Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File: AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier: wQgU++TYAxVWiecq5QZySEIXesoEqjpx8qbanQnqy1c=
Subject key identifier: 4F:58:26:7B:1C:89:5B:21:CE:74:BE:7E:22:20:77:22:AE:8D:72:CF
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 564F595126C7A6A5D8E50D1971668B4B02BDD6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number: 025B
Signing time: Fri 31 Jan 2025 10:15:57 +0000
Manifest this update: Fri 31 Jan 2025 10:10:57 +0000
Manifest next update: Sat 01 Feb 2025 12:01:57 +0000
Files and hashes: 1: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: YZ8eYItLef/XiFj/gvgAbWpudz6Xvzb8krrmE9q0YJs=)
2: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: tAX3Go3Y1oszntsjkGYjvxyMi+6BW1lc0B/JhqET5Wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4f:59:51:26:c7:a6:a5:d8:e5:0d:19:71:66:8b:4b:02:bd:d6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Jan 31 10:10:57 2025 GMT
Not After : Feb 1 12:01:57 2025 GMT
Subject: CN=4F58267B1C895B21CE74BE7E22207722AE8D72CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:e7:99:3e:1a:2f:98:78:57:c6:ca:62:0a:
a2:7d:8e:1f:56:33:39:32:83:a6:4d:1c:ef:f2:4b:
7f:a1:a1:40:5c:11:0b:2c:76:14:f7:fb:88:aa:ea:
ec:a9:28:f7:60:92:b0:c1:dd:28:bb:85:c7:f9:31:
ed:3c:a9:31:a2:fd:be:0e:f7:af:ce:e4:2f:c9:b6:
96:af:1e:df:08:08:bb:a9:4d:29:a2:40:63:68:09:
13:c1:96:d4:db:71:b7:47:68:58:d4:b2:ad:21:3c:
06:ef:c1:07:fa:52:be:bb:7f:e8:a5:73:68:21:c8:
6b:c5:1d:f3:2e:29:a5:83:4e:e7:49:ca:f9:61:f1:
b8:64:01:3a:d4:82:b5:2e:41:a8:b7:d9:ec:08:c6:
4d:7b:cb:0d:73:aa:15:10:e8:88:28:35:1d:e6:5d:
af:a7:0f:69:e4:1b:fc:07:ef:c7:41:63:5c:cd:08:
6c:3d:eb:03:1c:6f:35:f0:52:76:2f:b7:ed:21:dc:
9a:94:68:46:aa:20:69:82:11:30:ed:35:b9:c3:a3:
c7:e5:03:c1:15:67:e3:39:06:9c:92:59:89:42:6b:
a7:ab:cc:e8:a1:05:84:15:e1:17:e6:05:51:5f:cf:
29:86:f5:7a:91:36:17:4c:62:d0:b4:03:a8:0f:51:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:26:7B:1C:89:5B:21:CE:74:BE:7E:22:20:77:22:AE:8D:72:CF
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5a:1f:eb:e3:27:65:64:a8:f0:83:e2:50:7a:f7:2e:eb:eb:
4d:2f:dd:bc:33:9a:ac:77:bb:44:21:da:0d:ec:5c:55:ee:8b:
49:d1:20:4f:c8:b3:7e:7d:d9:fd:34:fc:19:3a:ec:2c:3c:ed:
46:eb:05:04:8e:82:31:96:15:ea:8d:f3:5d:bc:2c:74:4a:5a:
3f:5c:37:0d:c0:3c:f4:1d:da:05:b2:de:95:fd:6c:1b:89:33:
d3:20:f6:53:cb:ba:73:96:39:df:a3:f1:97:a2:dc:aa:b0:79:
56:da:79:9a:4c:da:98:3c:f1:74:1e:71:2a:4d:b6:89:69:47:
c1:9e:a7:de:19:4f:6b:88:a3:70:b4:dc:a5:f9:22:17:13:ce:
a2:c9:23:85:eb:0e:da:ac:fb:af:d7:15:5f:46:3b:44:5d:d0:
86:4c:dd:02:b1:81:20:9b:76:07:39:6f:8f:85:76:d1:bd:47:
7d:c0:98:f3:7a:82:ec:c7:61:80:26:db:99:14:9c:5f:56:c3:
cd:0b:40:65:64:83:6e:be:ff:a2:2a:20:28:b7:23:77:45:27:
db:ed:48:2b:b7:5f:72:2a:b5:7b:63:53:31:ca:7e:f9:72:9c:
1d:7e:7c:9d:ba:b0:6b:a5:6b:80:30:20:d8:2a:45:81:58:88:
16:09:c8:40
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVk9ZUSbHpqXY5Q0ZcWaLSwK91vYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWM0MjhjOGVlZDI0MTg1N2Y3M2QwZjNkNDgzYWJlY2Iy
NDA1MTlkMDAeFw0yNTAxMzExMDEwNTdaFw0yNTAyMDExMjAxNTdaMDMxMTAvBgNV
BAMTKDRGNTgyNjdCMUM4OTVCMjFDRTc0QkU3RTIyMjA3NzIyQUU4RDcyQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCateeZPhovmHhXxspiCqJ9jh9W
Mzkyg6ZNHO/yS3+hoUBcEQssdhT3+4iq6uypKPdgkrDB3Si7hcf5Me08qTGi/b4O
96/O5C/JtpavHt8ICLupTSmiQGNoCRPBltTbcbdHaFjUsq0hPAbvwQf6Ur67f+il
c2ghyGvFHfMuKaWDTudJyvlh8bhkATrUgrUuQai32ewIxk17yw1zqhUQ6IgoNR3m
Xa+nD2nkG/wH78dBY1zNCGw96wMcbzXwUnYvt+0h3JqUaEaqIGmCETDtNbnDo8fl
A8EVZ+M5BpySWYlCa6erzOihBYQV4RfmBVFfzymG9XqRNhdMYtC0A6gPUaozAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUT1gmexyJWyHOdL5+IiB3Iq6Ncs8wHwYDVR0j
BBgwFoAUrEKMju0kGFf3PQ89SDq+yyQFGdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTMwOWJkY2UtNzBlMy00NmFlLThmMDUtMGMzYWRhOGY4
YTQyLzAvQUM0MjhDOEVFRDI0MTg1N0Y3M0QwRjNENDgzQUJFQ0IyNDA1MTlEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JFS01qdTBrR0ZmM1BRODlTRHEteXlR
RkdkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xMzA5YmRjZS03
MGUzLTQ2YWUtOGYwNS0wYzNhZGE4ZjhhNDIvMC9BQzQyOEM4RUVEMjQxODU3Rjcz
RDBGM0Q0ODNBQkVDQjI0MDUxOUQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlof6+MnZWSo8IPiUHr3
LuvrTS/dvDOarHe7RCHaDexcVe6LSdEgT8izfn3Z/TT8GTrsLDztRusFBI6CMZYV
6o3zXbwsdEpaP1w3DcA89B3aBbLelf1sG4kz0yD2U8u6c5Y536Pxl6LcqrB5Vtp5
mkzamDzxdB5xKk22iWlHwZ6n3hlPa4ijcLTcpfkiFxPOoskjhesO2qz7r9cVX0Y7
RF3QhkzdArGBIJt2Bzlvj4V20b1HfcCY83qC7MdhgCbbmRScX1bDzQtAZWSDbr7/
oiogKLcjd0Un2+1IK7dfciq1e2NTMcp++XKcHX58nbqwa6VrgDAg2CpFgViIFgnI
QA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:33 2025 by rpki-client