Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier: 9EOuF5UnGsLgGyMwNeFoM9Q/PF+frRkxRtJ3vc94DpA=
Subject key identifier: BF:F3:C3:2A:77:B8:F5:FF:C8:A8:AF:63:AD:FB:97:72:71:38:14:E7
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 52C1F6412A5431F72D60C782229EBA395C1351CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number: 29
Signing time: Fri 31 Jan 2025 00:15:57 +0000
Manifest this update: Fri 31 Jan 2025 00:10:57 +0000
Manifest next update: Sat 01 Feb 2025 03:46:57 +0000
Files and hashes: 1: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: Xq/UD/JSY86zBJv5AHCivbL+CO08v9/NUdpe/3ZFmlI=)
2: 3139342e33342e3235352e302f32342d3234203d3e203536353934.roa (hash: x2RfjpSN3xicSqXOSngzYM3QyNU0bV4bA1DJ2SOK7nM=)
3: 3138352e3231332e3234392e302f32342d3234203d3e2039323332.roa (hash: G89TCZp2wvRal+boy+AoEliIkd5asPEmqXLjDSX3AEs=)
4: 3138352e3231332e3235302e302f32342d3234203d3e20323135323837.roa (hash: OuMYxXICssNOZJDRGMEnGTcFO5vZgXdH+8Ld5wKU7zA=)
5: 3139342e33342e3235332e302f32342d3234203d3e20323135323837.roa (hash: UVjcJOPoynn3xsUdSCmcs1KkowTSw1I56tsbUhGYHTg=)
6: 3138352e3231332e3234382e302f32342d3234203d3e2039323332.roa (hash: yrSC0birtnydpnbjo/rNrx0iogZg2oT/xPc762BHT94=)
7: 3139342e33342e3235322e302f32342d3234203d3e203239383032.roa (hash: MPp6Igfxvoo4H6VVtRMvz7wqXYqi9rOeS8G4+bL/Qls=)
8: 3138352e3231332e3235312e302f32342d3234203d3e203233343730.roa (hash: AH3oeu7z77VRsoVVR4srUimECF5mJwhXNeKuseb6qFA=)
9: 38352e3131372e3233302e302f32342d3234203d3e20323132313530.roa (hash: TNWvmVMYUNTjv7XUOYgDcfltzLMqNiQOo1MP2jb0Lpw=)
10: 38352e3131372e3233302e302f32342d3234203d3e20323037333838.roa (hash: NLXB2mTDGa3YDb/AnnW0XQvfnA0Ouchpu/TPvnHlwaA=)
11: 38352e3131372e3232382e302f32342d3234203d3e20323037333838.roa (hash: 1/tBNS+kodwg8jeozfe8VuWvUrIAtLdwZSa7YwWGM6g=)
12: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hBCTJH2VP/g2W82hp9JFwDkEQwn2f5ZxdgSFMedjM7Q=)
13: 38352e3131372e3232392e302f32342d3234203d3e203233343730.roa (hash: HUTmCm2TImDs0Yhhl7hgdJ8IlEK4xOTxiCr+5rFxRZI=)
14: 38352e3131372e3232382e302f32342d3234203d3e20323132313530.roa (hash: pfmSTee1u3cZjmACBl/YNO8VI3gRYWTr8wb0lfXQGMI=)
15: 38352e3131372e3233312e302f32342d3234203d3e2039323332.roa (hash: wxXqnIo8VdPb9Dqirf8u37/+DzCmzUMAlr9dMT37N+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c1:f6:41:2a:54:31:f7:2d:60:c7:82:22:9e:ba:39:5c:13:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jan 31 00:10:57 2025 GMT
Not After : Feb 1 03:46:57 2025 GMT
Subject: CN=BFF3C32A77B8F5FFC8A8AF63ADFB9772713814E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:5b:6d:96:76:13:9b:d0:37:7c:32:e7:f5:
27:03:ab:39:3a:91:39:8e:4d:09:5e:4c:16:ed:69:
75:1e:23:28:d4:6d:b1:04:1f:9c:81:d4:49:58:e6:
74:9b:64:2f:1c:a3:b5:5f:06:45:fe:6a:14:ef:53:
3e:e8:a8:16:56:9d:50:59:77:12:9d:1b:3f:00:db:
