Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json)
Hash identifier: hdGkN3D9MYESgCt37RYvIVyw1Y4Jous9wxFTxFAHHa8=
Subject key identifier: 95:B1:E1:C3:BB:37:2D:09:97:24:CD:19:D2:E7:1C:01:D3:D7:B8:F8
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial: 30277A0B17AA738BF5B0C32A72F612C47017A871
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
Manifest number: 75
Signing time: Fri 31 Jan 2025 06:56:12 +0000
Manifest this update: Fri 31 Jan 2025 06:51:12 +0000
Manifest next update: Sat 01 Feb 2025 10:15:12 +0000
Files and hashes: 1: 326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa (hash: E8taggS6sI4q0LKjH6/GmLcIK3Cj0Fw4lwLi8ILdzT4=)
2: 326131343a373538303a663330303a3a2f34302d3438203d3e20323135343730.roa (hash: X3xnYiPWfIm3B+YPQOjYhBFBsBXuQLEeAv0Jg3YQ+nw=)
3: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: 8Y+7PTat+ZpBF4IrguU+xIcUg1w1+5n31q3o5/IMg6I=)
4: 326131343a373538303a383030303a3a2f33362d3438203d3e20323135343730.roa (hash: ibb68AQAVWJMES3NYRBIOdUeHnGKp+tFUocAxCKgPEU=)
5: 326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa (hash: 7Ht9ysaUQlknniITxiGGZVb7FReUYStDZL1yen2prNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:27:7a:0b:17:aa:73:8b:f5:b0:c3:2a:72:f6:12:c4:70:17:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Validity
Not Before: Jan 31 06:51:12 2025 GMT
Not After : Feb 1 10:15:12 2025 GMT
Subject: CN=95B1E1C3BB372D099724CD19D2E71C01D3D7B8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:02:00:bb:79:24:ed:c6:5c:18:f7:d4:e6:
36:d9:4c:ea:3d:87:ba:90:35:f2:62:db:f8:5f:40:
d4:1f:4d:0e:53:54:ba:b3:4e:19:db:8e:b6:6c:28:
0b:aa:2e:cb:2c:0e:78:7d:0a:a8:cb:3e:33:15:3e:
d7:87:46:66:3f:ed:75:5e:dd:3d:8a:30:22:4f:e0:
a5:52:dc:0b:4e:dc:2f:2a:bd:e6:22:08:64:5e:b8:
a7:a4:43:ca:70:cc:04:62:18:d5:8e:10:2e:29:a8:
72:d3:d5:8d:00:86:eb:75:5d:b5:e7:f5:87:90:4b:
61:00:d7:7f:0f:38:4a:73:94:ed:f7:4a:67:05:f6:
44:6a:d0:4c:9c:d4:b1:8e:40:4f:42:05:1f:38:d8:
e2:ad:2e:68:75:90:49:20:18:9f:d4:15:aa:33:34:
57:a6:cb:52:f0:c5:b7:85:c3:32:fb:85:cc:90:77:
69:0a:f3:f9:b3:fc:d1:76:b3:b1:d7:07:3a:7f:03:
87:06:85:58:17:da:c8:42:a2:d2:9c:3b:f5:86:02:
14:68:94:a7:af:da:12:0a:ac:8f:79:ef:97:03:d0:
ae:38:84:c5:ef:b8:84:1e:ed:0f:cc:2e:3f:76:12:
0b:3c:cc:43:1c:9c:b9:09:28:43:00:06:5f:2b:52:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:E1:C3:BB:37:2D:09:97:24:CD:19:D2:E7:1C:01:D3:D7:B8:F8
X509v3 Authority Key Identifier:
keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0b:11:2b:91:8b:04:07:64:da:06:ec:39:d9:0d:54:59:5e:
f6:6f:79:24:2c:c2:a8:0d:ec:b9:5a:1e:10:22:c7:eb:02:03:
fb:72:24:6a:11:bd:82:ea:04:c4:79:c9:9c:15:66:3b:df:5f:
74:54:97:f4:e6:16:a3:69:46:6d:23:92:d1:d8:fe:2a:b3:11:
48:b8:1c:4b:ef:eb:50:42:db:13:6b:b9:aa:55:93:ab:ee:dc:
31:7e:64:7d:e7:b7:f9:2f:1d:2c:20:36:78:86:94:f3:22:f7:
0f:a9:8a:29:a2:35:bc:e6:d5:bb:d8:a7:4e:b8:53:6c:94:ba:
74:c7:36:43:5c:16:f9:0e:cb:c9:33:8b:e1:f1:7f:fd:18:d4:
87:3c:ca:48:6a:ee:44:46:83:b3:d8:86:05:f8:19:14:b4:3e:
d7:7a:71:54:f5:72:ec:44:9f:04:d4:85:91:8a:4f:74:77:e5:
ab:73:9b:c2:cf:fc:63:82:d5:96:00:82:f5:b0:87:f7:b9:9e:
a3:e6:70:da:7b:10:52:6e:d8:e7:1c:82:c5:08:1c:fa:4c:e3:
42:f1:8c:d2:b6:16:f4:99:ba:75:d7:d0:b4:76:1e:10:14:97:
05:b6:0e:ad:9f:8a:0c:fd:7b:5d:e2:3b:9f:b0:8c:48:72:71:
59:a6:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:02 2025 by rpki-client