Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json)
Hash identifier: t3eMyHeponiUcZiZRN1PhISxBwOkQzhN7HQq297GPBo=
Subject key identifier: A8:26:EE:E3:A0:6B:47:2E:46:04:A8:E6:93:D4:9F:24:65:D4:8C:90
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 6BCF88A959303D954A546A0E3343D40879FF9A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
Manifest number: A4
Signing time: Fri 31 Jan 2025 10:13:11 +0000
Manifest this update: Fri 31 Jan 2025 10:08:11 +0000
Manifest next update: Sat 01 Feb 2025 13:12:11 +0000
Files and hashes: 1: D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer (hash: J14RTmYMzwenBicjUfmrjyMu93QKXFK8qxck8woMFpU=)
2: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: 6jfRmzLiuvscSRM3J14+G2Qt5apZO//mI9uM3iONphQ=)
3: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: LizvwJL2nprToghg5qQqGpfO97UmahWuyDJ1ZaaEJS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cf:88:a9:59:30:3d:95:4a:54:6a:0e:33:43:d4:08:79:ff:9a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Jan 31 10:08:11 2025 GMT
Not After : Feb 1 13:12:11 2025 GMT
Subject: CN=A826EEE3A06B472E4604A8E693D49F2465D48C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:17:29:16:a9:41:19:66:84:d2:fc:88:c1:99:
f4:8c:cd:04:02:d7:34:f1:38:00:e8:1a:11:d0:f6:
51:0c:f4:42:fb:64:a8:3f:44:69:4c:b7:f7:34:ab:
7c:50:87:74:c0:69:3c:79:74:81:39:02:0e:d0:6b:
a0:f5:e3:69:97:95:a7:59:b7:17:5e:1f:8a:0f:21:
85:9a:0f:2c:28:cd:f7:8d:35:3b:82:86:c3:3d:a8:
e9:28:6f:4e:65:63:8f:51:dd:a4:5b:f1:f7:d2:61:
f4:39:cf:dc:20:7e:a5:b4:59:0c:2e:8e:af:f3:d4:
fb:59:fd:c4:94:ea:58:64:00:ae:25:08:f0:e0:75:
31:39:c4:0d:42:28:32:3b:d9:56:d5:cd:5a:9f:bf:
0e:f1:6e:c9:44:d8:fe:75:3b:73:54:e1:ad:47:e6:
9e:11:ab:69:a6:89:64:be:9a:9e:5c:ac:65:34:26:
00:0b:dc:fc:43:ef:6c:fa:93:5c:0d:ca:e7:be:6a:
69:59:9b:da:19:fc:7e:66:d1:e0:90:b1:4f:e6:52:
45:58:40:35:12:ca:e9:90:8e:1c:ba:66:29:99:7d:
a8:b8:d6:1b:9b:05:81:68:ab:8e:ff:7e:90:09:5b:
0c:91:7a:41:40:6d:39:ac:44:bb:d0:f1:a3:35:4c:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:EE:E3:A0:6B:47:2E:46:04:A8:E6:93:D4:9F:24:65:D4:8C:90
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3c:82:d2:19:83:da:bd:99:3d:80:fb:19:8f:35:7d:8c:36:
92:f6:d6:76:32:e8:cd:af:4c:56:70:45:b2:d5:52:cf:ab:6d:
cc:9d:25:89:6d:aa:ff:65:3f:bf:e5:8e:b7:b9:44:13:55:69:
e8:90:3f:3b:07:6b:bb:fd:23:77:87:e3:a3:83:45:e7:8a:37:
17:8f:c2:dc:97:e1:d9:3e:56:30:63:f9:d7:58:72:cc:ac:e3:
33:fa:cc:b5:ff:a9:bd:c1:63:4e:a8:bf:a0:e0:d1:10:59:75:
56:49:57:66:a8:89:65:db:3f:87:d9:02:55:ee:34:b3:59:46:
3c:73:ca:cb:f2:a5:66:9f:26:1f:98:fd:7b:e9:de:10:4d:e1:
c7:64:26:0b:9e:17:e2:f3:26:fb:52:c3:4e:78:70:43:36:28:
91:31:32:30:ab:14:a4:e4:f5:7f:4a:e0:34:05:c8:b0:6d:ce:
91:35:a9:96:60:c2:1c:df:c0:3d:4a:cf:f5:2d:5b:d3:40:5b:
f8:e4:ce:2c:a5:4c:cd:1e:44:b8:7d:6f:b1:39:c6:0c:38:19:
4d:61:11:f4:43:5a:73:47:2c:ea:81:9e:c3:82:e1:94:f1:7d:
ba:88:5c:84:9f:ea:1c:81:7e:c1:66:5a:3f:99:49:85:21:d7:
0f:f2:cc:e3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUa8+IqVkwPZVKVGoOM0PUCHn/mlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi
ZjNhODA1NzAeFw0yNTAxMzExMDA4MTFaFw0yNTAyMDExMzEyMTFaMDMxMTAvBgNV
BAMTKEE4MjZFRUUzQTA2QjQ3MkU0NjA0QThFNjkzRDQ5RjI0NjVENDhDOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCFykWqUEZZoTS/IjBmfSMzQQC
1zTxOADoGhHQ9lEM9EL7ZKg/RGlMt/c0q3xQh3TAaTx5dIE5Ag7Qa6D142mXladZ
txdeH4oPIYWaDywozfeNNTuChsM9qOkob05lY49R3aRb8ffSYfQ5z9wgfqW0WQwu
jq/z1PtZ/cSU6lhkAK4lCPDgdTE5xA1CKDI72VbVzVqfvw7xbslE2P51O3NU4a1H
5p4Rq2mmiWS+mp5crGU0JgAL3PxD72z6k1wNyue+amlZm9oZ/H5m0eCQsU/mUkVY
QDUSyumQjhy6ZimZfai41hubBYFoq47/fpAJWwyRekFAbTmsRLvQ8aM1TIMbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqCbu46BrRy5GBKjmk9SfJGXUjJAwHwYDVR0j
BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx
NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4
NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04
YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx
QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzyC0hmD2r2ZPYD7GY81
fYw2kvbWdjLoza9MVnBFstVSz6ttzJ0liW2q/2U/v+WOt7lEE1Vp6JA/Owdru/0j
d4fjo4NF54o3F4/C3Jfh2T5WMGP511hyzKzjM/rMtf+pvcFjTqi/oODREFl1VklX
ZqiJZds/h9kCVe40s1lGPHPKy/KlZp8mH5j9e+neEE3hx2QmC54X4vMm+1LDTnhw
QzYokTEyMKsUpOT1f0rgNAXIsG3OkTWplmDCHN/APUrP9S1b00Bb+OTOLKVMzR5E
uH1vsTnGDDgZTWER9ENac0cs6oGew4LhlPF9uohchJ/qHIF+wWZaP5lJhSHXD/LM
4w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:01:27 2025 by rpki-client