Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json)
Hash identifier: QzTIRHJ59qDaZX+AEBS4dDElZDBaKIU4hUTE/lljInk=
Subject key identifier: 3D:C4:B9:BC:41:35:5C:AC:FB:E6:D7:77:FB:5E:E5:73:D7:A3:69:C5
Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Certificate serial: 2A8825F5E1B998E210B107D116599C571FFF8C99
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
Manifest number: 57
Signing time: Fri 31 Jan 2025 04:31:12 +0000
Manifest this update: Fri 31 Jan 2025 04:26:12 +0000
Manifest next update: Sat 01 Feb 2025 06:42:12 +0000
Files and hashes: 1: 326130663a383563313a3339303a3a2f34382d3438203d3e20323034383434.roa (hash: K4hkbHkiUdvhXEPzKZviXsShKnt+dusHFnLiuzrULGw=)
2: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: P++sBU1GXH9uE50IcBBHO19qO4YSbJ+w740RTiAYJt0=)
3: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:88:25:f5:e1:b9:98:e2:10:b1:07:d1:16:59:9c:57:1f:ff:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Validity
Not Before: Jan 31 04:26:12 2025 GMT
Not After : Feb 1 06:42:12 2025 GMT
Subject: CN=3DC4B9BC41355CACFBE6D777FB5EE573D7A369C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:98:97:d1:8d:82:0c:fb:a1:36:3a:06:ca:
13:9a:c8:3f:73:a6:b0:74:0f:72:89:56:38:81:2e:
1e:56:8a:06:a5:77:53:e2:40:4e:01:e9:5d:35:15:
2b:b1:20:08:0c:38:d7:b8:de:85:18:82:cf:c5:5d:
35:7a:0c:78:43:78:55:f6:68:5b:89:40:c1:38:b9:
99:b3:c4:f2:d8:de:ee:29:7a:1a:25:f2:68:1e:20:
e9:b7:d4:dc:ac:0c:05:46:ac:7b:52:50:90:10:f5:
6f:fb:39:4b:98:95:6a:79:62:8b:73:a1:17:a4:2f:
af:7c:5d:55:e3:cf:3f:98:9b:d5:94:41:8a:74:2c:
35:0a:31:2c:2c:52:c7:83:ea:f0:20:e8:c7:b2:b5:
ce:85:1b:69:59:0e:8f:11:df:cb:22:9d:e9:aa:14:
87:37:0b:13:97:ef:96:8d:51:93:0a:0b:15:d7:f4:
e2:6e:cb:ba:53:51:42:64:c1:49:27:68:aa:27:9a:
b7:4f:e6:90:58:db:00:83:ba:66:f4:10:42:b1:f6:
bf:b4:80:75:8a:2d:76:3d:ed:98:4c:5d:aa:57:5d:
d9:2b:67:2b:01:be:bc:7a:7e:b8:02:17:80:28:5c:
c5:50:a5:c7:76:12:0d:52:9e:14:92:a8:0e:f0:53:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:B9:BC:41:35:5C:AC:FB:E6:D7:77:FB:5E:E5:73:D7:A3:69:C5
X509v3 Authority Key Identifier:
keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ad:43:27:fb:50:f8:54:31:68:86:f3:15:ec:18:eb:86:64:
a4:06:79:f0:ef:90:31:20:97:71:04:01:92:37:19:20:3d:ac:
4b:1f:d2:27:37:85:9f:ce:25:a1:64:6a:c7:46:29:12:e8:4b:
89:62:95:40:71:2e:19:ad:3c:24:2a:38:5a:e7:e7:b7:ea:df:
d5:f0:ce:de:1d:75:06:e0:24:fe:f2:9a:01:43:7b:82:9a:15:
97:9d:c8:42:d3:e0:d9:b3:55:5e:de:22:fe:0d:85:5f:e8:52:
0d:8d:75:5a:a0:ff:e0:44:8f:af:c0:36:a0:01:43:2e:b8:59:
9b:87:70:1e:2e:9c:20:f5:ea:d0:23:82:67:5e:ab:6b:2a:af:
e0:bc:ae:ec:b5:ca:b5:d2:bc:b7:a6:ce:f6:65:38:52:eb:e6:
50:c4:df:66:71:03:44:2f:cb:ea:03:0f:a0:8a:f6:80:81:3c:
27:4b:99:ab:0b:61:c6:bf:e6:61:d3:c0:31:6b:83:d6:3a:be:
1b:ad:c8:23:4c:51:9e:5a:bc:55:c3:ae:1e:74:8c:a8:89:55:
8b:68:97:d2:28:f1:f7:d8:5c:fa:ac:84:30:26:e1:58:fc:c7:
71:70:2d:4c:bc:67:09:fd:66:51:03:35:3e:18:9f:3f:42:91:
61:66:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:08 2025 by rpki-client