Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
File: 130671BB4F638012F828BBA2CCE785C172530C02.mft (raw, json)
Hash identifier: /Sh5jYfxAj4+nbDpmcjxWmDzAYBLXfOSibmsM6fg6Rg=
Subject key identifier: 5B:12:CC:C6:CE:40:8A:5E:BA:1A:91:ED:FA:7A:D3:C8:2C:CE:C1:3A
Authority key identifier: 13:06:71:BB:4F:63:80:12:F8:28:BB:A2:CC:E7:85:C1:72:53:0C:02
Certificate issuer: /CN=130671bb4f638012f828bba2cce785c172530c02
Certificate serial: 7AB65BCDEAA2F260DF7381C615A519719AA9BBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
Manifest number: 0140
Signing time: Fri 31 Jan 2025 15:42:47 +0000
Manifest this update: Fri 31 Jan 2025 15:37:47 +0000
Manifest next update: Sat 01 Feb 2025 19:07:47 +0000
Files and hashes: 1: AS216265.asa (hash: 7Lz5u6dspoAf8XEf9PvYLdZiJcFIKOab5BVMust54Ec=)
2: 130671BB4F638012F828BBA2CCE785C172530C02.crl (hash: N85vVz/hdLwSgoIXx2bLIpWmdQyMq5GbuqVAWawSHbk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b6:5b:cd:ea:a2:f2:60:df:73:81:c6:15:a5:19:71:9a:a9:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130671bb4f638012f828bba2cce785c172530c02
Validity
Not Before: Jan 31 15:37:47 2025 GMT
Not After : Feb 1 19:07:47 2025 GMT
Subject: CN=5B12CCC6CE408A5EBA1A91EDFA7AD3C82CCEC13A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:1c:00:0a:7a:93:f1:b2:d2:7b:f5:3b:d8:
9b:3e:03:e9:50:c9:4f:79:08:43:a3:5d:02:20:47:
35:fd:b3:df:10:b5:95:c5:71:9b:fe:a8:3e:aa:5c:
e5:61:51:ad:62:19:f7:b3:76:31:59:f6:dd:36:eb:
ff:40:66:22:97:db:91:43:77:24:c3:11:9e:d3:ba:
45:22:9f:cc:03:e7:b3:43:0e:82:50:f0:87:f0:09:
c4:43:5e:73:2f:6c:6c:4c:ac:0e:16:b1:b1:3b:14:
07:58:75:84:8d:a3:9c:a9:35:25:4e:12:14:a5:c0:
a9:b6:46:46:2b:20:99:3b:ab:f0:11:f6:42:6e:cd:
28:69:51:be:dc:05:66:81:40:4f:89:0a:5f:29:81:
d7:21:09:0c:77:e3:96:8d:29:ce:ec:f9:70:be:68:
7b:a8:54:40:4a:f5:51:77:f3:4e:a9:4a:75:ab:b4:
b2:48:a7:07:2f:96:b8:93:ca:12:b6:bf:21:b3:bd:
a7:0c:e4:90:5e:ce:6c:8d:5d:bb:b9:0d:e7:06:b6:
e5:43:ed:27:31:96:53:73:75:9f:b3:8f:67:b6:0a:
90:e2:7b:c4:5d:84:77:f9:e9:d4:8e:50:c1:84:84:
ba:24:05:54:f6:52:56:d2:d6:f7:1f:fe:db:c5:2d:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:12:CC:C6:CE:40:8A:5E:BA:1A:91:ED:FA:7A:D3:C8:2C:CE:C1:3A
X509v3 Authority Key Identifier:
keyid:13:06:71:BB:4F:63:80:12:F8:28:BB:A2:CC:E7:85:C1:72:53:0C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:f1:1e:54:7f:d1:98:fb:ec:0c:f4:27:30:dc:65:05:d0:
dd:cb:67:95:7e:14:3e:53:a0:60:06:1d:1b:9a:8b:e3:54:94:
a4:51:e3:eb:93:95:c5:df:1c:a4:49:0f:7c:f6:c7:f1:ed:40:
27:fd:0d:57:33:e3:0e:8c:f7:a9:ed:01:4e:73:c4:24:c1:29:
58:0b:a2:1e:92:dc:d5:bd:56:4d:42:c2:49:2e:22:0a:6a:33:
67:e3:66:f9:0a:52:3a:08:7d:b1:04:61:c1:3b:e1:d2:64:bd:
b4:2a:40:7f:09:7d:60:a4:91:4c:ae:9f:97:7b:07:17:dd:cb:
76:cf:9f:24:d1:7b:88:e9:13:c0:fd:b2:62:fa:4c:f4:9c:eb:
31:58:52:4b:0a:b1:24:17:e8:d6:fc:df:77:ee:d8:10:e5:ab:
58:b8:cf:3b:d3:56:5e:d1:53:4f:ea:67:0e:c3:5d:c1:7e:09:
96:52:df:a4:f0:7c:5c:7b:6f:8d:04:4c:25:8a:ef:fb:b5:dc:
ba:52:fd:cb:e7:cb:46:b7:2a:63:84:1f:0d:4b:87:01:25:d8:
12:5b:2f:79:00:97:2a:58:a7:30:58:f8:dd:30:42:8f:74:4f:
45:45:10:c5:41:8f:23:25:ba:68:1a:9f:94:65:b4:67:ee:93:
08:73:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:39 2025 by rpki-client