Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: ROk52xh/54Tg9LBLZOzXfrmRwG9+q6/zU5GwaqgT58U=
Subject key identifier: 42:8A:B1:A8:48:C3:6F:78:B3:E0:47:8F:2D:6D:B2:D1:A2:A5:BA:C9
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 3BE831A0C438A8EA986E2C1922B65B4B373A87B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 50
Signing time: Thu 30 Jan 2025 21:01:42 +0000
Manifest this update: Thu 30 Jan 2025 20:56:42 +0000
Manifest next update: Sat 01 Feb 2025 22:12:42 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: fsarLF+lME3CZ6Os6LvRu74ubiTaH9f2VFgtrKmfrMw=)
2: AS44355.asa (hash: suHXzL7+p9pEhy3V1lXLsc7/MuuAkxWi6AeYlUGu+1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e8:31:a0:c4:38:a8:ea:98:6e:2c:19:22:b6:5b:4b:37:3a:87:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Jan 30 20:56:42 2025 GMT
Not After : Feb 1 22:12:42 2025 GMT
Subject: CN=428AB1A848C36F78B3E0478F2D6DB2D1A2A5BAC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:50:83:5a:8c:c0:51:d5:f9:91:da:c6:68:
2c:2b:ac:25:3e:de:bd:9e:42:6e:bb:74:72:e7:4e:
c2:d9:68:9a:6c:12:9d:4f:f9:16:54:bd:d3:aa:cb:
1f:15:9c:9d:5f:65:48:79:2f:9a:76:48:d5:43:1a:
35:e6:29:a8:03:56:2d:ac:be:a2:e9:42:cd:26:17:
26:b2:3e:39:c2:e8:73:1b:92:f4:45:60:c0:c6:01:
f3:bf:85:ad:d2:08:b5:ec:cb:48:3a:1b:cb:52:18:
5c:51:ca:20:85:48:19:80:68:7c:e9:75:fb:68:2e:
00:51:0b:cb:eb:7b:f2:51:55:65:a7:dd:31:46:27:
62:aa:51:05:0a:11:07:65:8d:b3:e5:e2:4b:31:47:
c9:6e:e6:d6:d8:b8:b1:c0:09:39:f3:4d:14:6f:a7:
d0:20:fa:5c:27:c5:88:9b:57:d9:d4:70:8f:e5:d6:
1a:6c:ab:8f:ae:62:39:25:d1:e8:d9:f9:21:e0:72:
4d:e8:0f:46:a1:8f:3f:eb:72:49:83:57:97:9e:81:
3c:13:65:8a:4a:9d:88:70:5d:f2:f2:fb:11:f1:1e:
e9:9b:50:4a:46:4e:d4:7d:f6:05:75:2c:a1:42:31:
34:41:9b:75:30:e2:b0:4c:a0:e1:c2:0a:7b:40:3f:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:B1:A8:48:C3:6F:78:B3:E0:47:8F:2D:6D:B2:D1:A2:A5:BA:C9
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:b3:db:1c:12:29:9b:a9:92:c4:2b:fb:b6:40:19:e6:44:
fd:3f:1a:5f:43:36:9f:db:ac:23:48:0e:0b:df:4a:e1:52:bf:
af:6e:20:62:27:fe:80:cb:4e:5b:a8:76:37:4c:75:10:1e:13:
c4:c0:7a:b2:9b:80:34:1f:45:07:bf:3b:e2:d7:87:6b:2d:df:
e7:82:17:6d:67:54:a1:a1:e9:ee:8a:95:43:51:80:1e:7b:44:
1e:d3:0b:a1:c1:d2:c1:94:11:4e:49:fd:f0:ae:ea:23:63:1a:
56:f6:01:ea:da:06:62:46:84:20:8e:52:3d:ed:c2:d3:f3:6c:
f2:c0:62:91:bf:16:d7:a8:03:f4:0c:82:92:d9:08:72:f3:5e:
08:82:83:cd:37:7d:95:4a:3e:d7:9b:8d:e9:b5:51:bd:a4:54:
21:b5:9b:8c:96:7a:09:2b:e1:56:e2:c7:2b:16:d0:e1:e0:93:
d7:e9:52:a4:a0:63:f8:90:fa:dc:25:24:4d:31:e8:ed:e7:7b:
88:d2:14:5b:3f:39:9e:72:72:f0:92:7a:53:b4:5a:d7:ff:b5:
1f:8f:3c:a4:68:a0:9c:9b:93:72:5e:99:af:4a:30:0b:d9:ae:
7c:b8:12:de:52:8c:12:3f:68:a4:f9:ab:03:05:e3:38:66:a8:
a5:5f:16:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:38 2025 by rpki-client