Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: jP0F9h3KLZFClnZqNLo2R9BuBjo0FjvCKnROx/snfFw=
Subject key identifier: A7:0F:C2:98:68:D2:2C:0F:F7:EF:CE:C8:10:8E:90:B6:D6:2A:89:EA
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 38AFE14EA3150E16095F0F42E646C248746C674D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: D2
Signing time: Fri 31 Jan 2025 02:55:27 +0000
Manifest this update: Fri 31 Jan 2025 02:50:27 +0000
Manifest next update: Sat 01 Feb 2025 04:39:27 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: EuF8SaDxn15QPHWQ7q/tbNUBuPIfMLcSY6qcW+hHCjs=)
2: AS215085.asa (hash: yTwGGFk40228CDJmdSOsVqGZM7rSmaRt2Gc52FXkG4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:af:e1:4e:a3:15:0e:16:09:5f:0f:42:e6:46:c2:48:74:6c:67:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Jan 31 02:50:27 2025 GMT
Not After : Feb 1 04:39:27 2025 GMT
Subject: CN=A70FC29868D22C0FF7EFCEC8108E90B6D62A89EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:6c:1a:13:ea:18:45:07:75:26:fc:36:e5:
4b:3c:03:b8:53:aa:15:7b:60:bc:ee:af:45:a6:ca:
5c:3f:08:f6:be:e5:bf:30:55:8c:e5:4c:54:7a:47:
1c:58:fe:8a:7e:cc:36:50:e7:d6:e9:05:e6:39:48:
16:0b:fb:62:f9:eb:43:fb:37:36:ee:8f:bc:15:90:
66:6e:bc:3d:8a:bb:c0:06:94:90:ea:4b:d7:5b:4d:
da:33:01:ed:c6:08:5c:b1:82:b0:7f:e9:00:1b:0d:
36:b2:96:2b:71:57:32:86:a1:0a:40:b3:eb:15:2d:
7d:ef:dc:f3:28:a8:91:b9:57:2c:57:21:c0:38:fa:
01:3b:99:ee:f3:dc:83:ee:08:43:f1:23:1e:e7:cf:
10:ff:9f:e0:32:b3:de:e1:72:95:bc:3b:50:13:26:
1b:a3:5d:c9:ce:79:08:cd:d2:3f:25:99:92:15:a2:
ea:e7:95:20:f4:01:95:0c:32:d3:22:5e:71:fe:c2:
fb:32:fb:c5:c2:42:06:a0:2c:4a:cd:d6:81:3c:45:
08:b5:29:54:be:28:cb:0d:a8:3c:de:76:be:e9:e4:
7a:a4:e8:f1:1c:a5:39:53:1c:d8:88:9c:f4:bd:85:
17:f4:07:6f:59:d8:42:3f:b1:a0:0c:98:a5:8e:c9:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0F:C2:98:68:D2:2C:0F:F7:EF:CE:C8:10:8E:90:B6:D6:2A:89:EA
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:15:1f:cb:1e:e4:a2:5d:1d:0d:50:37:d8:df:3f:e2:57:40:
43:73:a9:d7:cb:2d:c3:35:ad:e7:91:c8:3b:d2:6b:c4:d8:2b:
52:84:d8:6b:fc:d4:9c:2b:1f:fa:0e:26:e0:27:07:73:e1:78:
25:da:15:7e:c6:14:ec:17:ff:8d:f2:69:98:95:4d:13:96:cd:
ef:14:de:05:d6:8f:1e:8e:ec:33:7a:39:c5:4e:10:32:d4:c4:
21:f5:60:f7:ec:a6:dc:48:ef:47:cf:d5:ec:15:7e:35:af:e5:
a6:61:ce:b0:73:1e:e0:35:3d:e5:f5:03:c8:3b:c2:c9:ef:d5:
59:43:39:94:84:55:e3:f7:dd:24:5f:0a:03:d5:4e:df:fc:8f:
e3:62:6c:01:68:ca:c8:5c:b0:7a:1e:90:fc:8a:56:6d:9b:22:
d0:13:2f:e8:14:8a:d3:fb:db:10:54:17:80:10:07:0a:72:e7:
fc:98:75:48:7d:0b:e7:b9:de:58:7b:3d:ad:f0:7c:cb:06:22:
ce:af:ce:c6:45:3f:04:14:f5:de:1a:59:e9:b9:1f:d7:f3:49:
f1:1b:bb:f5:81:09:f8:cc:43:85:22:5d:0b:72:b2:55:8c:e7:
5a:ed:5e:96:c8:ab:e0:cd:14:b0:38:35:0e:57:d0:cd:01:40:
ac:bc:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:50 2025 by rpki-client