Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft
File: B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft (raw, json)
Hash identifier: tIXIofOdDHO3kBHspgEj97r8bGMfdZlKrUQuOSylQyM=
Subject key identifier: 3D:8F:52:21:80:81:31:F1:3D:11:58:48:82:F0:A7:21:5B:08:6F:12
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Certificate issuer: /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial: 03AA0B84376A57B8F3929EA05C472EF2373E9281
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft
Manifest number: 012C
Signing time: Fri 31 Jan 2025 02:09:13 +0000
Manifest this update: Fri 31 Jan 2025 02:04:13 +0000
Manifest next update: Sat 01 Feb 2025 05:00:13 +0000
Files and hashes: 1: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: rfBVKVeDolW2xuJXtIBW3+sb6n+RTsWvOaIU0c6mIxY=)
2: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: 5mtKnsi0eiuLOj/vuPgtBHrR4ubrh7kZVKE+RU5MUcA=)
3: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: EXuK08+oqHk8pQl69db4apbuttuLFsyV61jf2S7CeW0=)
4: 326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa (hash: BW6ky+6CFugwvR5bM9gBM+2MBg3Zgjy+mVE9dRIKmpw=)
5: 326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa (hash: WxEbtOA91d9OHO9aT2g6iowjYN6K5+szyzBhDcVl8YM=)
6: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: 1zLEB1ySqLG6O8dK77EoS7uCQ9LHKZ/5i0AbZm+a9vI=)
7: B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl (hash: yikr70teIv/m3WIG0nRzoYK+0n9414HQ24zmk/CfMP4=)
8: 92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer (hash: H13hcP/r4wxGw08Jc5sOHEEMFksM7Dg89XlhlYKqWC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:aa:0b:84:37:6a:57:b8:f3:92:9e:a0:5c:47:2e:f2:37:3e:92:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Validity
Not Before: Jan 31 02:04:13 2025 GMT
Not After : Feb 1 05:00:13 2025 GMT
Subject: CN=3D8F5221808131F13D11584882F0A7215B086F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:ed:7a:04:f6:dd:13:ea:06:38:c3:b9:a1:
e8:d8:db:95:ae:05:d7:3d:86:d2:2b:80:12:b8:3f:
07:ac:7c:33:9e:44:de:7e:e5:9d:cb:89:c9:8b:27:
9e:eb:16:07:d7:dc:35:0b:2b:9a:d4:fa:4d:07:c7:
ca:94:08:31:f0:ef:38:86:97:c4:d1:80:17:64:40:
61:05:a1:8e:58:65:9a:c7:fe:c0:07:54:31:bc:ef:
00:cd:a8:61:a3:96:9c:2d:30:9d:5a:bc:ba:68:90:
6b:c0:eb:a3:4d:b7:41:6d:31:79:0a:bc:67:81:15:
23:c0:30:b7:a8:79:e5:80:5f:8f:f4:26:7d:9e:2a:
c6:e6:c4:b1:ef:15:11:15:e2:46:43:12:be:3c:1b:
be:f6:ce:e5:4a:2e:37:c0:55:fe:a4:d3:24:52:37:
21:ce:6c:d6:78:9b:8a:df:6d:ef:f4:a2:df:a2:a0:
b6:3b:b6:df:92:35:e4:df:67:79:6f:19:7e:87:4b:
9c:af:ed:c0:0a:11:4e:eb:f6:08:4b:af:2e:f7:5c:
f7:5d:f9:65:a6:d1:fb:81:17:8d:23:ce:54:9e:c9:
1b:5d:39:ec:3d:33:09:10:63:d2:e8:8a:4d:b8:d5:
dd:07:8c:b4:c4:cc:dc:12:85:e3:bb:91:aa:bf:70:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:52:21:80:81:31:F1:3D:11:58:48:82:F0:A7:21:5B:08:6F:12
X509v3 Authority Key Identifier:
keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6a:f7:5d:7b:0b:09:41:05:cf:78:80:a7:59:21:ee:a3:ba:
82:65:cf:38:2d:3e:5b:0a:e3:ce:50:cb:2c:bb:d0:f1:e4:13:
8b:c5:b3:20:56:18:08:9a:b9:0b:81:b9:71:83:b0:83:bb:0a:
c1:a7:5d:1a:a9:21:d6:fb:62:dd:0c:fe:09:40:5d:40:5c:b2:
f6:72:2a:ca:2f:58:b9:7b:1d:ed:e3:32:ee:9c:62:b9:b2:30:
98:2a:6a:2d:d6:40:97:50:30:1a:e7:02:d6:b9:7d:86:43:f4:
79:6d:a3:34:06:0a:bb:28:bd:33:5b:89:6f:f0:4d:81:86:8c:
60:7d:c3:90:46:0c:c5:4a:94:25:35:cc:03:08:46:70:03:36:
16:88:21:a6:e3:0b:ab:b0:43:be:fc:a0:ed:b8:eb:0c:7d:e4:
ea:2c:8e:c6:71:37:1c:03:d0:ff:f8:c3:5b:83:2c:b7:82:8d:
f4:1f:21:9c:1a:c6:a3:1d:1a:3b:98:bd:2d:cd:e4:5f:3d:59:
eb:d9:f0:54:47:f9:84:1a:1f:12:8e:6b:d8:08:13:cb:6f:09:
24:41:31:4b:a9:c0:08:5b:a7:7b:2d:df:35:fa:a7:32:12:f5:
51:9c:70:cf:4f:b9:08:34:7b:72:0c:83:a4:f4:95:39:63:d4:
03:06:fc:cf
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUA6oLhDdqV7jzkp6gXEcu8jc+koEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy
RkM5MEQwOTAeFw0yNTAxMzEwMjA0MTNaFw0yNTAyMDEwNTAwMTNaMDMxMTAvBgNV
BAMTKDNEOEY1MjIxODA4MTMxRjEzRDExNTg0ODgyRjBBNzIxNUIwODZGMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29u16BPbdE+oGOMO5oejY25Wu
Bdc9htIrgBK4PwesfDOeRN5+5Z3LicmLJ57rFgfX3DULK5rU+k0Hx8qUCDHw7ziG
l8TRgBdkQGEFoY5YZZrH/sAHVDG87wDNqGGjlpwtMJ1avLpokGvA66NNt0FtMXkK
vGeBFSPAMLeoeeWAX4/0Jn2eKsbmxLHvFREV4kZDEr48G772zuVKLjfAVf6k0yRS
NyHObNZ4m4rfbe/0ot+ioLY7tt+SNeTfZ3lvGX6HS5yv7cAKEU7r9ghLry73XPdd
+WWm0fuBF40jzlSeyRtdOew9MwkQY9Loik241d0HjLTEzNwSheO7kaq/cLLXAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUPY9SIYCBMfE9EVhIgvCnIVsIbxIwHwYDVR0j
BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC
OTYwRkVBMjJGQzkwRDA5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi8xL0I4OUJGQTg0
REM1QUZFMDUwNzZBMDgwMEI5NjBGRUEyMkZDOTBEMDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMavdd
ewsJQQXPeICnWSHuo7qCZc84LT5bCuPOUMssu9Dx5BOLxbMgVhgImrkLgblxg7CD
uwrBp10aqSHW+2LdDP4JQF1AXLL2cirKL1i5ex3t4zLunGK5sjCYKmot1kCXUDAa
5wLWuX2GQ/R5baM0Bgq7KL0zW4lv8E2BhoxgfcOQRgzFSpQlNcwDCEZwAzYWiCGm
4wursEO+/KDtuOsMfeTqLI7GcTccA9D/+MNbgyy3go30HyGcGsajHRo7mL0tzeRf
PVnr2fBUR/mEGh8SjmvYCBPLbwkkQTFLqcAIW6d7Ld81+qcyEvVRnHDPT7kINHty
DIOk9JU5Y9QDBvzP
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:40:14 2025 by rpki-client