Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: +Tbi/e73ueeTwH7I45w7+ohiAabnDlRtOTabFSgSxMQ=
Subject key identifier: 3E:D0:99:13:03:AD:C3:45:FE:A5:02:EF:C9:D0:A3:3C:A3:5B:E9:E8
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 7C95C3D8F2F984130294E62A97DD4BC6BC7C8BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: 42
Signing time: Fri 31 Jan 2025 06:20:57 +0000
Manifest this update: Fri 31 Jan 2025 06:15:57 +0000
Manifest next update: Sat 01 Feb 2025 09:08:57 +0000
Files and hashes: 1: 38352e3139332e37372e302f32342d3234203d3e20383334.roa (hash: dNHpugVvVC8uQYA7rwKEilD7uNHgu86VkwTpGtOrrR0=)
2: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: 7hPqoW+SUayYiq161DamvKW+piXDJr8Clx670xeUAPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:95:c3:d8:f2:f9:84:13:02:94:e6:2a:97:dd:4b:c6:bc:7c:8b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Jan 31 06:15:57 2025 GMT
Not After : Feb 1 09:08:57 2025 GMT
Subject: CN=3ED0991303ADC345FEA502EFC9D0A33CA35BE9E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:c2:6f:b1:9e:3a:b5:47:0e:b9:09:ea:7c:
3d:b8:96:af:84:07:77:7a:71:e1:5c:4b:b1:84:ce:
13:c8:fa:92:76:68:a7:2c:69:e2:21:84:6b:d8:b7:
af:f1:ef:42:e5:1a:54:87:68:06:ef:ba:76:7a:87:
c8:de:76:6e:b6:6e:99:2a:bc:44:a5:03:cd:f1:1c:
32:bd:ce:d5:ba:fc:34:42:fb:d1:b4:08:9b:dd:64:
a9:7b:c5:64:a8:a3:e2:02:46:49:92:0e:17:8e:35:
02:7e:49:4e:2f:ce:d1:fa:6b:6d:fd:f6:9b:f0:a9:
94:df:f8:3c:56:8b:ec:fe:d5:40:fe:ea:62:3d:18:
b0:cb:97:26:fd:1b:3b:02:22:59:27:d1:e8:6c:05:
20:85:c6:2b:19:07:60:f7:56:c0:a7:98:31:9c:cb:
91:d8:27:4e:44:35:21:47:f4:b1:bb:60:96:39:33:
71:72:c2:a3:9e:39:3c:22:e6:d4:70:dd:2e:fd:48:
b6:09:35:47:30:d4:50:64:1e:dc:4e:d0:45:b5:ed:
27:61:5d:10:24:ae:42:c7:50:ca:bb:09:36:9c:21:
09:be:b3:b1:85:7c:9e:1f:bb:cd:55:bf:c8:63:02:
17:50:0a:0a:c7:e0:49:fb:81:59:a8:01:20:6d:e5:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D0:99:13:03:AD:C3:45:FE:A5:02:EF:C9:D0:A3:3C:A3:5B:E9:E8
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:99:55:45:37:0f:c3:dd:2e:a6:47:b4:b0:54:44:f1:36:d7:
d5:9d:24:ec:e1:2b:ee:c2:6d:32:c2:07:70:b9:2b:42:fe:d8:
24:f5:61:28:e7:88:27:5b:6b:d5:39:75:d6:e0:e1:4a:5d:fb:
8c:04:72:97:55:2c:e6:b4:c3:0d:a2:dc:6b:7f:6e:fb:d3:bf:
ef:92:30:e7:67:29:46:ab:b8:dd:ab:d5:be:80:74:04:a7:a0:
7f:aa:f9:12:c1:67:66:01:63:27:12:cd:94:f7:fb:0f:79:40:
13:73:e9:50:b8:9e:e3:da:ef:84:e0:07:83:75:e5:2e:ac:9d:
b8:d5:79:b7:7e:18:17:24:ee:d8:66:4e:d3:a2:40:02:0f:13:
89:da:1e:a6:cd:d5:3a:b5:64:53:95:62:f4:2b:5e:41:29:13:
9c:cb:8c:12:c3:fe:99:53:4c:e1:3b:4d:b1:49:4a:db:03:37:
db:ea:79:96:6b:ca:58:fc:27:c3:f4:2a:42:b5:16:99:da:92:
ff:81:39:b7:ea:16:17:91:d5:b6:43:b3:6d:58:58:79:73:9b:
04:cc:bb:3f:b2:7e:ca:0b:e1:1f:e9:b6:07:76:8c:6f:94:7c:
01:90:3d:9e:e0:2f:94:c5:9a:b5:be:33:c0:19:90:14:95:28:
da:46:4d:de
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUfJXD2PL5hBMClOYql91Lxrx8i9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2ExNDM3ZTlmMzVlZGM1NGEzYzBjZDMxMTY3Yjk5NmU2
MGRlMTUwNDAeFw0yNTAxMzEwNjE1NTdaFw0yNTAyMDEwOTA4NTdaMDMxMTAvBgNV
BAMTKDNFRDA5OTEzMDNBREMzNDVGRUE1MDJFRkM5RDBBMzNDQTM1QkU5RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/R8JvsZ46tUcOuQnqfD24lq+E
B3d6ceFcS7GEzhPI+pJ2aKcsaeIhhGvYt6/x70LlGlSHaAbvunZ6h8jedm62bpkq
vESlA83xHDK9ztW6/DRC+9G0CJvdZKl7xWSoo+ICRkmSDheONQJ+SU4vztH6a239
9pvwqZTf+DxWi+z+1UD+6mI9GLDLlyb9GzsCIlkn0ehsBSCFxisZB2D3VsCnmDGc
y5HYJ05ENSFH9LG7YJY5M3FywqOeOTwi5tRw3S79SLYJNUcw1FBkHtxO0EW17Sdh
XRAkrkLHUMq7CTacIQm+s7GFfJ4fu81Vv8hjAhdQCgrH4En7gVmoASBt5VFVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUPtCZEwOtw0X+pQLvydCjPKNb6egwHwYDVR0j
BBgwFoAUyhQ36fNe3FSjwM0xFnuZbmDeFQQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTNiZDJiYzEtNGVhNi00YmM1LWEyYTUtOTdlNDY1NDcy
Nzc2LzAvQ0ExNDM3RTlGMzVFREM1NEEzQzBDRDMxMTY3Qjk5NkU2MERFMTUwNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3loUTM2Zk5lM0ZTandNMHhGbnVaYm1E
ZUZRUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81M2JkMmJjMS00
ZWE2LTRiYzUtYTJhNS05N2U0NjU0NzI3NzYvMC9DQTE0MzdFOUYzNUVEQzU0QTND
MENEMzExNjdCOTk2RTYwREUxNTA0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABplVRTcPw90upke0sFRE
8TbX1Z0k7OEr7sJtMsIHcLkrQv7YJPVhKOeIJ1tr1Tl11uDhSl37jARyl1Us5rTD
DaLca39u+9O/75Iw52cpRqu43avVvoB0BKegf6r5EsFnZgFjJxLNlPf7D3lAE3Pp
ULie49rvhOAHg3XlLqyduNV5t34YFyTu2GZO06JAAg8Tidoeps3VOrVkU5Vi9Cte
QSkTnMuMEsP+mVNM4TtNsUlK2wM32+p5lmvKWPwnw/QqQrUWmdqS/4E5t+oWF5HV
tkOzbVhYeXObBMy7P7J+ygvhH+m2B3aMb5R8AZA9nuAvlMWatb4zwBmQFJUo2kZN
3g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:33 2025 by rpki-client