Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: cXGn1TwccQo8uSFK0TZ2sLRt4ma9hQUKCS7EGgF3Lpg=
Subject key identifier: 98:36:E8:BD:1B:6E:6A:46:A4:CC:4C:01:8A:A4:49:78:9E:EB:05:A8
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 458383001D42F5F11752D0887EC08B702692B1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 44
Signing time: Thu 30 Jan 2025 21:01:42 +0000
Manifest this update: Thu 30 Jan 2025 20:56:42 +0000
Manifest next update: Sat 01 Feb 2025 22:21:42 +0000
Files and hashes: 1: AS209735.asa (hash: LH39xuFInQIUN2uaAZuKOVXU5e6fBODPhrhpjvBdNYs=)
2: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: N5MKo7fx0BtSbOi/+aaLlNC/ns3ZAfMWEYO3sP8XOyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:83:83:00:1d:42:f5:f1:17:52:d0:88:7e:c0:8b:70:26:92:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Jan 30 20:56:42 2025 GMT
Not After : Feb 1 22:21:42 2025 GMT
Subject: CN=9836E8BD1B6E6A46A4CC4C018AA449789EEB05A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:27:08:08:db:d8:cf:05:02:cd:4a:a4:ef:
36:c9:2c:a6:d3:3c:d8:7e:30:9c:0d:14:c7:d6:a7:
c5:b0:f4:2d:5d:d1:25:05:b6:b1:35:a0:a0:7b:36:
f0:c7:19:6d:9d:c5:7b:43:08:5e:c1:44:35:09:a3:
81:56:7d:56:13:bd:5a:af:b7:e5:0b:00:2b:e6:e3:
04:7d:19:46:18:cc:e6:dc:d0:23:f9:b7:41:2b:28:
b0:57:c7:8a:4a:3e:cb:49:86:97:37:c5:8f:38:a3:
4a:12:d9:f7:53:1a:6b:8e:de:30:9b:3b:46:f0:51:
68:e6:f5:db:a8:4c:d7:28:78:d6:73:ce:34:a4:7e:
0d:ce:18:d6:e8:8b:95:7b:7b:6b:9d:cf:13:9b:7d:
f0:2b:c3:2c:6a:45:2e:e4:00:80:86:85:01:3c:00:
9e:f3:d2:69:7f:bc:f5:b2:c4:6b:61:36:63:4c:f8:
16:2e:37:0b:c7:07:ae:c8:56:b4:45:85:00:62:0a:
95:e5:94:eb:e3:59:30:02:af:cf:f6:34:ae:28:d3:
5c:79:eb:56:dd:91:0f:3e:e1:ec:a1:ee:9f:96:7b:
af:8c:f1:35:ff:ae:c2:33:fd:6d:e9:49:ed:20:cb:
7e:81:70:c8:ae:79:93:f8:35:85:3e:a8:0a:2d:d7:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:E8:BD:1B:6E:6A:46:A4:CC:4C:01:8A:A4:49:78:9E:EB:05:A8
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:0a:a5:c4:f2:d3:c8:3e:b6:55:dd:1f:ae:6e:df:47:c6:
e8:97:ce:f3:0a:00:c8:1f:bc:bd:28:e6:ac:52:7f:a9:f0:2c:
33:d0:91:7c:9e:39:13:16:7a:9c:7e:d2:01:cb:0d:4d:46:6a:
c3:e2:1d:e2:c5:06:44:40:fd:1e:da:d9:e1:8f:91:a5:61:ac:
8d:b3:1b:a4:c3:eb:cf:bd:be:9a:f2:0b:9b:ae:11:68:2c:00:
d5:f4:3b:91:61:ee:7a:a8:32:7c:04:a9:f4:ba:6e:31:1d:27:
58:66:33:a9:e0:85:34:50:af:57:ef:f8:6e:a4:7f:f5:aa:6b:
5f:a6:a2:b2:f7:c2:90:00:c1:58:e0:7f:cc:09:f0:b2:35:a4:
74:52:1c:26:9b:ca:ab:69:22:e0:79:ae:b7:ed:bf:c7:d8:9e:
87:00:34:96:48:40:42:03:1a:de:9e:82:0f:17:71:a6:09:46:
b1:a2:de:bf:0c:4c:bc:2b:f0:e3:cf:53:72:af:4d:45:e5:e2:
cb:cb:62:91:25:5b:18:08:38:24:12:ad:7e:89:a8:06:b2:08:
f2:df:95:30:63:e0:e8:64:29:77:8d:75:0f:0f:93:c5:fa:eb:
1c:7c:36:cf:2c:d3:e4:6a:de:c7:f4:a6:f2:26:7c:68:9a:48:
b7:e9:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:54 2025 by rpki-client