Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json)
Hash identifier: 9X07YN7lREaezERRaI444r5QgTAt158/XEui0cOXFL0=
Subject key identifier: D8:56:06:FD:E9:81:00:E0:AE:FB:56:1C:32:B9:38:B3:36:A9:DC:59
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 321AA1A1AF1DA79BC3534AA17BDF01438263FCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
Manifest number: 0357
Signing time: Fri 31 Jan 2025 15:20:57 +0000
Manifest this update: Fri 31 Jan 2025 15:15:57 +0000
Manifest next update: Sat 01 Feb 2025 16:11:57 +0000
Files and hashes: 1: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: sxCRvdRH/61CgPyAucOSXXg3g5Gmmg1S97sa3AiLp/w=)
2: 34362e3138332e33312e302f32342d3234203d3e203537303433.roa (hash: urDbQolUxF5aVDtWGu2mH59UmSzS7WpnvTro/6xbgIc=)
3: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: yMp4N27BXYFMvxFXpYtEzVI3r3SVHmOz4dCZdlG1vnk=)
4: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: UnC4dY5BEMTU+QUmHEUrhfl+EBwa6d4Fy2eujPhitvA=)
5: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: JlUuMcDs9iMbjR7dJiBbcJHNKwygu5z2CyX5rtJmf5E=)
6: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: 93WlArlicDYcrFXuyD5oQHa3ZB3bdIjadlrADmzUdDQ=)
7: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ii72WRjo+pDoTtYybgLKaFsOG8JUV0CPdunTnf7/tAg=)
8: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: eznERkc7DZbwVr+HCdvBRo/nv4eEoy29a9bx8QDzOz0=)
9: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: 3vGg/zcIs+lzLMH2Q8q4NkmXYZWVYFY1Tp5JUxQOmDY=)
10: 34362e3138332e33312e302f32342d3234203d3e203439393831.roa (hash: arGzA1IkQTYBRD/MHHp8jtBu1tZJVEaLDXIN8bTONk4=)
11: 34362e3138332e32392e302f32342d3234203d3e20313734.roa (hash: iFoLwhPM2dsVM0j9MR72yEvFI7xyXfHeaQDbIOf/NSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1a:a1:a1:af:1d:a7:9b:c3:53:4a:a1:7b:df:01:43:82:63:fc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jan 31 15:15:57 2025 GMT
Not After : Feb 1 16:11:57 2025 GMT
Subject: CN=D85606FDE98100E0AEFB561C32B938B336A9DC59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:22:6b:93:82:5d:4c:fd:12:24:a7:fd:60:
69:00:de:89:c9:2f:7d:94:27:f9:85:e1:dd:d2:93:
8f:ec:67:ed:06:6d:90:81:44:bb:19:17:84:26:80:
d1:35:13:6c:e7:81:e2:64:60:a2:fc:61:67:ff:ec:
5f:c8:c5:1f:ea:de:d1:4a:d1:21:c7:1d:b1:04:a2:
b3:5f:c6:e9:80:95:84:c1:b2:00:2b:44:2b:c5:b4:
dd:1c:e4:3b:33:09:01:1b:11:15:f6:7c:7d:e1:19:
70:ab:d0:ef:a7:58:cf:b2:b9:de:a3:47:7d:8f:6b:
aa:7f:45:18:3c:b8:f6:56:9a:cb:80:90:79:9c:0c:
7b:19:66:78:c3:14:48:3b:ad:fa:88:74:82:66:33:
c6:c9:74:2b:e1:fe:b3:12:40:be:d9:64:ba:c7:1a:
