Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
File: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft (raw, json)
Hash identifier: yLTchWFrnnTvQwnEhu5OaUdNpfKo/kHWlMmXiM53Bp8=
Subject key identifier: A4:47:CB:83:5D:38:02:4E:89:14:39:A8:8E:07:60:AD:A6:3D:7D:A6
Authority key identifier: 2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97
Certificate issuer: /CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
Certificate serial: 59F34B7414673FA37948078DF2BB17D040CC74FD
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
Manifest number: 87
Signing time: Fri 31 Jan 2025 16:32:14 +0000
Manifest this update: Fri 31 Jan 2025 16:27:14 +0000
Manifest next update: Sat 01 Feb 2025 17:49:14 +0000
Files and hashes: 1: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: Nh5XT638Xw3szIHzPWQzM5n7CuKdiXjt2Xw+j5HN5b4=)
2: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl (hash: uZmWzylBcEtulvZLJY6hQ7KPwDaOvJ0Sr7AtJHwCHag=)
3: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: qLEvjwfoEyhWj9DVGwn8qdOomSXN46J1BxYBuAy12X4=)
4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: lmNISwXtJNWjiKcmw5GjTGP7+E6qXcw7mfSumJB2dso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f3:4b:74:14:67:3f:a3:79:48:07:8d:f2:bb:17:d0:40:cc:74:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
Validity
Not Before: Jan 31 16:27:14 2025 GMT
Not After : Feb 1 17:49:14 2025 GMT
Subject: CN=A447CB835D38024E891439A88E0760ADA63D7DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:d5:07:fd:71:d4:22:65:6c:d1:c7:dc:51:
14:1a:ad:ac:e9:72:98:c5:85:53:39:97:bb:a3:78:
32:3e:6c:63:3a:d9:7f:ff:e2:16:04:8d:7a:68:6a:
a5:6b:ad:a6:1f:4b:82:fd:61:24:f8:a2:35:62:af:
de:d9:ca:fe:13:2b:7c:35:d7:97:aa:d6:7d:05:45:
82:97:c3:19:16:50:da:cc:a1:37:0d:7a:66:5b:c5:
ec:f3:52:53:fa:99:15:92:43:ca:d2:36:25:8a:b3:
40:7c:59:e8:f0:fa:21:3e:db:c3:3c:66:b6:89:7b:
6b:05:65:50:8f:fc:ed:8b:a7:34:8a:f5:dd:13:7b:
fe:06:ba:aa:50:31:8b:02:45:1a:a0:c5:28:af:f6:
f7:56:32:c6:39:4f:74:f2:f0:05:0a:ea:7c:1a:2a:
99:74:76:86:77:94:04:9c:17:8d:a0:08:66:bb:e4:
3c:01:be:95:0e:35:d1:8b:55:a6:05:a3:4d:d7:77:
fc:11:e5:48:8c:ca:62:70:39:a9:49:8c:39:48:d9:
cb:29:1e:35:05:55:16:27:d5:a6:ac:fd:9f:4c:ca:
ef:78:a7:68:dc:8d:66:67:ee:2f:5f:65:cf:69:e6:
c5:e6:4b:51:c4:d5:3a:17:dd:79:e1:2d:90:3a:0a:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:47:CB:83:5D:38:02:4E:89:14:39:A8:8E:07:60:AD:A6:3D:7D:A6
X509v3 Authority Key Identifier:
keyid:2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b7:93:44:d8:d2:50:89:e1:c1:fc:92:34:2e:68:ca:dd:4c:
61:03:c1:38:c0:e6:a9:dc:a3:c3:ae:36:5c:7b:b9:a7:63:ee:
79:54:3c:75:47:df:6c:dd:d5:dd:cf:d9:c2:35:1d:e7:f9:56:
c6:a9:64:0d:27:40:c4:82:c0:6c:a5:ec:95:a3:7d:be:ce:e5:
e6:df:27:28:93:60:4d:9c:c5:86:ec:cc:c3:a7:5a:5f:84:5e:
58:d8:91:af:7b:a5:ba:21:29:11:f8:85:f6:77:96:7d:c6:c9:
c0:f8:fd:2c:6d:23:ea:e1:eb:2e:cb:8c:05:31:f2:b9:25:24:
e1:b6:72:fc:32:01:da:ac:d3:ce:ae:69:b3:3c:11:cc:19:76:
f3:fa:cf:87:d7:cc:a5:5e:82:36:0c:a1:83:72:35:97:56:0a:
21:21:fc:90:9c:e8:c3:d4:32:f2:c9:10:53:3b:c3:49:f6:cc:
c4:a3:5e:66:e0:5c:c0:39:df:de:4e:70:66:e3:bc:1d:c2:a3:
9d:d1:bd:88:9a:e1:26:70:1a:ca:e9:83:46:56:a7:f8:04:fa:
2c:6c:da:6f:e8:60:31:52:5a:cb:f0:7b:89:f1:2e:06:ee:1a:
01:4f:3c:da:23:f9:3e:36:31:ff:fa:b1:96:44:fa:96:dd:d6:
27:3b:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:48:12 2025 by rpki-client