Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: kA6+NPtdtY/SoAv5TwMpU1iuL9wYiA3VUb8hg+jhlFA=
Subject key identifier: 6D:05:43:6D:FE:C0:95:FF:8D:18:19:C4:30:3B:C1:10:50:BE:9E:94
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 104AA01612529DADBF5C780F6DFDE22C58717FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 027A
Signing time: Fri 31 Jan 2025 01:37:45 +0000
Manifest this update: Fri 31 Jan 2025 01:32:45 +0000
Manifest next update: Sat 01 Feb 2025 04:46:45 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 5Xg+yfRr165EYTAqZPHF4RTzK6O7E45TSD7GdE2R270=)
2: AS203843.asa (hash: qX+l1dBRKwZSzYI/AVRPyqzPrjYzoXTkhMicg1N7sv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:4a:a0:16:12:52:9d:ad:bf:5c:78:0f:6d:fd:e2:2c:58:71:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Jan 31 01:32:45 2025 GMT
Not After : Feb 1 04:46:45 2025 GMT
Subject: CN=6D05436DFEC095FF8D1819C4303BC11050BE9E94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:c9:ce:1a:1f:0f:b9:9a:21:5b:75:31:ac:
bd:fb:bb:40:ce:73:bf:d4:7c:1f:1a:37:9b:60:6a:
df:dc:b1:19:14:74:82:a2:9e:7d:00:ed:89:15:d0:
b8:a8:84:60:ef:8c:08:20:a4:4b:a0:b2:af:45:77:
b6:5c:34:ea:b7:65:c8:27:ec:31:e8:d1:56:e1:c0:
b5:72:ca:d9:fe:f5:11:b7:34:df:bf:b4:5a:e3:6b:
89:30:ab:07:8b:94:6b:fd:9e:6d:75:21:fd:78:02:
60:4e:e0:40:10:bc:89:9a:82:30:d8:c4:c2:50:a2:
28:02:c4:c8:b0:43:9a:75:bf:12:1c:ec:21:d8:2a:
2b:26:20:af:57:16:eb:3c:13:d3:92:74:eb:06:3b:
25:09:f4:1b:c1:f6:30:05:49:f3:13:cc:8d:1e:cf:
e5:2b:f0:04:e4:b7:5e:79:f1:7d:30:fc:0e:df:8b:
89:e9:31:bb:b8:1e:6f:eb:74:6a:af:22:94:e7:9f:
b0:54:ba:2f:e9:92:46:b4:3c:69:23:9a:1b:64:9d:
1a:5f:bd:ba:b9:59:47:3c:8d:1e:7d:18:1a:70:3e:
54:70:c9:f0:ed:02:43:99:e3:39:91:3c:a2:1c:36:
d4:f4:1a:76:b8:73:ef:ed:67:f2:3d:69:db:4d:f5:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:43:6D:FE:C0:95:FF:8D:18:19:C4:30:3B:C1:10:50:BE:9E:94
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ac:ef:7b:f4:37:f0:9e:da:dc:a3:8c:5e:cb:58:21:f5:a9:
58:2f:b5:85:70:9d:94:91:e6:0a:dc:4e:2e:83:59:c5:cb:31:
e4:ea:62:a8:cb:28:72:76:d7:10:c7:df:7b:7a:16:3b:77:4b:
ac:bb:fd:94:84:6f:9a:6e:17:50:1e:a4:4a:3b:e4:fb:ac:54:
92:ed:7b:c4:25:7b:9d:73:68:36:3c:8e:23:2f:6e:be:99:39:
22:26:94:09:e5:db:3a:b4:c3:bd:27:dc:d0:37:93:6d:46:02:
d1:07:e6:b6:df:52:d2:30:42:6f:7f:c7:b9:ba:34:20:f4:6f:
59:2f:08:96:f0:a4:53:12:4e:8b:1c:0a:d8:bd:e1:98:a1:f3:
79:66:b5:11:e2:8d:a7:e8:a8:09:06:13:46:a3:6e:5e:d5:29:
a3:d0:8d:40:2e:2c:42:65:ce:b5:aa:03:ac:79:07:be:09:43:
2c:34:27:46:73:07:f7:66:2d:d0:69:77:72:73:11:00:38:46:
23:76:3e:0b:c8:72:c8:9e:fb:c2:39:dc:11:46:de:5a:68:4b:
23:cb:c7:aa:08:68:96:70:ad:9a:55:b1:c4:bc:b0:67:c6:6a:
52:e3:a6:17:a5:10:c9:55:11:5c:8e:9f:e2:2b:ec:c7:4c:6e:
0b:99:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:42 2025 by rpki-client