60:20:01:c2:f2:c2:78:ad:fe:fe:24:a6:30:be:80:
6d:cf:26:4f:8f:9d:9d:56:33:90:3e:40:55:ed:fa:
79:c2:0a:6d:b0:14:2a:16:6c:e1:05:06:e3:3d:67:
5b:ee:52:b7:57:0e:69:62:09:44:bd:a8:f2:40:e9:
36:6e:6d:a4:6b:83:5d:7a:73:fe:04:6c:2a:24:49:
ca:87:6f:7c:b1:05:06:9e:77:79:a5:02:bf:be:04:
b0:8b:79:2f:ef:c6:82:44:36:34:9a:3b:21:a9:e6:
c8:a4:0f:78:72:ff:91:23:cc:32:07:87:2f:5f:dd:
b8:24:6a:dd:24:e0:27:1b:66:1a:c5:5d:fe:a4:3c:
d3:dc:a1:98:fa:de:ca:a8:a5:13:99:b3:e9:3f:4a:
4b:63:ac:11:9d:66:22:6c:73:eb:b8:87:a7:fe:f1:
d9:87:9b:2b:1e:6a:ce:37:45:39:0a:aa:c4:e8:9d:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:C3:2A:77:B8:F5:FF:C8:A8:AF:63:AD:FB:97:72:71:38:14:E7
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:2f:13:02:2c:fa:58:c4:e8:02:5a:d5:11:25:c8:01:84:
98:49:21:d5:15:af:53:2a:f9:e6:ca:c9:df:b2:e3:00:f6:51:
57:58:91:ac:d9:0d:26:b4:25:57:3c:4f:08:9b:83:fb:22:a3:
18:22:37:fd:2b:ca:2a:a8:43:92:90:fa:8b:05:c4:ae:e1:3c:
f7:51:f6:25:b4:08:45:04:aa:bb:eb:fb:92:ee:d5:bf:b3:9e:
42:d1:e5:6c:ba:5f:09:75:e1:ce:0c:82:35:e4:db:2f:fa:c4:
0c:b3:5f:dc:4f:bc:18:6c:9e:e0:88:8a:7b:81:06:96:4f:a3:
54:64:7c:7f:fa:58:d9:ce:cd:ab:07:bb:06:38:a4:90:79:cf:
fa:f1:37:eb:a0:03:de:80:d0:b4:da:7b:25:26:68:93:40:6b:
be:6f:55:18:7c:da:05:0b:41:5c:4e:94:21:16:a8:6a:7c:cb:
0f:c1:a5:c4:6c:62:7f:01:66:21:c4:38:83:4d:e3:4f:07:2e:
58:b4:62:b0:91:22:cb:be:59:70:c8:8d:46:0f:c3:e3:de:b1:
9c:38:ce:98:24:9a:8c:60:01:53:6a:a6:7f:da:2d:59:95:67:
0f:a7:19:6b:32:1c:ed:cc:85:60:88:c7:bf:35:3c:c8:ff:fc:
31:62:50:8e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUsH2QSpUMfctYMeCIp66OVwTUc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNTAxMzEwMDEwNTdaFw0yNTAyMDEwMzQ2NTdaMDMxMTAvBgNV
BAMTKEJGRjNDMzJBNzdCOEY1RkZDOEE4QUY2M0FERkI5NzcyNzEzODE0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGf1ttlnYTm9A3fDLn9ScDqzk6
kTmOTQleTBbtaXUeIyjUbbEEH5yB1ElY5nSbZC8co7VfBkX+ahTvUz7oqBZWnVBZ
dxKdGz8A22AgAcLywnit/v4kpjC+gG3PJk+PnZ1WM5A+QFXt+nnCCm2wFCoWbOEF
BuM9Z1vuUrdXDmliCUS9qPJA6TZubaRrg116c/4EbCokScqHb3yxBQaed3mlAr++
BLCLeS/vxoJENjSaOyGp5sikD3hy/5EjzDIHhy9f3bgkat0k4CcbZhrFXf6kPNPc
oZj63sqopROZs+k/SktjrBGdZiJsc+u4h6f+8dmHmyseas43RTkKqsTonSp1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUv/PDKne49f/IqK9jrfuXcnE4FOcwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03
YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG
ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGgvEwIs+ljE6AJa1REl
yAGEmEkh1RWvUyr55srJ37LjAPZRV1iRrNkNJrQlVzxPCJuD+yKjGCI3/SvKKqhD
kpD6iwXEruE891H2JbQIRQSqu+v7ku7Vv7OeQtHlbLpfCXXhzgyCNeTbL/rEDLNf
3E+8GGye4IiKe4EGlk+jVGR8f/pY2c7Nqwe7BjikkHnP+vE366AD3oDQtNp7JSZo
k0Brvm9VGHzaBQtBXE6UIRaoanzLD8GlxGxifwFmIcQ4g03jTwcuWLRisJEiy75Z
cMiNRg/D496xnDjOmCSajGABU2qmf9otWZVnD6cZazIc7cyFYIjHvzU8yP/8MWJQ
jg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:33 2025 by rpki-client