Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/0/A58BECAA5EFF75863CB8796301AF14476A7BB03A.mft
File: A58BECAA5EFF75863CB8796301AF14476A7BB03A.mft (raw, json)
Hash identifier: LofDplNAGxOBaIBvX1sV/6Am212Jsqjwm2Jcn0NAIHc=
Subject key identifier: A8:8D:A7:2F:8D:B8:82:D7:43:79:C8:9C:B7:BB:F7:2B:2A:90:39:C2
Authority key identifier: A5:8B:EC:AA:5E:FF:75:86:3C:B8:79:63:01:AF:14:47:6A:7B:B0:3A
Certificate issuer: /CN=a58becaa5eff75863cb8796301af14476a7bb03a
Certificate serial: 704CCB68FC7B71A2134E8B0E782C33EBA82304DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYvsql7_dYY8uHljAa8UR2p7sDo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/0/A58BECAA5EFF75863CB8796301AF14476A7BB03A.mft
Manifest number: 48
Signing time: Fri 31 Jan 2025 00:27:59 +0000
Manifest this update: Fri 31 Jan 2025 00:22:59 +0000
Manifest next update: Sat 01 Feb 2025 03:38:59 +0000
Files and hashes: 1: A58BECAA5EFF75863CB8796301AF14476A7BB03A.crl (hash: XA7CjRO0LnTi8+dsfmWwFMXoGMgJB/08ykuV4p0KgP0=)
2: AS212516.asa (hash: emGwpRgXygrE5Vvy9INFgvgt3Yzvih+sXuNdklWKJQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4c:cb:68:fc:7b:71:a2:13:4e:8b:0e:78:2c:33:eb:a8:23:04:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58becaa5eff75863cb8796301af14476a7bb03a
Validity
Not Before: Jan 31 00:22:59 2025 GMT
Not After : Feb 1 03:38:59 2025 GMT
Subject: CN=A88DA72F8DB882D74379C89CB7BBF72B2A9039C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:16:22:c3:a2:1c:09:da:6e:2c:fe:63:ed:
d1:e5:3b:54:f0:05:0f:3d:23:f6:af:5e:9e:27:5f:
fc:b2:92:10:50:8d:a0:41:3c:a4:54:cc:ec:7f:2d:
48:8c:c2:5f:fc:89:e1:45:18:42:f7:34:74:3b:f9:
72:9a:56:61:0f:12:f0:c6:ad:9d:3f:fe:3b:77:51:
3c:af:2a:84:ae:9e:ca:d6:f2:db:13:c5:37:51:7d:
4c:0d:c4:4e:ca:35:88:fa:5c:d9:ae:39:83:58:f1:
fa:10:d8:24:64:aa:f1:1a:ba:4f:b3:65:19:44:66:
26:c9:58:0a:2e:8a:de:48:dc:ea:af:95:f2:93:d9:
6d:6e:92:dc:65:d8:0d:5f:3b:3f:83:a8:d4:7d:c0:
db:84:22:80:60:e0:d7:94:06:14:fb:a1:35:33:b8:
7c:de:e6:68:45:40:ed:8b:c0:21:b0:64:f6:d4:3a:
04:57:38:18:9e:85:90:e6:65:92:c2:66:7d:45:e7:
3f:8e:10:2a:92:43:3d:fb:e3:e5:f4:ef:f9:d1:3a:
f8:d5:86:fa:4c:39:0e:43:ba:2f:01:57:f8:fe:a8:
69:96:d9:6f:c7:6e:d1:5a:88:c0:84:9f:26:aa:80:
3d:03:47:16:50:79:38:26:bc:ab:16:3e:d7:bc:f8:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8D:A7:2F:8D:B8:82:D7:43:79:C8:9C:B7:BB:F7:2B:2A:90:39:C2
X509v3 Authority Key Identifier:
keyid:A5:8B:EC:AA:5E:FF:75:86:3C:B8:79:63:01:AF:14:47:6A:7B:B0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/0/A58BECAA5EFF75863CB8796301AF14476A7BB03A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYvsql7_dYY8uHljAa8UR2p7sDo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/0/A58BECAA5EFF75863CB8796301AF14476A7BB03A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d2:4b:51:09:26:dc:d6:dc:71:e4:55:94:8d:9a:2d:0a:9d:
b0:5c:a7:fa:7b:c8:b7:6b:ec:3d:66:d3:c2:d1:97:be:f2:78:
ed:c4:69:e1:1e:69:c9:bb:7d:ce:01:8e:a9:73:f6:c1:54:9e:
fb:b7:2d:49:aa:b3:59:97:93:a6:d3:95:81:80:72:16:c7:ae:
18:52:75:b8:45:33:3a:46:a8:e6:77:45:50:53:bd:5a:b9:11:
59:e6:51:fd:bd:c0:1d:af:7b:57:c7:80:cc:8b:ca:15:97:82:
ab:7c:44:88:69:4f:d1:30:c8:7c:5b:b8:5f:24:95:5e:62:70:
1a:fd:11:47:47:31:00:3c:fb:12:12:ba:2f:b5:63:e2:8b:78:
1d:e8:ac:f2:7d:37:a6:40:21:44:a4:64:33:dc:28:89:9c:7e:
eb:ca:e0:4d:43:4a:9c:57:0b:ad:c9:a8:9f:78:79:ab:ad:61:
b6:39:27:96:55:87:be:83:b8:87:77:2c:f4:00:14:28:a1:5d:
f6:72:7b:ee:29:0f:c7:13:88:9d:48:cc:ab:d7:a0:c1:24:e9:
d2:0a:6d:63:a9:6b:f7:3f:8e:b1:2d:fd:a1:74:89:be:47:a8:
d5:b3:aa:19:da:1f:f7:43:e6:9c:b6:5e:d1:3b:70:c5:bc:4a:
5c:02:16:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:35 2025 by rpki-client