY=)
2: AS216311.asa (hash: K7m3KVo3vTMDgBc/83DKyhT7Azk3LWdIWk6sAr0WLFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f2:23:3f:89:34:3c:a8:a6:b0:10:29:5c:78:33:64:b3:e4:ca:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5777980e886c29f0060c3a073b6e681a8a70574b
Validity
Not Before: Jan 31 09:12:40 2025 GMT
Not After : Feb 1 12:49:40 2025 GMT
Subject: CN=803CF7B3A13F1357F40ADD198C0B2CF957DF8A01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:27:59:52:79:ee:90:d2:4b:58:f7:a1:77:
95:cf:63:c6:93:4a:f3:a5:bd:07:2a:2f:57:7f:5d:
35:66:2d:69:d3:95:5b:75:3c:19:2a:20:f1:f8:64:
6b:15:cd:de:7a:86:9f:8b:87:6f:35:46:08:ba:9e:
31:3f:ea:a6:43:50:fa:96:ce:01:80:ab:5b:79:9f:
25:f6:4b:b8:be:80:96:56:e8:44:cb:c8:04:cf:ec:
47:e0:81:74:88:ab:7d:63:40:fd:7f:d8:e0:0c:5d:
41:55:bd:9f:1b:9f:10:42:ce:36:9e:cd:30:f7:0d:
3f:c0:a8:68:1e:44:0e:e1:ec:27:c1:6d:92:e1:68:
56:b1:1d:c1:3a:aa:03:d1:52:75:38:76:81:e1:4e:
c4:7d:e0:cb:fb:b2:3f:14:04:3d:81:d2:28:fd:f7:
4e:0a:ca:a6:94:ea:43:5b:4f:9c:e3:4c:01:5f:12:
78:e4:2e:eb:24:51:d3:cf:0a:68:5f:f3:bd:4e:03:
5d:17:c0:23:f1:68:9e:36:f4:f9:b5:b9:92:fb:a3:
dd:f3:6a:3b:6d:f1:9b:85:1c:92:25:2c:b5:03:10:
4e:83:c2:60:b1:25:70:5d:a6:74:2e:32:f0:e3:e2:
4e:2a:af:d7:e9:5c:79:a3:3e:59:74:01:23:2c:43:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:F7:B3:A1:3F:13:57:F4:0A:DD:19:8C:0B:2C:F9:57:DF:8A:01
X509v3 Authority Key Identifier:
keyid:57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:1e:46:cd:9e:5c:79:8c:f1:b8:d5:c6:bb:be:57:55:40:
c8:4d:c7:8b:d0:08:ff:1a:24:1b:3a:84:a1:22:90:7c:63:77:
99:85:dc:5d:96:81:3a:40:c8:f7:e9:7f:5d:75:60:1b:7e:5e:
3e:82:19:7a:16:f1:de:18:0e:93:5f:2d:3a:b8:59:fa:81:01:
02:85:d5:d3:eb:c1:65:25:00:d5:dc:16:78:a0:d9:bf:7a:ac:
53:c5:fb:e7:9b:1c:56:d6:7c:6f:24:0b:e2:d3:9a:ec:c7:58:
0c:90:0b:d5:10:22:63:77:de:74:49:10:20:8e:99:0a:36:1b:
dc:40:d3:0f:6b:fa:e2:0e:b7:50:c8:de:90:d2:24:53:90:5f:
55:a8:c7:0b:93:7d:bc:c8:aa:4d:32:91:7a:71:69:a9:d3:7a:
c8:c1:28:d3:29:4c:c2:79:71:8a:ca:12:be:26:00:1d:54:80:
36:92:d5:c9:99:9b:a1:5c:4e:b7:a7:6e:23:c3:21:82:a8:19:
a0:d3:32:75:f9:a2:11:9a:09:80:dd:c4:f6:bc:ba:03:89:7d:
bb:ef:35:c7:ba:51:76:4a:5a:eb:ec:9e:7a:a7:70:44:13:ff:
db:75:5f:38:3a:64:81:0c:65:5d:c7:01:f4:63:f9:91:02:1a:
e0:bc:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:40 2025 by rpki-client