Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: zAEm+tYQ1cFamwRZzi+4kQb0NWFNWGbiPsGRalYVFuI=
Subject key identifier: 98:5E:56:FB:B5:5D:18:BB:64:72:00:AF:0E:8B:FD:2D:D6:6F:E2:8D
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 45516667153000F5CE6F021AF19D2AE5742D6FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 0166
Signing time: Fri 31 Jan 2025 09:57:33 +0000
Manifest this update: Fri 31 Jan 2025 09:52:33 +0000
Manifest next update: Sat 01 Feb 2025 09:58:33 +0000
Files and hashes: 1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: Xh6jFz+njCaGBjOEGtJIkpz/rXp7CyuKm/rwEWcK/9w=)
2: AS215147.asa (hash: Y15WnKTnuqfvxRL2v22hgKSMpUyc+xtqTUbKoWNNWzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:51:66:67:15:30:00:f5:ce:6f:02:1a:f1:9d:2a:e5:74:2d:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: Jan 31 09:52:33 2025 GMT
Not After : Feb 1 09:58:33 2025 GMT
Subject: CN=985E56FBB55D18BB647200AF0E8BFD2DD66FE28D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:af:45:38:09:95:cb:96:3f:48:40:e8:80:
fd:f7:c6:a0:0e:7a:dc:ae:9b:26:65:f4:47:4a:0d:
93:8f:11:2c:d6:6f:85:dc:d8:2e:f5:fa:cb:19:c3:
d8:61:62:e1:46:be:80:0a:8f:48:49:28:05:c1:da:
e4:9e:b6:d0:df:db:27:04:37:2d:79:fc:d3:f8:d5:
b8:93:cb:60:5c:7f:43:05:72:4a:81:cc:cb:65:5d:
92:69:e6:75:9b:d7:33:b8:89:72:db:60:f2:b3:ee:
5f:54:4a:45:7e:78:f0:ff:09:ec:2a:28:52:29:12:
1f:97:bf:15:e9:fb:3e:e8:1f:32:91:5a:2d:5d:a4:
cd:30:9e:87:da:cc:7b:22:7b:8a:c3:c0:49:fd:8f:
91:8a:ef:57:99:92:11:76:74:42:8e:08:af:fc:36:
2d:ee:66:5e:93:5f:d9:c1:40:56:80:b8:40:ff:21:
2c:79:b6:a7:68:96:36:be:96:c6:ea:ec:b6:21:64:
94:d5:fd:8b:98:62:e1:d7:32:2f:4b:0c:13:b1:0e:
66:c6:c3:79:ed:bb:0c:d9:25:cd:6d:82:ec:57:f5:
3a:28:a3:26:52:d9:af:6d:bd:b7:25:53:af:4d:c9:
d5:7f:26:7c:a0:1b:a3:ca:3d:6a:07:18:a1:a7:79:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:56:FB:B5:5D:18:BB:64:72:00:AF:0E:8B:FD:2D:D6:6F:E2:8D
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9d:10:24:a5:66:3b:34:50:6d:43:e0:91:5b:84:41:9b:d3:
7e:92:a0:e0:e6:33:ef:5a:55:48:8a:08:6a:58:f8:1f:ca:82:
db:f1:8e:5e:c9:07:70:5e:03:f8:9d:4d:7f:78:73:0f:30:ca:
40:77:b4:43:b5:13:e3:c0:21:69:b5:ae:80:40:7e:7e:20:74:
21:30:47:30:82:06:b7:61:cc:07:59:7e:01:6e:0d:f3:27:e0:
b5:0c:6a:2a:51:4c:80:83:90:5b:b5:60:b2:0c:59:64:6b:69:
8d:8e:ff:e4:3e:31:93:07:8f:4a:33:f0:dc:78:b7:cb:4d:7c:
2e:86:2b:f4:b6:61:68:91:60:9b:14:df:95:61:8c:a1:b6:86:
76:20:01:0f:9b:2e:1f:89:62:8d:f1:65:eb:df:18:9c:da:52:
7b:a8:48:1c:c7:78:08:18:5b:a1:0f:dc:0b:51:de:62:7e:8f:
8e:b6:0d:ee:38:00:a3:ea:e1:07:63:bc:17:55:de:f3:26:84:
a3:de:04:92:2e:20:0a:84:9b:67:00:28:8d:cc:10:b9:3e:49:
3b:a6:83:ca:93:62:9f:5a:99:50:4a:23:8f:28:65:36:d9:5e:
0f:8e:57:a6:3a:f3:8f:5e:69:2d:80:2e:bb:05:5b:e3:fb:96:
5e:b9:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:19:09 2025 by rpki-client