a9:60:91:c3:76:3f:e9:55:f6:75:44:cc:ac:d1:69:
ad:44:72:b1:ef:f6:05:08:43:8d:c0:6f:a6:cd:54:
21:ba:d8:ba:75:c9:59:56:a8:ef:30:31:fa:a7:46:
e7:1d:a1:ab:9f:77:fa:ee:32:64:ab:23:bf:2b:93:
d4:07:64:fb:d7:a2:7e:43:8a:15:39:de:e4:5b:e7:
a0:6c:6b:43:6d:a0:c5:44:8e:8a:b1:35:69:b0:fb:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:06:FD:E9:81:00:E0:AE:FB:56:1C:32:B9:38:B3:36:A9:DC:59
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:eb:d5:eb:6b:ed:df:59:93:ec:5f:29:64:01:67:00:d1:
76:d7:e7:e6:32:93:19:33:6f:8c:23:b3:15:f6:9b:87:d2:7b:
4a:7c:d0:d6:19:d7:95:c5:de:f8:6f:2e:41:10:13:5c:49:c9:
2e:c8:4b:93:ea:85:a9:58:8e:6b:b7:39:fa:b1:5b:c0:57:10:
82:69:53:b3:19:a7:6e:32:aa:06:75:95:a4:a3:2a:19:cf:b2:
3d:68:cf:d7:88:cd:a6:7d:d3:38:ae:6b:08:d4:35:5b:17:93:
97:4a:08:73:ab:1a:50:8b:84:7c:20:94:ec:76:ca:ab:05:ba:
16:25:51:03:0b:35:fb:f7:27:56:34:83:6a:ee:b6:27:de:83:
c3:39:62:d9:89:6b:58:8b:f1:03:3e:0f:8e:ff:b4:1c:88:d8:
52:94:17:73:fc:2b:36:7d:62:00:27:78:66:3e:b5:a7:95:41:
d7:bc:da:5f:66:51:47:fe:0a:f8:1e:49:08:36:84:6a:19:c0:
e6:d0:61:ad:53:9c:71:d5:6b:2e:7c:ad:35:bc:44:bf:7a:fa:
d7:3e:21:d1:5f:59:13:7c:37:03:6d:2a:c7:d2:19:c6:d9:31:
2d:0e:10:b4:b2:8f:8f:50:3c:cc:87:61:58:c6:0e:a6:ff:12:
58:0c:13:ce
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMhqhoa8dp5vDU0qhe98BQ4Jj/LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yNTAxMzExNTE1NTdaFw0yNTAyMDExNjExNTdaMDMxMTAvBgNV
BAMTKEQ4NTYwNkZERTk4MTAwRTBBRUZCNTYxQzMyQjkzOEIzMzZBOURDNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWkCJrk4JdTP0SJKf9YGkA3onJ
L32UJ/mF4d3Sk4/sZ+0GbZCBRLsZF4QmgNE1E2zngeJkYKL8YWf/7F/IxR/q3tFK
0SHHHbEEorNfxumAlYTBsgArRCvFtN0c5DszCQEbERX2fH3hGXCr0O+nWM+yud6j
R32Pa6p/RRg8uPZWmsuAkHmcDHsZZnjDFEg7rfqIdIJmM8bJdCvh/rMSQL7ZZLrH
GqlgkcN2P+lV9nVEzKzRaa1EcrHv9gUIQ43Ab6bNVCG62Lp1yVlWqO8wMfqnRucd
oaufd/ruMmSrI78rk9QHZPvXon5DihU53uRb56Bsa0NtoMVEjoqxNWmw+/RpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2FYG/emBAOCu+1YcMrk4szap3FkwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02
ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB
ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkPr1etr7d9Zk+xfKWQB
ZwDRdtfn5jKTGTNvjCOzFfabh9J7SnzQ1hnXlcXe+G8uQRATXEnJLshLk+qFqViO
a7c5+rFbwFcQgmlTsxmnbjKqBnWVpKMqGc+yPWjP14jNpn3TOK5rCNQ1WxeTl0oI
c6saUIuEfCCU7HbKqwW6FiVRAws1+/cnVjSDau62J96Dwzli2YlrWIvxAz4Pjv+0
HIjYUpQXc/wrNn1iACd4Zj61p5VB17zaX2ZRR/4K+B5JCDaEahnA5tBhrVOccdVr
LnytNbxEv3r61z4h0V9ZE3w3A20qx9IZxtkxLQ4QtLKPj1A8zIdhWMYOpv8SWAwT
zg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:59 2025 by rpki-client