
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
File: 97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft (raw, json)
Hash identifier: s3u9pdEDdQzwo6LDPVL2jHXcd3UOgNp/weClNB/WcU0=
Subject key identifier: 04:12:49:4F:43:90:DA:EA:CC:07:56:3D:88:4D:BF:90:63:3C:18:CD
Authority key identifier: 97:C1:75:00:5F:7A:B9:B6:9D:CD:B4:F3:A6:08:FC:78:FE:5A:A7:C7
Certificate issuer: /CN=97c175005f7ab9b69dcdb4f3a608fc78fe5aa7c7
Certificate serial: 4827F0327105B6CE43659FE052250120AF62560C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
Manifest number: B8
Signing time: Fri 31 Jan 2025 15:38:54 +0000
Manifest this update: Fri 31 Jan 2025 15:33:54 +0000
Manifest next update: Sat 01 Feb 2025 18:02:54 +0000
Files and hashes: 1: 97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.crl (hash: x3uLBaGpQT+tN6s0XbXK+WBE+58L5PNAZh5mo2i11FU=)
2: AS44324.asa (hash: qZJVHxdF5FfdnE3dVG3B8plRnsnzKlh8Fckyf+XqKXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:27:f0:32:71:05:b6:ce:43:65:9f:e0:52:25:01:20:af:62:56:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c175005f7ab9b69dcdb4f3a608fc78fe5aa7c7
Validity
Not Before: Jan 31 15:33:54 2025 GMT
Not After : Feb 1 18:02:54 2025 GMT
Subject: CN=0412494F4390DAEACC07563D884DBF90633C18CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:f3:2d:50:00:e0:a3:f6:99:8c:4b:6a:f9:
ec:90:7f:ea:71:d3:a0:be:b2:6c:9a:d8:df:2b:12:
08:4d:5b:fb:61:b4:98:02:7e:94:4a:3d:7f:ee:90:
31:d4:ae:2a:5f:45:cb:c2:7e:3b:e3:11:c7:b2:46:
41:5d:32:10:5c:fc:2e:63:27:36:fc:0f:41:47:d2:
a6:44:ba:92:ec:34:0c:35:de:aa:74:b6:24:be:85:
12:9f:26:b3:85:ed:a9:5b:dc:8d:01:b2:4c:36:76:
37:8b:bd:43:bc:88:50:39:51:84:43:42:8b:99:0e:
96:3e:01:a7:93:b7:ab:f3:99:b3:0b:83:98:b0:fd:
a8:8a:52:21:71:80:a3:5d:6a:3d:58:6e:5f:70:89:
6e:7f:78:9d:9d:e3:59:e2:28:2c:88:b4:7d:a6:d9:
09:e6:d1:f0:80:f8:ee:20:11:d5:bb:c6:b9:0b:b5:
07:cc:97:39:d2:68:18:81:3f:4d:7e:3f:34:81:b8:
49:b8:62:87:d2:7d:65:f7:c1:a1:96:93:f8:bd:fc:
3b:5a:1e:3f:80:4d:96:14:e9:fa:2b:01:c4:54:e0:
3a:73:ce:30:5f:1a:8f:8e:f0:f0:97:64:0a:50:52:
48:2a:81:3c:86:98:5f:9e:c3:74:5b:d8:5d:2c:b0:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:49:4F:43:90:DA:EA:CC:07:56:3D:88:4D:BF:90:63:3C:18:CD
X509v3 Authority Key Identifier:
keyid:97:C1:75:00:5F:7A:B9:B6:9D:CD:B4:F3:A6:08:FC:78:FE:5A:A7:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9b:a2:93:65:ac:a1:24:b8:ca:b9:62:eb:0c:39:8b:fb:d9:
e5:16:e5:ba:ef:3d:bb:e9:a3:6e:c9:d0:4b:11:64:b5:e6:d1:
5b:72:e3:d1:76:39:e0:02:4f:9e:cf:d6:79:79:20:5d:b2:61:
6d:f1:04:49:1c:99:56:2a:77:3e:32:11:2d:5f:90:37:59:94:
04:6f:8a:61:6f:be:57:e5:c7:0d:e7:0f:b0:0a:d3:02:71:c1:
29:6c:f7:82:a3:70:40:e5:e5:0d:62:f8:73:43:8c:a0:c5:7d:
14:da:f7:7f:f3:25:70:6c:d9:6f:68:90:93:2f:74:81:3a:93:
45:55:b8:2f:be:73:48:18:e9:60:97:99:24:1d:d1:ea:e5:27:
a5:e2:2a:e1:2f:9a:d2:9a:3f:6b:84:06:86:2c:f9:89:e5:1d:
74:d1:57:ae:3e:b3:21:02:68:6b:e2:1a:97:50:0d:a7:f3:30:
ad:a5:1b:ea:2b:06:a7:50:84:64:d5:67:e9:36:4a:d8:97:08:
be:af:71:9b:c1:4f:20:e9:f6:b2:0f:85:74:a7:62:34:5c:06:
c3:57:69:c6:7b:13:36:56:b4:b6:17:9f:a7:95:2a:2a:f1:cb:
52:c3:55:d2:0c:b9:b4:7e:8d:ca:6f:f2:99:d8:e8:6b:57:99:
48:97:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:00 2025 by rpki-client