Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier: /cA/j/JWqqZMs9kdvkr5frkkJXQKoDy1zN95ZgOwMcY=
Subject key identifier: 23:CA:88:95:A8:54:2F:FE:5E:00:68:88:4E:25:1A:AA:95:1D:80:2E
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer: /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial: 4A8E072E2F0F3E775B36CDC5ED09851F7B070F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number: 4F
Signing time: Thu 30 Jan 2025 21:01:42 +0000
Manifest this update: Thu 30 Jan 2025 20:56:42 +0000
Manifest next update: Sat 01 Feb 2025 22:40:42 +0000
Files and hashes: 1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: HJchMhvM/euylmuMORas3CiXo/dzf1gIrh5KLCCxVXA=)
2: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8e:07:2e:2f:0f:3e:77:5b:36:cd:c5:ed:09:85:1f:7b:07:0f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Validity
Not Before: Jan 30 20:56:42 2025 GMT
Not After : Feb 1 22:40:42 2025 GMT
Subject: CN=23CA8895A8542FFE5E0068884E251AAA951D802E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:b6:e7:f3:ce:74:c0:78:d7:2f:c9:dd:55:
b0:1e:34:e1:f0:32:10:c8:96:b3:1e:fe:e7:ba:d9:
87:2a:0f:50:84:f5:bd:5e:64:a0:85:1c:65:73:90:
7b:0f:d1:5b:c7:64:de:ad:0a:39:39:89:b8:9b:f3:
58:b2:21:e0:4f:42:36:91:7f:ff:3a:0c:a0:36:3a:
e6:26:2d:95:7b:c9:b1:d7:23:4a:2f:ba:3d:1e:d8:
59:12:a7:bf:f0:d9:b4:e4:5b:8b:64:3a:05:1d:ff:
4b:c1:90:e2:db:56:b4:19:bd:08:de:53:a5:16:52:
21:f4:6c:3c:94:44:c0:53:4b:aa:01:63:7d:0b:55:
19:da:87:58:d3:84:e9:ab:0f:80:cb:fb:39:c7:96:
ce:a0:07:3c:b3:46:70:72:18:b5:e0:a9:82:76:7a:
96:4b:b2:a2:17:c0:6c:26:21:61:a6:38:77:20:4e:
12:5b:a2:29:7e:1b:45:74:71:bf:2e:21:b1:d2:f5:
d9:48:57:4b:97:d9:e9:23:24:56:f2:2b:fe:7e:dc:
06:00:20:ce:fb:fa:9d:2f:1a:de:de:87:ce:7a:cb:
ea:c2:34:49:9a:c9:cd:07:87:88:7f:09:a8:43:82:
92:55:da:04:04:61:de:3b:75:70:90:44:f8:8e:7e:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:88:95:A8:54:2F:FE:5E:00:68:88:4E:25:1A:AA:95:1D:80:2E
X509v3 Authority Key Identifier:
keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c6:64:76:58:29:74:c7:b1:4a:3c:14:f8:64:11:d1:08:1e:
73:8e:9f:42:16:6e:3d:8f:01:28:ac:97:03:77:83:2f:5d:1c:
4d:b2:f8:8e:de:7b:38:1c:26:28:9b:41:5b:f5:0c:ed:c9:3c:
54:34:94:21:8e:8c:ad:24:1c:a6:fd:0e:2e:3e:a5:bc:a3:19:
46:9e:ea:18:27:99:88:cd:7f:c0:62:cb:6d:2a:65:f9:08:df:
4c:84:df:0b:90:61:61:7a:dd:da:be:f3:04:a3:d8:ae:a9:10:
df:ad:7b:f9:cf:41:ba:81:74:e7:a9:81:d9:6a:1c:8e:1a:dc:
8b:e6:61:7d:83:a3:e2:e7:d2:3a:64:28:44:88:f8:db:3a:e3:
e5:62:ef:d8:45:6f:52:95:b8:02:bb:4d:49:c4:10:d3:f6:22:
26:c3:87:99:33:aa:ad:3c:9c:76:be:79:4b:ba:5c:72:ad:e7:
26:6a:a9:8e:77:96:d9:47:85:1c:42:48:1d:70:38:9b:3d:1c:
a6:53:5e:04:f5:79:df:35:13:de:4a:4e:8b:89:03:b8:ec:fb:
2c:cd:1a:56:f2:c4:c5:a8:9e:ee:83:2a:0b:eb:45:31:0d:02:
87:51:9c:3b:19:9d:38:07:13:01:fd:05:9e:89:1b:de:20:32:
55:41:3b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:41 2025 by rpki-client